Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
File: _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json)
Hash identifier: WOYBtAzaRVHbOdakI0GwitTF7Mr7rHcEeI0c9KL0kKE=
Subject key identifier: 46:25:0B:64:91:3F:E3:B0:33:7A:83:EF:87:A7:AA:D7:19:2D:D4:65
Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f
Certificate serial: 019676E7F75EF4C276D8967D8DE5F1F6048E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
Manifest number: 0322
Signing time: Sun 27 Apr 2025 11:00:35 +0000
Manifest this update: Sun 27 Apr 2025 11:00:35 +0000
Manifest next update: Mon 28 Apr 2025 11:00:35 +0000
Files and hashes: 1: UsHLucR3rIttQE-i6TwlR7HDoxs.roa (hash: DUCr1+Yi08xU6F2DSZeSJmVDu/Cs1KLSUmKk04+9Ejs=)
2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: TalssX6Xh53hRKX9gt5Z+2sPpRc+Zzx276UevjQWqMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:f7:5e:f4:c2:76:d8:96:7d:8d:e5:f1:f6:04:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f
Validity
Not Before: Apr 27 11:00:35 2025 GMT
Not After : Apr 28 11:00:35 2025 GMT
Subject: CN=46250b64913fe3b0337a83ef87a7aad7192dd465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2c:e0:42:a4:08:0d:3f:34:b8:6b:67:d0:1b:
c7:79:50:74:93:a5:21:a2:09:3c:fc:95:c7:2e:95:
c6:88:80:61:2b:51:49:c7:73:f7:8e:5e:45:f1:ff:
00:f2:68:05:c9:c1:e3:1d:69:90:50:87:52:f4:5a:
e9:93:a9:93:23:17:1d:fe:b6:88:06:ff:b7:04:aa:
e8:c9:27:37:59:68:8d:2d:95:ef:25:e1:d6:73:28:
b7:b0:e3:ea:6e:01:22:33:90:11:32:2b:4b:82:f6:
d4:58:67:1b:b3:70:30:00:35:f5:a4:12:6f:d7:50:
67:de:91:f8:a1:95:13:d3:52:a0:73:0c:86:46:ec:
bb:5b:42:72:44:8e:92:56:ac:0e:d7:fa:3c:a9:72:
6a:fc:4d:b0:b3:37:44:a1:53:e6:d5:65:3b:5f:7b:
81:8f:53:58:0e:8c:4e:ef:c9:45:69:70:60:92:12:
8a:93:62:e8:00:fc:a9:5d:8d:b3:d0:8b:26:ee:e8:
80:5a:1f:60:a4:53:a4:dd:4b:1c:7a:8e:4a:5e:30:
40:3c:35:9b:31:0b:13:c7:13:6b:a6:85:03:a2:32:
bc:86:f8:84:54:3c:3b:b1:91:1e:17:44:56:f0:7a:
26:06:de:ae:3c:cf:b7:9c:cb:f3:ac:e5:c7:20:e4:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:25:0B:64:91:3F:E3:B0:33:7A:83:EF:87:A7:AA:D7:19:2D:D4:65
X509v3 Authority Key Identifier:
keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:00:0e:7c:7f:22:a5:8a:a4:ad:d6:84:0d:fe:5d:4e:9b:78:
84:43:9b:63:6b:a4:70:2f:e4:ec:11:3f:1c:a0:de:4c:1d:ae:
81:4f:ec:ae:0f:af:31:b8:c5:f3:97:a3:9f:78:cd:7a:d7:94:
9d:92:c9:e6:78:20:5c:33:15:0a:10:da:8f:ef:c4:d4:5a:39:
9f:7f:3a:17:20:89:78:1f:dc:2a:31:e5:c6:55:9b:d2:de:3a:
5d:72:30:58:2a:e5:ae:bd:f9:9f:3c:00:f2:00:e2:fe:9e:9e:
44:78:59:13:2b:8d:fb:ce:01:ef:a8:25:b1:30:d0:60:d4:b6:
f4:49:6b:d5:49:51:cf:12:6a:f0:5c:a7:c6:4c:71:48:1c:9e:
99:22:62:3d:47:26:2e:3c:c7:91:0e:46:70:f9:e8:5e:57:5a:
90:06:ba:e7:01:a0:61:ae:e3:82:f0:43:98:98:3e:d8:4a:9a:
ec:98:db:a9:3b:70:30:54:8e:1b:a9:a0:10:8e:10:70:e5:a4:
8e:3b:63:e1:39:1d:12:41:d7:8d:13:8e:df:b7:c0:ea:37:d9:
fd:21:ff:1f:a5:80:9e:20:0f:73:17:39:3e:a4:0e:8d:03:c4:
f8:a2:fc:62:cb:5f:2b:64:fb:6b:f1:e9:bd:87:ee:cc:db:4a:
07:87:8b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:10:17 2025 by rpki-client