Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
File: niX4djqjUWiba6M2JpqyHE4BILM.mft (raw, json)
Hash identifier: M+UWrg7ILdqKxN35qwIxGUPOrrvO3wtkkl/cEUfobF8=
Subject key identifier: 66:0C:29:BB:F7:4B:12:AE:17:82:0A:74:E6:0A:85:1B:4C:7A:F2:2A
Authority key identifier: 9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
Certificate issuer: /CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Certificate serial: 0196802237B38E204F888E7E028F9CD32703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
Manifest number: 0338
Signing time: Tue 29 Apr 2025 06:00:48 +0000
Manifest this update: Tue 29 Apr 2025 06:00:48 +0000
Manifest next update: Wed 30 Apr 2025 06:00:48 +0000
Files and hashes: 1: 3lv0MS0KMvs2NqTlqtd3HvxtHfA.roa (hash: Jn8Yd6x4goPshXFFHZFFSl5WpHb8SXFgvxZ7Lsgfvu4=)
2: niX4djqjUWiba6M2JpqyHE4BILM.crl (hash: XUoHhm4BZ16Tmn2+dTbgOnDbFEOUZud/+ZlVi9uUr1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:37:b3:8e:20:4f:88:8e:7e:02:8f:9c:d3:27:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Validity
Not Before: Apr 29 06:00:48 2025 GMT
Not After : Apr 30 06:00:48 2025 GMT
Subject: CN=660c29bbf74b12ae17820a74e60a851b4c7af22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:50:24:76:39:d9:ab:22:10:11:bf:a6:2e:1f:
9e:21:61:60:bb:e5:6b:bd:97:aa:16:af:5a:f0:e6:
55:c0:bb:8f:6f:eb:b3:97:74:ef:91:b9:28:41:b0:
e6:aa:35:bc:b2:08:2d:a0:7c:0b:b4:18:03:ac:21:
03:90:c4:6a:a8:40:57:90:ac:e5:c1:04:34:eb:aa:
9a:16:af:64:e5:cf:df:c6:09:7b:37:d6:2a:45:bf:
0c:22:41:2c:66:8d:41:a0:aa:54:33:f4:81:41:d9:
e9:95:ce:02:69:6d:b5:58:9e:a8:80:aa:a3:d1:c4:
19:54:31:2d:cd:14:6d:3b:06:d5:96:f5:0e:38:94:
a7:19:52:aa:10:cf:e2:e5:4d:8d:e9:b4:46:c4:dc:
e0:68:f1:3e:51:cc:3f:2a:5d:92:b2:6d:61:b0:54:
4e:15:e9:02:8a:ec:7d:1b:c8:ad:fa:d9:45:a0:af:
94:a7:e1:b9:74:8d:0c:78:38:a4:e3:a4:88:39:ed:
b3:d0:1d:78:aa:35:15:ae:6f:9c:3a:a6:a2:fa:3a:
90:a0:bc:47:5d:52:26:c0:69:03:24:2f:bf:83:c7:
c9:a8:bd:04:bb:85:ef:ed:05:33:cc:5c:f5:cb:c0:
90:8e:f4:1a:3b:5b:09:4b:da:b6:ec:d0:ea:87:ae:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0C:29:BB:F7:4B:12:AE:17:82:0A:74:E6:0A:85:1B:4C:7A:F2:2A
X509v3 Authority Key Identifier:
keyid:9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e6:54:9e:f0:b0:d9:de:5b:b5:85:40:09:f9:2b:cc:2b:b8:
49:70:24:c6:89:fd:27:b6:35:8c:71:5f:e9:f1:42:17:8b:34:
f2:9a:49:10:2c:d2:56:a3:f0:bb:de:46:d5:75:8a:47:b5:80:
93:d2:a5:14:10:b6:8a:fc:aa:28:c3:ab:ad:9b:8c:80:39:05:
6a:29:f6:54:88:53:d2:59:8f:75:81:5a:c0:8a:20:11:f1:28:
3b:24:91:9c:a6:17:11:13:0c:d1:ba:f6:40:a5:c9:59:18:61:
0a:45:70:f0:0c:11:9a:be:19:4d:06:c7:85:3d:7d:ac:6c:84:
82:b6:e3:d9:e0:c9:29:29:41:8e:00:b6:49:44:9e:5f:34:32:
c1:ef:f2:1b:a5:8c:7e:23:56:61:3c:77:29:39:97:2a:fb:96:
68:75:d6:4f:3a:2f:3f:c0:ac:c8:f7:6a:91:cc:12:44:0e:c1:
1d:d9:85:17:ef:40:25:dd:97:db:35:5d:b8:2b:da:03:9d:36:
6b:c5:09:c9:94:8d:ac:6b:26:ad:3d:0e:1a:8f:fb:74:cb:e0:
84:74:dd:f0:ca:db:d7:8e:48:83:37:dd:10:0e:35:99:6c:12:
6d:d3:62:f4:fd:c2:9b:fd:f6:7e:11:8b:58:34:f0:d1:43:e7:
76:0b:73:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:13:51 2025 by rpki-client