Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
File: nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json)
Hash identifier: 0FkFyqGmy+wYzC24Mdse4KK/VZS/OsY34+rRUk3vwzE=
Subject key identifier: 1E:5F:CC:5B:EA:45:E0:D2:DF:0A:60:FF:CE:9E:F3:F8:CA:AA:A4:C8
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 0196767A5E4C695AFE24B0BB59C76D09E268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
Manifest number: 100A
Signing time: Sun 27 Apr 2025 09:00:53 +0000
Manifest this update: Sun 27 Apr 2025 09:00:53 +0000
Manifest next update: Mon 28 Apr 2025 09:00:53 +0000
Files and hashes: 1: B5L5vO55nBhfniljBpOUow8aXpw.roa (hash: DIMd34dyf8uJUIUl3TvafcV9IS2e08ZcTMFZLeGk8KM=)
2: JafDMsZo_2WlBv1_b3upjycXmLU.roa (hash: cGcJ9xKOVuAlrxxUBxsd3T744wFpR+9phZElM6fNzW0=)
3: SHsQx5nLK3je9BRJdGpJA5FmBJw.roa (hash: w1LS0Na0/a/or8fsG3pHVRaGF64EW4fSRED25Ol57DY=)
4: bVTa17baMARG71NZ_lURgWWh_4Y.roa (hash: A1ALFNaBHdD7deqRm4EdGoE1FRnMJSkvg8oyd+Kqmgc=)
5: lkc-0MlfE6wjagT9foeguXGZhBk.roa (hash: Dk9iF0id/HpCNZDFa+BXpH9AMMGx3UOmasYJ8e7rqkM=)
6: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: QzmfAEiKgXx7De6n0SProPld/HRxt3B68XvEYJClpmI=)
7: rfouL44lCXKFlJx3f-T9zbjuGS4.roa (hash: tCYRZzQeGaABrV6yDW5xOTTpQ0NtqSv/VFgzFAs4QHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:5e:4c:69:5a:fe:24:b0:bb:59:c7:6d:09:e2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Apr 27 09:00:53 2025 GMT
Not After : Apr 28 09:00:53 2025 GMT
Subject: CN=1e5fcc5bea45e0d2df0a60ffce9ef3f8caaaa4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:11:06:e8:ee:54:fb:eb:92:9a:ce:2a:46:
85:2a:de:2a:84:c3:b7:87:36:b5:d4:c7:86:e6:72:
3f:9b:80:1a:ad:3e:56:18:6e:d0:27:9d:39:ec:a4:
fc:16:1a:57:00:23:a4:8e:00:b2:f5:ab:b1:5c:53:
1a:9c:24:62:ea:47:17:0e:85:fa:9a:3e:c5:43:55:
df:3e:da:86:1d:f6:a4:9b:9a:87:58:1f:ca:e7:b0:
57:92:8b:c1:e3:fd:a2:5f:e6:06:d5:bf:ed:50:e2:
92:ff:37:f8:3c:9b:e9:b7:f1:dd:cc:ac:bf:7a:27:
5b:13:27:fa:13:63:ac:99:16:9b:ea:e6:d4:bc:df:
a0:0a:70:29:21:69:5c:18:35:5c:91:9f:39:fc:49:
44:64:b0:bb:f8:65:8c:2f:f4:35:f0:79:9c:fe:ed:
b6:19:cf:f4:84:29:fb:c0:60:77:e0:3d:c1:c7:9f:
da:b1:25:b6:ff:93:7a:47:d1:68:a9:79:e3:ae:85:
b7:1d:08:20:10:55:58:9a:af:0e:99:67:76:23:b4:
36:5c:48:54:36:9f:15:5e:66:f9:ec:b7:1c:08:2c:
9a:1b:83:62:08:c0:2a:0b:b9:33:53:22:59:7c:f4:
dd:62:77:88:c3:93:45:4a:d1:9e:6c:28:f0:cf:31:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5F:CC:5B:EA:45:E0:D2:DF:0A:60:FF:CE:9E:F3:F8:CA:AA:A4:C8
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6f:4f:59:ca:1c:1c:f4:86:54:29:f3:bd:97:c9:5c:13:d1:
30:eb:ff:de:c4:30:df:c1:45:4a:26:ab:6a:09:25:95:2b:a7:
ff:b7:94:61:ae:9d:1a:5a:d7:7d:9a:1d:b6:cd:11:9c:96:8c:
5e:ac:55:98:07:ab:ac:ec:1a:2f:a7:b8:70:a3:55:25:04:93:
38:38:66:81:c7:c4:27:32:ab:5c:81:51:22:da:16:96:6b:7f:
d9:54:78:d3:d6:73:5c:b7:2d:d8:27:3f:38:be:72:a7:50:4a:
74:a9:12:a9:26:42:c7:7a:5d:3a:2c:cb:fc:bc:1e:a8:e4:f1:
aa:96:f7:d7:76:83:f7:84:57:9c:80:be:bf:17:53:f1:5f:28:
2b:06:f1:6a:60:5f:b8:fa:83:a8:a2:9d:6f:f9:83:23:b7:4a:
36:e2:49:0d:c9:35:66:81:67:a2:ec:93:bf:0d:c0:e6:6f:4e:
77:27:02:95:39:85:9e:a4:0e:cb:78:ff:3a:f1:41:de:14:5a:
9c:12:02:71:b1:cc:0c:e2:a5:1a:74:44:d4:ea:e5:15:c1:a1:
56:15:77:d4:a5:c2:08:23:7f:39:0f:b1:0f:9a:30:1a:31:71:
11:92:f6:ac:f5:96:22:22:65:44:b0:d6:92:b5:12:96:35:19:
fd:41:4f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:21:46 2025 by rpki-client