Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: cfQ1HB80M/3T+XhMApEUIBn8j1onweXtuKBIcJltrjA=
Subject key identifier: 9B:D4:B1:63:EA:B3:AA:44:B8:D4:E8:5A:7B:B6:3B:DF:6D:4F:05:E0
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 01967868E8002479A31988D5EE7F6B8C49D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 18:01:03 +0000
Manifest this update: Sun 27 Apr 2025 18:01:03 +0000
Manifest next update: Mon 28 Apr 2025 18:01:03 +0000
Files and hashes: 1: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: 4zyiPupFkv6aGiPyWbZqlXFQT5TwDpgiC8oP/tINP38=)
2: qtN5JDorwotYpcUYWZc-ptH61p4.roa (hash: fKxhmPTYMHuqQdNEmPm2wnJirNcSsOemwlg1fw0Aem0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:e8:00:24:79:a3:19:88:d5:ee:7f:6b:8c:49:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Apr 27 18:01:03 2025 GMT
Not After : Apr 28 18:01:03 2025 GMT
Subject: CN=9bd4b163eab3aa44b8d4e85a7bb63bdf6d4f05e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:e1:55:4b:4b:5c:5c:b8:f5:2a:55:70:52:
ef:f0:14:c8:fb:ee:a2:ee:8f:e2:f9:48:a6:98:02:
3d:64:85:1a:02:60:60:b5:f0:6c:5f:a0:11:0d:6f:
bf:6d:11:66:e3:17:99:d2:8b:30:49:24:78:bb:f2:
9e:b2:3c:5e:21:a2:60:b5:5e:20:96:4b:c7:d9:b0:
00:05:75:8c:6a:f2:70:38:b5:d3:40:a5:61:fe:a1:
4e:8e:6e:3d:35:65:3b:8a:b5:cf:25:57:22:da:4a:
d2:2b:9f:6c:eb:68:22:bf:79:75:9f:ef:8c:38:ea:
8b:eb:12:a6:a9:e1:f0:09:6a:69:da:08:f3:3b:ac:
a6:3b:b8:5f:60:ce:57:d1:fa:e8:b6:1b:7f:c1:07:
dc:76:b1:aa:b0:54:b1:0f:78:7c:b8:ac:f2:a5:b3:
7d:ee:f3:d3:f2:64:d4:23:f6:a5:c2:a1:c6:ba:83:
50:6d:5f:cf:a1:b6:8e:08:56:19:ad:5c:cd:e0:8d:
92:6f:8c:37:f8:39:9d:aa:d5:39:ab:8d:2e:9d:18:
1d:e9:94:11:af:4b:30:75:00:b3:26:84:58:75:5a:
a0:a5:95:07:67:aa:de:b4:10:96:ff:c8:94:8d:71:
03:31:a0:87:a2:83:de:46:eb:4e:67:ee:11:23:8b:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D4:B1:63:EA:B3:AA:44:B8:D4:E8:5A:7B:B6:3B:DF:6D:4F:05:E0
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6e:74:b7:60:41:5b:44:88:14:58:d2:db:74:a5:72:e2:f5:
e8:09:99:f8:62:ae:ad:ae:50:16:aa:03:67:d5:12:a0:ae:48:
8c:4b:33:d0:e7:2f:1a:44:7a:78:93:d0:ab:e1:3f:f1:c9:7c:
f0:2a:d4:e1:a9:cc:55:12:bd:b6:de:5c:dd:fd:b0:79:56:40:
44:40:d7:f5:91:f9:62:56:44:00:9b:4a:38:43:64:ce:e9:1a:
95:b6:ca:07:c7:0e:86:46:a4:cd:92:8f:9b:69:69:2d:bc:18:
6c:bb:d2:bf:16:d6:17:6a:af:8b:53:6a:d6:95:69:e5:0c:13:
ec:8f:db:62:f5:4e:37:55:5e:10:2c:ae:e5:7a:82:bb:81:e1:
43:3c:67:a4:e3:a3:d3:93:47:01:53:b0:81:1c:82:e1:f2:27:
9a:ad:79:2e:23:e7:57:8b:79:1b:89:82:29:77:8a:41:55:44:
6a:cb:aa:fc:48:f8:52:a2:03:bc:70:94:47:b7:ea:2f:56:b3:
9d:c9:63:ae:13:39:99:d4:eb:d4:88:df:5f:31:cb:96:93:d7:
30:4b:e3:cf:0c:31:33:da:76:91:c4:8b:51:90:59:1f:d3:c1:
42:d7:29:b9:a3:55:b3:e6:49:2a:c5:6f:06:f1:8c:48:d4:2d:
ed:a5:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:19:17 2025 by rpki-client