Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier: f5EkZvFMC1/Gm67AohwNUrc0+p+KQoMtwVD9BQIRp9k=
Subject key identifier: 07:BC:79:29:2B:6D:E2:B0:D6:B9:27:5A:65:59:02:D4:4A:1E:41:46
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial: 01967BD7AE3B0A9E4B5F6CA647A2076BC312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number: 0E16
Signing time: Mon 28 Apr 2025 10:00:54 +0000
Manifest this update: Mon 28 Apr 2025 10:00:54 +0000
Manifest next update: Tue 29 Apr 2025 10:00:54 +0000
Files and hashes: 1: iSQJ7oUwp5EtejUI-66sGk-h7cQ.roa (hash: mpF7huYV9n/9/29y0+6CrRWd+U+y7E7ycfKNR3SN4Do=)
2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: P2Y7/1H5oZG330y1i9CSTVbE4vcuajFpbg2TAaPMcE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:ae:3b:0a:9e:4b:5f:6c:a6:47:a2:07:6b:c3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Validity
Not Before: Apr 28 10:00:54 2025 GMT
Not After : Apr 29 10:00:54 2025 GMT
Subject: CN=07bc79292b6de2b0d6b9275a655902d44a1e4146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:ba:7f:1b:1f:c9:18:80:51:c1:db:0c:9d:
ce:28:04:d4:42:1d:02:44:2c:0f:f0:db:a8:2d:b7:
9e:ae:f6:a6:43:63:d1:3a:24:19:e1:47:11:18:a6:
47:59:5a:9f:c1:1f:8a:8e:b9:e4:90:d1:3e:d1:66:
65:6f:4e:58:60:d6:97:5a:e5:8b:3c:70:98:ab:63:
48:cb:a1:8d:8c:05:c9:79:93:36:db:24:ba:3e:e7:
09:14:59:09:78:64:42:f9:57:ee:7f:13:79:fb:d9:
e2:0e:ee:a5:6b:9b:82:92:c1:d9:27:c9:13:1b:56:
88:1d:08:01:0e:36:b5:4c:e7:10:52:38:0d:0b:c2:
29:5c:e6:9d:6a:82:f6:18:d8:b0:f5:35:f2:70:da:
c1:16:fa:bc:d7:23:ab:4e:15:0c:5a:aa:9f:00:81:
37:0c:98:c2:8f:b4:91:88:3b:b5:e0:e7:f4:15:b2:
55:c1:9d:ce:3e:6a:37:ee:ec:cd:94:20:b3:5f:b9:
3f:9d:57:ca:a5:e3:12:cb:b1:6d:cf:ce:7d:0d:06:
bf:17:6b:1a:8e:83:b7:ff:59:14:e0:2d:60:81:da:
43:2d:71:48:f3:dc:ce:40:c1:ac:96:7d:f8:45:7e:
79:ad:43:22:56:35:40:0b:4a:50:dd:90:59:27:7d:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BC:79:29:2B:6D:E2:B0:D6:B9:27:5A:65:59:02:D4:4A:1E:41:46
X509v3 Authority Key Identifier:
keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:88:be:ef:f9:2d:af:2d:11:17:2c:7c:a5:6a:fc:e1:e8:85:
14:61:b5:ef:48:b7:b7:58:1e:9e:2e:7d:78:82:fa:35:ec:a1:
00:ef:b6:96:59:9d:7e:ec:98:06:a8:89:bc:f5:2d:86:cb:05:
ca:b6:55:fc:5c:58:62:8f:99:3d:3e:12:d2:bd:f8:00:c8:b4:
f2:f2:df:65:be:5d:28:15:83:02:12:c2:46:7d:ae:3e:13:2c:
8f:38:77:50:d9:47:f3:ba:5c:ef:b7:ab:f2:c9:7d:65:a7:08:
f8:cf:7f:b9:ae:d6:1e:09:91:b8:9c:ad:15:5c:a4:98:74:2a:
82:2a:08:35:19:a7:f4:19:ab:10:2e:39:ab:30:ca:15:7a:4a:
2c:54:80:7c:8a:01:50:f0:99:7f:8c:59:5c:7f:5e:6a:69:72:
25:41:ec:7e:58:fe:6f:49:83:f4:fc:65:4f:84:aa:01:1a:2a:
f7:a9:69:f8:55:ab:e4:5a:c4:92:f0:78:41:0b:d6:c8:2e:13:
54:54:42:e8:4d:1f:14:18:e0:e2:ef:4c:8f:4c:13:da:89:1c:
2f:27:72:61:6d:d4:ba:c6:1f:8f:c5:a8:41:1d:98:39:26:4a:
60:fb:fb:37:c3:56:b1:73:b1:96:81:c2:9a:ed:fa:da:43:d0:
b1:20:16:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:37:43 2025 by rpki-client