Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
File: nfbRY1k964rv8HL-yljm8_HE5-U.mft (raw, json)
Hash identifier: 99mtMK/NDl41puv1CuixPwznMNGIjtgdGiQi0FfckaM=
Subject key identifier: 35:6E:1E:D4:D8:70:D7:50:58:C3:6C:80:64:B0:52:40:E5:19:92:CB
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 01967EA1BD4C44EB8673D697D693B4C9193F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
Manifest number: 0BAF
Signing time: Mon 28 Apr 2025 23:00:51 +0000
Manifest this update: Mon 28 Apr 2025 23:00:51 +0000
Manifest next update: Tue 29 Apr 2025 23:00:51 +0000
Files and hashes: 1: XM057xIBl4X4QJASTmfkRwaiNaE.roa (hash: vZ1H1/yQjb9EVPL0oyydRTCpB/F5AEPyVx/M+2z5CZ0=)
2: nfbRY1k964rv8HL-yljm8_HE5-U.crl (hash: yZ/KDPxLJM5mfrvXNi9G+VZIHJjAqJy2unw9ZNyRnPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:bd:4c:44:eb:86:73:d6:97:d6:93:b4:c9:19:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: Apr 28 23:00:51 2025 GMT
Not After : Apr 29 23:00:51 2025 GMT
Subject: CN=356e1ed4d870d75058c36c8064b05240e51992cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:05:8b:0e:9d:d4:5e:1e:0c:3a:48:79:00:
e1:d1:0d:77:e9:59:98:72:c0:51:a5:af:2a:e9:69:
e8:ff:73:77:fc:41:7c:cc:0f:ca:e7:b4:78:7c:46:
a6:31:42:2c:42:0c:cf:a6:eb:8b:9f:3c:f4:33:d8:
01:a9:be:ba:b7:68:f4:b8:b0:60:9e:8c:15:11:67:
f0:bc:fd:a8:cf:ad:35:b6:f5:32:36:92:b6:4b:03:
23:e3:a3:72:c2:9f:2d:e1:7f:3b:af:8d:0b:44:49:
3f:09:8b:ac:34:db:b0:ee:eb:d2:1c:5c:2e:16:8f:
32:0f:2a:13:77:92:10:37:dd:0e:6b:e1:6e:76:f9:
3e:0f:30:d7:ec:f8:56:f3:18:bf:27:d2:00:ff:f9:
92:08:fc:00:8f:a0:68:85:f8:78:bb:46:98:2e:56:
51:46:00:b3:0f:a3:1a:e6:12:39:fc:f3:30:bb:fa:
d1:44:18:77:c9:ce:f2:92:a2:e6:75:da:6f:8f:cf:
7e:c9:80:4a:8b:cc:e6:c1:57:70:79:c6:3c:94:08:
be:42:fb:62:2a:12:2d:bd:15:b0:b2:7a:ed:47:bc:
46:fe:ac:f4:64:a7:f2:69:15:f2:4b:94:ab:34:ad:
f0:ac:79:19:97:93:a8:dd:6b:99:38:cc:8b:89:cd:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6E:1E:D4:D8:70:D7:50:58:C3:6C:80:64:B0:52:40:E5:19:92:CB
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a2:3b:8a:13:2d:81:eb:88:3e:69:01:4f:3b:5e:cc:50:8a:
01:b7:c6:85:b1:56:2e:3f:ed:b3:ff:e4:68:cd:29:cd:44:ae:
b1:43:03:0a:6d:5b:6d:64:16:ae:b9:8a:fe:2b:5e:fd:c2:0a:
cc:84:dc:a8:db:4a:8f:c2:36:bc:3a:7a:b4:40:e2:e5:a2:53:
0e:42:ba:55:1a:22:c8:8a:54:4d:46:fa:22:15:88:7d:38:0e:
8f:d2:c5:91:13:51:72:c7:ab:81:e3:8c:7f:af:d1:5f:ae:d4:
5f:65:cd:99:95:bd:c4:e8:62:80:b9:85:83:7c:63:6b:a4:cf:
d4:af:1a:19:4e:0e:1f:de:59:c6:9c:08:5f:d6:b5:fd:89:55:
3a:15:1e:a3:5b:52:8b:27:e5:98:4c:08:9b:24:9b:69:70:76:
45:3a:e7:b3:45:e5:7b:7d:0a:c2:67:6e:d5:af:bf:cb:9c:3b:
74:fb:f4:7f:f1:2f:ed:b6:00:56:e0:2c:1c:04:a2:d1:be:b0:
4c:e4:44:3c:c9:7b:62:5d:37:a0:95:7b:a7:8c:f4:12:84:93:
d7:5d:de:ff:1b:7c:ee:14:d0:3f:dd:ad:4c:a9:c9:e3:d6:b1:
06:9e:57:05:d1:0f:77:39:d1:4f:72:81:bb:5e:b1:9d:06:d2:
a3:c8:46:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:35:17 2025 by rpki-client