Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: caeEsySon2wCaz2HeVfccSn/25w4Q6xyQfY8ewNtuO0=
Subject key identifier: C2:A7:BE:3B:AB:6E:F2:9E:0C:40:22:A5:5C:D7:84:B6:D9:DC:FB:29
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 0196748C47F439AC06B5F5AE51087378AD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 145C
Signing time: Sun 27 Apr 2025 00:01:12 +0000
Manifest this update: Sun 27 Apr 2025 00:01:12 +0000
Manifest next update: Mon 28 Apr 2025 00:01:12 +0000
Files and hashes: 1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=)
2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: jYcRxSMhXAVgDkiaLcSwZ6m5B203uXlWh/NL5TKZTvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:47:f4:39:ac:06:b5:f5:ae:51:08:73:78:ad:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Apr 27 00:01:12 2025 GMT
Not After : Apr 28 00:01:12 2025 GMT
Subject: CN=c2a7be3bab6ef29e0c4022a55cd784b6d9dcfb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:62:65:f2:f0:91:53:dc:bf:fc:47:a9:8e:
91:2b:d7:d9:a1:9f:ba:69:22:39:33:bc:69:f0:3c:
5b:5d:9e:c2:18:96:4d:f4:78:80:9f:83:4c:52:a2:
aa:84:01:1e:12:a1:c9:44:0c:42:9a:26:69:8f:a8:
e8:fa:77:5a:f1:df:2f:3b:b5:d1:dc:05:44:f7:81:
f7:43:f8:32:2c:cc:e9:44:43:8a:d8:be:37:62:fc:
28:88:42:f2:ec:e0:b7:4e:af:da:23:b0:9f:3f:2e:
e1:59:67:c3:a2:5d:e1:92:3b:17:01:3a:1d:a0:6d:
62:f8:66:49:0d:31:37:a0:48:13:e2:4d:45:8f:2a:
1f:c2:df:08:88:7b:7f:57:53:d6:ec:25:bf:57:43:
d0:d8:7f:cd:98:99:dd:04:31:2b:67:2f:ca:bf:d1:
be:ee:95:67:61:80:17:0c:a8:f6:ac:5c:3a:e5:d6:
5c:94:c1:51:00:23:09:65:db:b0:c2:b1:72:58:32:
1f:7d:b1:83:bf:f9:9a:8b:15:5d:16:ac:c5:b8:95:
aa:ef:d5:12:d4:73:32:cf:c3:9a:56:8a:11:1d:92:
e9:3c:67:6d:53:c7:f8:93:c3:bc:f0:41:c3:8d:f7:
a3:db:0c:51:e8:b4:07:26:8a:54:03:80:9e:55:33:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A7:BE:3B:AB:6E:F2:9E:0C:40:22:A5:5C:D7:84:B6:D9:DC:FB:29
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6c:88:78:fc:89:79:eb:2a:b7:d7:e0:87:1f:a7:ba:10:7d:
43:a8:c6:fe:ce:ad:0a:c3:26:7f:52:a7:8b:b5:b1:60:8f:8e:
44:1e:eb:52:90:2b:d9:e3:cb:6c:7f:e4:f2:ce:5d:21:5f:78:
4f:29:ab:d7:65:f8:d1:3e:82:c1:ab:9d:18:e6:93:c5:e2:84:
a4:7f:b7:3f:23:af:20:d2:2c:08:4c:8b:cb:73:dd:f3:39:64:
6d:71:87:72:a0:f6:cb:e2:63:3a:75:ba:45:38:37:20:90:de:
12:5f:27:4e:a5:62:4f:45:45:9d:87:1f:3f:88:dd:82:97:a0:
36:44:8f:16:93:6e:c4:38:0d:92:19:65:2d:93:9a:51:4a:b0:
f7:36:ad:68:ff:ac:5d:dd:9b:9b:24:a2:b1:dd:8d:49:d6:88:
2b:90:a7:89:1f:52:e3:12:f5:cd:ff:55:40:df:1f:e7:aa:2d:
98:e3:a5:fe:d7:b5:f4:c5:cf:48:f8:c7:b7:1f:d7:a5:c7:87:
7d:6d:35:c6:8c:92:7f:74:93:d9:41:a8:d1:2a:93:1b:2f:55:
ca:f8:3b:3f:fd:61:75:58:88:f7:68:ee:1d:52:bd:32:a5:e3:
aa:3d:82:6f:f7:f3:d4:d9:51:c7:4c:e4:4b:74:60:92:b4:8d:
42:80:55:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:33 2025 by rpki-client