Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
File: nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json)
Hash identifier: 3Shc9BbMr5oUXT202NyAsgLIggupmpa9vwF9cypdMac=
Subject key identifier: BB:45:56:F5:0D:93:8A:77:4A:75:F3:8F:75:71:3F:75:62:2F:61:2A
Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
Certificate issuer: /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Certificate serial: 019688B759ECD621315C03115E50B7DA7D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
Manifest number: 0467
Signing time: Wed 30 Apr 2025 22:00:39 +0000
Manifest this update: Wed 30 Apr 2025 22:00:39 +0000
Manifest next update: Thu 01 May 2025 22:00:39 +0000
Files and hashes: 1: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: pSe3bWEeWNW2kiWWlbL7AK1z+C1CChshyU/PvBUVbVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:59:ec:d6:21:31:5c:03:11:5e:50:b7:da:7d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Validity
Not Before: Apr 30 22:00:39 2025 GMT
Not After : May 1 22:00:39 2025 GMT
Subject: CN=bb4556f50d938a774a75f38f75713f75622f612a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:87:c3:ff:91:1e:2b:e9:3b:d0:51:d5:b7:
65:80:54:b6:9e:37:8d:4d:b9:f5:de:6f:70:67:56:
a3:d7:03:ac:53:2c:40:45:47:74:08:ea:88:9a:8a:
7b:20:e1:49:4f:eb:7d:7a:75:98:6c:13:ec:d7:6a:
88:4b:11:92:96:83:74:ca:79:29:a1:73:e3:f7:c5:
61:5e:d8:aa:a0:99:56:5b:05:98:77:fe:1d:44:4a:
12:42:d8:1e:84:3c:51:9a:c6:99:66:8e:c9:2d:13:
06:a6:b4:98:ae:f2:bc:5b:52:a4:7f:be:23:de:95:
c8:03:fe:91:e5:78:b5:28:ec:b2:be:5a:00:90:cf:
01:8a:49:20:e1:9c:c8:93:7a:d8:6c:61:ce:9e:d8:
0d:86:ac:1e:22:92:55:b2:70:56:9f:dd:a5:f4:02:
2d:c5:b2:77:12:77:5c:32:8a:7d:a1:49:e5:5c:17:
9c:0e:94:37:13:56:93:f0:ba:d3:60:a9:0c:4c:46:
15:8b:ef:4f:79:0d:67:9c:f0:c8:43:b7:f2:97:bd:
17:70:9b:69:72:22:20:2e:7f:37:93:65:9d:31:67:
a4:de:02:45:48:5b:e4:5d:40:75:0b:28:66:57:9b:
1b:62:84:1a:2a:a6:1f:7c:c6:2e:d6:1d:a1:b3:1d:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:45:56:F5:0D:93:8A:77:4A:75:F3:8F:75:71:3F:75:62:2F:61:2A
X509v3 Authority Key Identifier:
keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:11:b2:75:32:fe:8e:c6:1d:fa:66:92:eb:7f:80:df:da:53:
b6:0e:42:1a:18:d5:03:61:0d:7e:ed:83:05:e2:ca:09:3c:bb:
4f:50:fe:a9:e0:58:42:a4:a0:cb:23:4a:ea:bc:2a:d1:12:7e:
8b:b3:d7:a7:f3:6d:fb:18:33:a7:d2:b8:5d:15:49:52:53:65:
0c:21:01:94:a1:c6:f0:35:dc:11:b8:18:65:c6:5c:22:43:e2:
53:f9:94:c1:b2:e1:dc:7a:0d:a3:02:23:cf:df:d7:9c:a6:73:
f8:26:1d:a3:9d:56:42:7e:c8:04:5e:d2:71:84:e5:06:0c:9c:
e8:fd:b8:cf:15:17:f8:cc:79:53:34:b2:48:04:8a:e3:50:36:
26:b7:29:2f:b4:b2:9b:ca:e5:ae:db:4b:98:ac:24:64:0c:0f:
ab:9a:14:30:79:58:f3:dc:17:a5:fd:a3:64:41:73:55:47:9e:
8c:73:e5:a5:96:af:39:e2:42:c3:e2:da:be:65:22:e6:bc:30:
e7:3b:27:7f:f8:d9:39:3a:6e:c1:33:da:dd:c9:0d:36:7c:16:
c7:aa:f7:04:27:4a:a7:50:55:18:50:28:fd:de:64:f8:ec:bd:
a0:47:04:3f:e5:23:0a:57:ad:22:f8:80:ac:00:6b:4d:51:18:
93:7d:c6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:47:14 2025 by rpki-client