Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
File: nkVus5ycwGznHHdUoD8_PwCSgd0.mft (raw, json)
Hash identifier: aD3hh9BDuDtVClJkQIjbWpM1o1K9pHCIiy42Awf2+xg=
Subject key identifier: C1:A3:95:D5:0C:E4:9B:5C:CE:DF:41:17:4D:61:A6:86:0E:B1:3B:66
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Certificate issuer: /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial: 019679B237C45D9A0917D058349D07607A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 00:00:44 +0000
Manifest this update: Mon 28 Apr 2025 00:00:44 +0000
Manifest next update: Tue 29 Apr 2025 00:00:44 +0000
Files and hashes: 1: 0e3XvmLgCCLyXX2Pnl1oUQprG1Y.roa (hash: FMORsyXFiyuBPfP/wfzNQt83A1mlYj2dL5G6obhc0aU=)
2: nkVus5ycwGznHHdUoD8_PwCSgd0.crl (hash: mgIWhl05O39EODyKhyweo6cxRLtkCDQuDrlLjpD6tLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:37:c4:5d:9a:09:17:d0:58:34:9d:07:60:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Validity
Not Before: Apr 28 00:00:44 2025 GMT
Not After : Apr 29 00:00:44 2025 GMT
Subject: CN=c1a395d50ce49b5ccedf41174d61a6860eb13b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:74:fe:13:cd:ad:44:63:a2:79:8d:bc:c6:
86:64:c2:6d:fc:5d:67:4a:f1:22:a9:72:0b:2d:4b:
97:09:6e:c6:32:4d:9c:c4:d2:08:68:fd:04:cc:6a:
57:8e:c4:e5:2f:bc:65:44:3e:56:3a:b1:40:dd:5d:
2d:63:71:f2:bc:d2:c0:66:ec:45:bb:ed:5d:39:b8:
22:30:88:81:24:2c:6f:fc:f9:62:9c:56:c6:c5:20:
5e:16:ea:99:34:78:e3:c2:0a:8f:e1:b7:fe:b9:0a:
94:c8:cd:03:96:a2:3d:45:cd:40:28:e0:51:0b:2d:
f7:38:a2:a2:a1:63:d6:4b:cc:d4:bc:44:11:c1:19:
dc:11:6a:3c:e4:91:ac:4f:a9:4b:3b:58:ad:8e:e1:
49:b4:c2:2b:1e:bb:b6:15:a4:ce:9c:bc:d8:15:af:
62:5b:4f:e9:47:e9:f5:4b:66:2a:43:14:c0:39:5c:
38:8b:c9:c6:cb:3c:59:b6:67:cc:2f:68:07:fd:2d:
c0:b3:d2:5a:53:2c:88:f3:0e:f3:b4:48:e3:f2:7b:
cd:53:41:c4:c4:dd:04:88:d0:86:b2:f7:74:55:4f:
f5:ff:bb:d6:74:bf:af:65:b6:25:0a:04:8f:a1:93:
bb:cf:22:28:1d:9b:95:69:82:cb:aa:2f:74:44:c4:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A3:95:D5:0C:E4:9B:5C:CE:DF:41:17:4D:61:A6:86:0E:B1:3B:66
X509v3 Authority Key Identifier:
keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e9:0c:52:07:da:13:e6:0a:ff:d8:c4:15:b9:52:f1:be:cb:
78:84:d5:9e:de:fb:c4:62:12:22:64:eb:fc:80:31:f6:ea:e9:
d1:4a:5a:97:bf:e9:b2:1a:41:96:4c:6e:33:74:17:93:17:9e:
95:08:e2:f7:0e:84:c6:a1:30:a3:cd:9c:66:23:c1:58:39:07:
49:9a:30:c4:8e:4b:3a:00:73:87:f3:a0:60:67:ae:38:92:73:
3e:ad:d9:4b:36:dd:26:13:76:96:17:0d:25:23:5b:80:8d:0d:
0b:52:4e:5a:f8:fb:84:29:e1:13:e2:c9:74:85:66:11:dd:39:
19:9c:42:6a:a4:de:ee:83:ae:16:82:62:9f:5d:17:5d:c6:ae:
2f:c9:4b:fe:31:80:3c:db:29:3f:a6:1f:c7:21:3a:24:48:42:
b0:be:5d:b8:7f:e9:91:15:55:13:17:9f:77:e4:b8:b3:be:c7:
ec:53:1e:e9:0b:55:5c:d5:ed:f4:d8:04:fb:12:d1:1f:b5:d2:
18:fa:36:20:02:b0:06:cc:a6:d2:6c:b2:57:ff:47:32:4a:40:
98:5d:c9:47:f6:3b:aa:86:16:50:95:ad:b0:b2:4a:06:c9:d8:
4b:b7:be:79:b6:47:c4:8d:40:5d:2f:ac:29:13:53:db:e2:89:
a8:74:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:40:03 2025 by rpki-client