Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File: nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier: WfJbnzjAl3UHf9oZgKVAey96Z6YUJq3N5vWtFu58SlM=
Subject key identifier: 00:29:2E:54:B9:88:FE:14:A0:5D:C2:45:DC:AC:34:FC:D4:3B:83:3D
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial: 0196741DCD17BA5F853A5CAC76C4A3FCDF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number: 0C85
Signing time: Sat 26 Apr 2025 22:00:32 +0000
Manifest this update: Sat 26 Apr 2025 22:00:32 +0000
Manifest next update: Sun 27 Apr 2025 22:00:32 +0000
Files and hashes: 1: 1-ctCBWTM9YEJSb9HauIUKPqVwas.roa (hash: F+Ql00NFkP6u64/1DSJGoJFeSPLMPLBWzAqmumx63J4=)
2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: Qq0i/RpRQBelggcjxPmpNo4mwUfWjMI+o8dGHJJVYQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:cd:17:ba:5f:85:3a:5c:ac:76:c4:a3:fc:df:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
Validity
Not Before: Apr 26 22:00:32 2025 GMT
Not After : Apr 27 22:00:32 2025 GMT
Subject: CN=00292e54b988fe14a05dc245dcac34fcd43b833d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:94:9f:e8:e9:6f:5b:ee:58:b8:37:7b:17:
d5:f4:4e:58:a9:f8:f0:64:05:6f:87:24:d5:4a:4d:
ee:7f:d5:85:42:78:24:50:1d:bd:ed:12:43:74:12:
90:cf:65:d2:82:19:37:6f:f0:c1:a1:06:f0:2f:83:
48:3b:c9:0e:d6:c1:b0:b1:44:e6:d3:c2:2b:50:5d:
55:3f:5b:3e:43:72:fa:30:89:12:1d:df:30:91:27:
ab:7c:a1:0c:d7:f1:5b:90:c2:e8:ca:7a:cb:74:2a:
a4:49:87:eb:87:f8:21:43:6d:37:b9:b8:a5:41:11:
ed:d3:bc:a2:02:e1:d0:04:ae:ac:5b:39:15:6a:ff:
3d:92:ec:bc:27:77:47:ca:77:82:52:9d:0f:49:58:
51:bb:95:6f:e8:4e:8a:40:13:65:87:29:1b:fa:dd:
4e:97:6a:6e:d2:4e:64:a6:4a:01:b0:cb:b0:0e:d5:
5c:2b:12:8a:18:76:85:6c:65:69:a7:67:79:df:88:
41:b9:ec:b5:49:48:1a:65:93:7b:72:4f:8f:d3:a4:
52:88:07:fb:5d:73:c8:30:3d:c0:f0:cf:ce:2c:86:
04:12:7f:d3:47:ae:6b:41:70:8a:5e:99:11:2d:97:
75:9b:55:01:10:f2:9a:95:2d:45:a3:19:f5:fc:f5:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:29:2E:54:B9:88:FE:14:A0:5D:C2:45:DC:AC:34:FC:D4:3B:83:3D
X509v3 Authority Key Identifier:
keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:aa:d2:9c:9f:f9:11:47:28:6c:05:6f:12:93:3e:07:40:c8:
6c:dc:b2:f8:07:90:d5:66:0b:dd:dd:5a:db:37:e9:5b:ac:11:
9f:6f:c8:40:bc:d5:ed:e0:08:8a:42:4f:8d:02:db:4a:85:e2:
83:5c:cb:e5:64:f0:f6:5b:4f:ee:3d:84:32:44:4e:d7:b5:30:
7e:66:40:64:40:64:e7:ed:08:5d:9c:bf:c7:16:73:c1:4e:04:
8a:a0:f3:37:1e:8a:fe:f7:53:75:03:fb:3d:0f:1c:6d:f1:81:
22:c2:f4:82:75:ab:9f:70:fc:af:79:ae:f6:dc:ca:7f:f7:a3:
91:41:09:63:5f:13:ce:ca:2b:7a:8e:24:57:dd:1b:19:f8:87:
41:5e:d8:d5:14:5c:d1:ab:bc:6e:a8:79:f9:1b:24:18:80:8a:
0f:a0:aa:de:e8:88:81:b9:36:1e:c7:67:cb:0a:58:89:2f:db:
0a:0c:df:7e:32:2d:d6:5e:c6:d5:14:66:8e:f4:a0:6b:78:58:
3c:93:db:9f:e3:d9:26:6c:76:13:0c:a1:cb:79:bb:a5:ac:90:
a2:6e:40:1b:f7:51:65:fa:6b:a9:89:d6:e6:f3:87:ba:f7:44:
b6:1c:e8:c9:1e:c4:b0:58:e0:95:3a:55:60:fe:3f:81:a3:0f:
91:3c:02:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:38:23 2025 by rpki-client