Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
File: nU-b-Hr_AP1dshWFeBtG82-eNiY.mft (raw, json)
Hash identifier: zX/1oiuitiUKrQiGN/Cqq/J647ntklqqmD6PSa0jgy4=
Subject key identifier: 5F:A8:BA:AB:4B:AD:E5:C3:48:61:AB:2B:46:D1:BA:51:84:AF:E2:C6
Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
Certificate issuer: /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Certificate serial: 01968691B258D97FCF8FC07022C43FD3AB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
Manifest number: 01B3
Signing time: Wed 30 Apr 2025 12:00:17 +0000
Manifest this update: Wed 30 Apr 2025 12:00:17 +0000
Manifest next update: Thu 01 May 2025 12:00:17 +0000
Files and hashes: 1: cThp0KEND3BT4KvCeUid-rjEug4.roa (hash: ImpSaegWwcNvwqQ9pHSgJ6wWRXJrvYa1vES4AMD51Qc=)
2: nU-b-Hr_AP1dshWFeBtG82-eNiY.crl (hash: MMSCm8Tnd8K/CH9fG8HTjZ9IpVV4qwQsLwaeRnmAB54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:91:b2:58:d9:7f:cf:8f:c0:70:22:c4:3f:d3:ab:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Validity
Not Before: Apr 30 12:00:17 2025 GMT
Not After : May 1 12:00:17 2025 GMT
Subject: CN=5fa8baab4bade5c34861ab2b46d1ba5184afe2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:45:82:6b:34:46:c4:8c:9b:b9:3e:05:70:
95:dd:14:0c:a9:aa:8e:4e:65:86:6b:0a:d8:70:e5:
0e:b3:af:14:de:d6:4a:85:3f:39:17:1a:49:4d:38:
18:6b:cf:5d:fc:16:86:36:28:ac:e6:9d:12:9f:98:
df:e6:45:ea:25:db:9b:23:37:b1:4b:2d:71:99:60:
34:b6:56:16:22:ac:89:e9:39:a6:38:8d:6a:fc:d2:
aa:2b:a4:53:48:88:9f:cf:1b:ca:99:60:4c:d9:96:
8e:d2:f7:33:67:3a:c8:c7:2a:6d:97:5c:5c:74:bc:
2a:df:3e:43:3c:45:e2:f2:05:c0:26:a0:63:e6:e5:
ce:8a:43:5d:0e:4d:85:5e:7d:bc:a1:36:1e:98:45:
d6:ea:ef:8e:07:3e:d9:e5:a8:0c:b5:e6:35:67:04:
b7:47:3f:f7:84:34:8e:a4:6e:d4:04:4f:be:72:e3:
9f:80:f8:c5:51:5f:26:da:50:94:0c:c0:64:23:d0:
ab:df:91:9e:9b:52:3d:ab:67:7b:7b:b9:53:45:92:
52:22:62:a6:59:7c:ed:46:d9:13:98:76:48:08:07:
62:1d:c6:b7:19:be:72:7e:5c:fd:86:fd:6c:33:10:
4d:3a:02:d1:a3:52:53:30:ba:1d:06:cc:27:35:0e:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A8:BA:AB:4B:AD:E5:C3:48:61:AB:2B:46:D1:BA:51:84:AF:E2:C6
X509v3 Authority Key Identifier:
keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:63:5c:81:15:29:9a:41:8a:1f:c8:ce:5b:42:76:be:cc:
3d:64:c3:71:dd:e6:03:d4:46:28:12:62:61:5a:2c:ab:d5:45:
52:01:c7:ce:16:42:37:47:ca:a1:9a:a0:11:d8:79:9e:d5:35:
0a:43:ff:c3:76:0e:56:79:35:24:ab:00:44:14:5b:01:b5:a5:
7d:6c:c6:3e:82:07:7c:84:6a:92:4f:30:63:8b:3c:59:ad:b7:
b8:65:ed:db:22:7c:96:a9:16:b9:82:ab:12:96:88:0a:73:bb:
81:a9:a0:c5:8a:23:4a:92:02:bd:d3:ec:55:10:26:ff:d3:b8:
aa:13:d8:46:3d:e3:75:c4:f4:c1:dd:34:df:ad:45:e9:0b:7e:
ed:ab:84:00:37:63:c6:55:5e:b3:64:8b:22:ee:ec:a9:09:4b:
20:04:8c:20:64:c3:ee:44:92:98:41:71:a6:90:b8:3e:14:ab:
99:f4:5a:54:53:c9:c2:de:d6:ca:3e:72:01:01:da:b9:a3:8e:
a5:c1:7c:fe:72:94:2a:c7:de:1a:d1:39:8d:00:07:25:10:4e:
97:1f:32:14:65:7a:b9:44:6d:35:10:4e:78:e5:64:38:cb:22:
52:f2:c3:0f:2d:17:24:08:73:a3:a4:fe:9d:37:9a:ce:a6:c5:
85:69:3a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:58:10 2025 by rpki-client