Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: 1ncGQYY7DmyC5TlnN9o8yAMmALDULqpJFbVUE9XlYWQ=
Subject key identifier: 90:3F:3A:59:74:53:D1:A5:69:CC:CE:52:14:18:30:9E:36:0D:F8:A0
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019682B550A1C2CFE7EA55D35284F36569DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0841
Signing time: Tue 29 Apr 2025 18:00:42 +0000
Manifest this update: Tue 29 Apr 2025 18:00:42 +0000
Manifest next update: Wed 30 Apr 2025 18:00:42 +0000
Files and hashes: 1: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: sYc+JKq0joh9Eb7oJ24NP1Ki6FODWfuQAv/5tDFK+Sw=)
2: tONpcnjfR_-MsVEafiNaGJ4uDm4.roa (hash: SGzJp4OEszdVKR+f54x18hkn789cto3mWJ/E8xABEU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:50:a1:c2:cf:e7:ea:55:d3:52:84:f3:65:69:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Apr 29 18:00:42 2025 GMT
Not After : Apr 30 18:00:42 2025 GMT
Subject: CN=903f3a597453d1a569ccce521418309e360df8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5f:24:1b:7c:89:35:e0:10:e2:56:46:13:5d:
17:5a:09:6d:62:55:65:ac:f6:45:5c:79:c9:ed:4c:
58:da:df:0d:46:a5:b9:2a:e3:72:45:91:02:b1:40:
ae:7d:b9:6b:ce:4f:24:91:19:b0:f0:6d:03:eb:41:
e3:41:a7:f5:a1:7a:10:4e:9a:71:be:ac:d2:1e:95:
34:77:61:ae:9a:92:c2:b8:2f:81:65:bd:a9:28:bd:
85:5c:4d:0c:a4:7c:0b:66:9c:38:cb:be:cc:5f:90:
e0:76:5e:ab:9b:62:c1:ac:4f:d2:a9:94:7a:01:88:
d8:29:6c:b6:49:9c:b9:ca:46:cf:71:24:0c:8d:1d:
50:aa:f1:d9:53:af:43:cb:d6:be:31:89:0d:bf:8e:
14:f8:cf:41:f8:2a:ce:2a:99:59:dd:dc:eb:5c:13:
04:61:73:f2:d7:bd:2d:6c:a5:92:9d:a0:f3:bc:bd:
7b:3b:7b:b2:3f:72:84:1b:5f:d8:ab:39:3b:8e:f8:
f4:07:f3:46:73:ce:c9:d4:89:e8:2b:b4:c4:ca:41:
63:16:c5:50:b0:c2:9c:12:ba:ed:cb:66:d1:f1:c7:
06:c2:ac:31:eb:e6:21:79:51:35:04:70:3d:76:45:
d8:fe:95:22:ad:a8:af:f9:7b:84:f0:f7:80:b1:77:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3F:3A:59:74:53:D1:A5:69:CC:CE:52:14:18:30:9E:36:0D:F8:A0
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:22:74:29:81:0f:da:60:93:26:6c:a4:7e:29:70:f5:97:c0:
c9:ac:a2:75:83:32:72:61:0d:a8:19:ce:f0:5d:6e:34:3e:51:
6d:86:97:25:92:28:53:3d:16:c1:c6:47:16:0e:78:50:22:81:
87:f4:b5:2d:0a:a0:8e:a3:2e:98:31:66:3b:6d:9e:40:2d:e2:
ed:8c:32:9f:c3:fc:3e:97:26:35:26:e9:36:d3:3a:31:a5:24:
93:89:5d:56:ef:d4:07:43:60:9a:fd:41:0a:68:2f:ff:3b:3d:
d4:6c:e3:ce:0a:3a:77:2d:6e:7a:65:5e:7f:af:5d:2b:fd:b6:
04:6d:b6:3c:cc:fe:3f:5a:8f:d2:ea:c3:66:bb:ba:b0:8e:87:
0e:25:cb:21:4c:81:3f:e7:ab:da:3f:d7:84:74:d1:0a:ca:d6:
28:93:2f:f3:1c:59:1c:88:79:6b:67:56:a7:d5:8f:cb:74:c1:
4b:5f:2c:24:7a:b9:9d:5d:24:c9:de:4b:f8:d5:bf:1d:9d:a7:
91:75:75:71:1b:95:fd:32:a2:68:90:56:18:d7:93:45:ae:f9:
9b:8d:36:b1:3f:59:a6:47:3f:fe:6d:74:03:0b:56:61:f9:c1:
2d:d8:ed:cc:b6:fc:17:e6:5f:69:14:be:8c:af:8d:9a:b3:3a:
7a:6e:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:40:04 2025 by rpki-client