Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
File: nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft (raw, json)
Hash identifier: 1DDcasZ3ze2Gr4GELGRemXVigM8UVH1C3J1jXAsYTu8=
Subject key identifier: 5E:C6:08:F1:95:7F:A3:BE:EE:F4:4A:1D:BC:23:78:8D:8E:17:B9:1B
Authority key identifier: 9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
Certificate issuer: /CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Certificate serial: 019674C2B2ADD1D32C8F03D8F4ACDEAE5147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
Manifest number: 1130
Signing time: Sun 27 Apr 2025 01:00:38 +0000
Manifest this update: Sun 27 Apr 2025 01:00:38 +0000
Manifest next update: Mon 28 Apr 2025 01:00:38 +0000
Files and hashes: 1: k3gz5duj9CFhYELeViKRfCBvdLQ.roa (hash: sqXEDoIPEFamPJfQ+MXgutDdyy3EAS9+6SZZLlnP/eE=)
2: nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl (hash: jLFg2Szi1qvM8i4gLpQ9Cf4sxIg8Mp3sgNj6asLVZS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:b2:ad:d1:d3:2c:8f:03:d8:f4:ac:de:ae:51:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Validity
Not Before: Apr 27 01:00:38 2025 GMT
Not After : Apr 28 01:00:38 2025 GMT
Subject: CN=5ec608f1957fa3beeef44a1dbc23788d8e17b91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:72:02:e5:1b:57:67:c3:e4:c9:de:fc:ad:
bd:2b:13:f2:f7:ff:fa:0c:c6:f5:f7:92:c7:3b:ac:
03:f2:34:f4:7c:c6:09:e9:a1:2c:56:27:7a:8e:75:
b1:a8:f2:ca:67:4a:c9:c6:9a:89:2c:cb:22:70:74:
39:f1:7c:75:b4:d8:ee:44:5b:9d:3c:c3:6b:0d:35:
40:18:c6:63:8a:d4:ab:2a:90:ae:80:e2:03:11:af:
c2:b4:a3:b1:60:c2:c2:da:47:6e:bb:fa:58:69:bd:
10:5b:a5:7c:eb:d0:72:a0:70:39:62:b5:a0:17:5f:
ca:3f:70:77:7f:9a:3c:27:e6:49:d3:ff:96:34:10:
1c:ff:81:e3:a9:98:dc:96:34:f0:e0:18:d9:88:a9:
95:a1:f7:e9:50:15:f8:38:22:7e:82:cd:8e:03:76:
31:45:42:b6:58:a5:a0:32:fe:6e:39:f2:84:07:4f:
68:a7:43:6e:50:a8:8b:8d:ab:c6:7f:79:4c:fa:17:
0f:ef:7b:61:80:b6:05:10:c9:a2:f7:d3:ce:9a:39:
a5:b5:55:3d:de:25:85:d8:b8:ba:60:16:38:31:7a:
2d:9d:9f:3a:c1:f7:23:b3:03:0a:d2:21:9d:59:e6:
50:ec:b6:91:c2:e9:3c:a1:58:69:65:e8:61:25:3c:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C6:08:F1:95:7F:A3:BE:EE:F4:4A:1D:BC:23:78:8D:8E:17:B9:1B
X509v3 Authority Key Identifier:
keyid:9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:97:33:ba:74:31:2f:63:6f:74:47:7d:3f:7e:9a:0f:c3:16:
f5:af:f6:49:62:87:51:48:07:be:10:6a:31:f5:4b:8f:3e:79:
8c:cb:14:58:d3:4d:71:9a:91:f6:b8:1d:a1:fe:e7:ce:c3:f6:
ac:a0:fa:28:99:ab:f4:72:43:e9:a6:7f:db:73:28:d2:40:09:
0a:38:62:f2:ea:7b:67:6a:7d:e3:4b:03:8d:0b:76:38:a2:c1:
95:70:1f:6a:16:ec:f1:4e:f4:66:cc:52:a7:5d:d1:0c:74:c2:
09:7d:f5:0d:1d:fe:0a:91:08:d1:8a:b1:a6:34:63:af:2a:bb:
5a:5c:d7:8b:98:8d:82:d2:8c:02:39:72:5c:97:36:53:a1:ae:
2d:a5:41:59:7a:39:72:43:54:06:b6:fe:a4:da:f1:4b:ce:f6:
e6:1a:9b:d2:9a:e1:01:d1:ae:1b:5b:c4:fc:56:59:14:cc:72:
aa:b4:c9:28:7f:54:17:35:67:14:71:7b:c5:40:f3:a9:07:2e:
82:b9:2f:4e:ee:d7:25:04:04:eb:f7:44:5d:96:d1:4b:0a:36:
08:60:da:36:c8:8c:12:ae:59:9f:6c:f9:e1:2b:42:f6:96:11:
8d:75:54:cf:40:53:a9:b8:ec:29:e1:36:30:1b:48:fb:49:4b:
a2:32:f5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:20 2025 by rpki-client