Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json)
Hash identifier: o2HuW5JuQPCrzdTI7cHPG4hj2uZyZE9lE+ypnCOrQ0o=
Subject key identifier: CC:73:BD:A5:B2:24:FB:92:2C:33:80:C8:8B:19:A3:71:A2:B9:98:2A
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 0196876D57990D6FB9451C439B82B311D9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
Manifest number: 0BF9
Signing time: Wed 30 Apr 2025 16:00:12 +0000
Manifest this update: Wed 30 Apr 2025 16:00:12 +0000
Manifest next update: Thu 01 May 2025 16:00:12 +0000
Files and hashes: 1: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: gjeJHapkcLdgyqaA1WmA3uKJEfS1DTstJLPssPwBM5w=)
2: beiUjzIIFq8lUZEsjU5aHKjNnJA.roa (hash: mFm580c3qaH3SmCWZbvTiuZ0e3oedku3mVQP4lTuq5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:57:99:0d:6f:b9:45:1c:43:9b:82:b3:11:d9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: Apr 30 16:00:12 2025 GMT
Not After : May 1 16:00:12 2025 GMT
Subject: CN=cc73bda5b224fb922c3380c88b19a371a2b9982a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:8d:b5:38:20:ef:03:53:c7:19:42:dc:ea:
55:59:7f:44:2a:c0:d9:16:36:e3:f6:fd:7a:f9:7d:
ca:7c:bf:42:69:6c:92:ad:73:79:2f:5a:d7:70:62:
3b:f4:a5:32:12:24:ec:ad:7c:36:6a:a4:6e:a3:ca:
13:c6:65:2a:1e:0a:cb:20:14:b6:55:9c:b5:ae:c8:
69:34:e7:79:ec:0c:1b:f6:f3:9a:3e:1c:58:eb:fd:
83:32:e5:01:37:52:69:8a:46:40:96:c8:b4:9c:be:
16:03:5d:8f:33:7d:08:9d:12:28:d6:09:43:47:27:
88:2e:fc:e1:0b:c0:66:3d:da:ed:78:a3:fc:b8:b0:
56:ff:ae:54:a9:1f:79:55:f6:1a:4b:44:97:a7:21:
42:45:c1:5d:b6:dd:ef:00:11:3a:59:65:a1:45:6c:
6c:35:a8:f1:97:70:86:ba:fa:82:c0:f6:41:76:85:
20:ec:e5:df:17:78:00:21:43:df:a0:c1:48:35:c4:
4c:3e:68:39:ca:c5:37:54:e7:55:7b:c9:6e:e6:1f:
e7:5f:8a:c6:9f:8f:d7:24:7b:d6:07:d4:8d:74:44:
f2:53:a8:e9:5e:d8:6e:72:c2:87:05:b8:d5:81:44:
42:5e:24:b2:98:00:a7:3e:77:c9:8f:35:09:2d:8b:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:73:BD:A5:B2:24:FB:92:2C:33:80:C8:8B:19:A3:71:A2:B9:98:2A
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:68:c9:04:e9:61:c5:d7:2c:7d:8a:16:8c:7b:24:30:67:e0:
51:49:4a:3b:f6:3b:ee:9e:64:0e:2a:4f:5f:d2:4d:c6:52:8a:
3b:71:e8:18:1e:b1:46:62:b2:e9:6b:88:2f:8b:61:67:a5:c7:
33:55:f8:4c:e3:b8:b8:a2:f3:b0:5b:da:b3:24:0a:b9:7b:59:
f5:68:54:c8:52:3e:2b:e3:a6:20:dc:13:d9:73:be:1b:f2:f9:
9a:aa:25:ef:01:44:68:42:5a:26:11:e6:71:36:2f:8b:da:b9:
23:50:35:12:21:8b:ab:df:b1:4e:50:bf:13:08:40:f6:62:c3:
ce:64:13:d2:1e:1d:e3:3b:c7:d0:2f:e7:79:8d:32:11:ad:f7:
6d:2c:e1:f2:aa:74:1a:d4:5a:4e:88:db:2e:fe:13:f4:e6:0c:
9d:6c:f2:a8:a6:93:77:d5:d6:c6:64:26:e2:9b:10:96:04:12:
76:ea:db:a4:ac:c9:06:b5:7b:07:aa:95:35:df:cb:c6:82:a5:
6f:82:13:37:b2:d0:83:67:b6:25:64:e6:96:ef:6b:ac:f3:24:
1c:5c:dd:27:4a:a1:02:3d:5a:5b:f0:07:90:8d:76:32:3e:ff:
50:72:0b:a5:fa:da:de:7f:11:99:88:f0:c1:48:bd:1f:e3:f4:
c5:81:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:54:07 2025 by rpki-client