Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
File: nEswhmFPR4OKPoCj5uBR09imkvk.mft (raw, json)
Hash identifier: +o9EGah9Zi5UOPlbvAMUyi2TsD/g1GbEhAEbI1KPiM8=
Subject key identifier: C7:88:FD:F5:2B:4D:8B:57:5E:27:20:84:B4:96:E0:EC:ED:0E:07:AD
Authority key identifier: 9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9
Certificate issuer: /CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9
Certificate serial: 01967BA0AC63725600D0A5BD133C67500512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
Manifest number: 055E
Signing time: Mon 28 Apr 2025 09:00:49 +0000
Manifest this update: Mon 28 Apr 2025 09:00:49 +0000
Manifest next update: Tue 29 Apr 2025 09:00:49 +0000
Files and hashes: 1: a_Q0Oj2hhJ8gyCrgqERD5VjhULo.roa (hash: ix5ZmIac7PSSZ8cbH+U6PyHdhcxmOIX450xPjZ8S6o0=)
2: nEswhmFPR4OKPoCj5uBR09imkvk.crl (hash: ksyiefr3IqB/CfPCkXcgdeX584kMpUnxFmqWXAoak04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:ac:63:72:56:00:d0:a5:bd:13:3c:67:50:05:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9
Validity
Not Before: Apr 28 09:00:49 2025 GMT
Not After : Apr 29 09:00:49 2025 GMT
Subject: CN=c788fdf52b4d8b575e272084b496e0eced0e07ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:25:84:0e:34:1a:de:8e:45:1d:83:cb:79:
c3:7a:56:3d:ff:4b:95:a3:cb:b2:2a:9b:15:da:78:
e0:6e:4e:91:54:d4:87:5f:9a:2f:24:21:5e:b3:51:
76:bf:d2:cf:0d:0b:45:13:67:f7:40:a4:d8:a2:37:
3b:d2:b0:1b:fc:18:2a:7f:c9:96:fc:6d:ef:f4:8e:
b3:a1:3e:b6:b2:c2:f9:53:7d:0e:84:6d:d2:9e:c8:
87:ca:86:99:a1:10:bf:66:01:39:0b:40:f1:8a:f7:
35:67:00:64:c1:e5:e8:f2:ca:fb:aa:dd:a5:4a:ee:
a9:a1:53:5d:b4:a3:6a:bf:7c:8c:67:e1:05:e4:8c:
fb:be:36:87:2b:64:26:5a:7c:e6:6d:0c:91:4c:86:
d9:09:2c:54:bd:05:a6:33:1d:e3:98:ac:e3:d1:85:
41:de:c3:05:eb:0b:06:3f:94:d6:32:64:c0:ee:f5:
c5:50:6e:67:d6:88:6b:37:57:e8:7b:47:d4:f8:df:
e8:84:6d:a0:af:96:c9:01:ae:f4:44:63:b3:7a:af:
dc:c9:f8:66:d7:9d:63:8a:4d:3e:c4:d9:05:d2:d0:
13:1a:a5:57:a4:33:5a:5a:f4:48:aa:b2:76:b9:60:
d0:7d:0e:20:aa:7d:fa:12:03:b4:8e:3b:c9:a7:e9:
93:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:88:FD:F5:2B:4D:8B:57:5E:27:20:84:B4:96:E0:EC:ED:0E:07:AD
X509v3 Authority Key Identifier:
keyid:9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:75:ac:28:41:bd:5f:79:ef:ef:c6:da:a3:e9:e8:ce:7b:09:
fd:24:d1:51:ff:01:c4:79:15:e7:9b:c0:93:e3:50:4b:a2:b3:
5e:c3:d9:4d:9a:21:bd:d2:b3:fe:b8:84:c6:74:a0:b2:84:e2:
13:32:62:c9:a6:10:85:4a:ff:18:d5:5c:45:73:30:fc:5d:96:
66:70:3c:3c:51:80:72:77:d8:80:6e:39:fd:33:54:82:a8:8e:
1a:3c:c0:82:2f:98:d3:a1:df:2a:f6:c0:68:e8:67:eb:92:50:
f5:fa:f0:d4:b6:7b:59:ed:27:10:60:17:6b:e7:c1:06:f3:eb:
cd:53:d3:a4:48:f4:68:9f:4c:cc:d0:fe:2e:ba:a7:33:fc:f6:
b5:41:2d:3a:94:a5:7b:c7:7e:af:1a:8a:9a:e6:0c:ba:28:8c:
cd:df:4a:cf:e9:7a:4c:d6:55:a5:bc:08:ec:8d:ed:cc:26:ad:
22:53:14:35:52:e5:73:5f:05:8d:3a:0e:af:9d:ed:09:a6:f0:
59:43:48:dc:28:4f:e0:4f:25:b6:e8:d4:b5:ed:35:82:8d:d7:
c2:24:63:5e:3d:dc:7a:b7:82:0d:20:26:c4:2d:3f:54:3b:69:
15:03:5e:c9:15:28:2a:80:92:34:44:dd:6f:9d:42:07:1b:23:
58:3d:22:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:52:16 2025 by rpki-client