Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: MMQbmy3BdH9gGj2hnQXJopBL2DSMzlTI5xXACfoSTN8=
Subject key identifier: DE:D5:84:6E:F3:18:40:09:10:91:25:F9:D2:69:68:54:ED:43:AF:9E
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 01967EA152DF244BD2E900E64F6A8E330F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0846
Signing time: Mon 28 Apr 2025 23:00:23 +0000
Manifest this update: Mon 28 Apr 2025 23:00:23 +0000
Manifest next update: Tue 29 Apr 2025 23:00:23 +0000
Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: AzsfPBcF3ZzsDmWCovx3qwonMdbN+B9gGKsjx38UJSI=)
3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:52:df:24:4b:d2:e9:00:e6:4f:6a:8e:33:0f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Apr 28 23:00:23 2025 GMT
Not After : Apr 29 23:00:23 2025 GMT
Subject: CN=ded5846ef3184009109125f9d2696854ed43af9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:76:4c:80:d4:62:3b:cb:fb:94:7f:7a:d7:
00:1c:8c:55:e2:81:9d:01:c7:84:13:ea:65:be:3c:
58:92:78:44:61:0e:f4:c9:17:f2:b8:0b:b4:4c:8b:
c3:7f:e4:d1:7b:f9:cd:01:5d:69:f0:a0:34:16:4b:
86:83:bf:6a:61:f9:bb:5b:cf:84:4b:66:8c:fe:c3:
11:73:84:2f:d2:98:31:4b:75:f1:a2:87:c4:75:95:
d3:10:af:c4:c9:49:e8:74:6d:63:7c:49:dc:93:4c:
01:80:81:3e:99:04:3e:9b:ab:c4:88:20:58:bc:3d:
62:ed:a9:91:14:0e:f5:53:0d:ae:0e:39:79:ab:5b:
f1:d0:a5:35:b0:51:24:8c:34:6a:23:df:81:e9:6d:
d6:50:50:72:b6:d3:f5:6b:8f:61:b5:24:e7:06:07:
71:90:f6:5d:d0:34:da:7c:9a:d9:dc:ca:d2:8b:1c:
c4:88:43:c5:bc:d5:5a:fa:75:68:f5:1c:29:9f:f7:
43:88:0a:b0:6b:3c:14:31:33:f3:63:a0:c4:96:9a:
e5:a9:45:4d:23:45:e2:bf:98:26:48:fc:f3:1f:37:
c2:f4:1f:6d:de:56:0b:47:23:3a:37:85:1d:37:72:
d2:db:1d:7b:e5:95:9d:dd:a9:8f:d1:03:c1:cf:f5:
44:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D5:84:6E:F3:18:40:09:10:91:25:F9:D2:69:68:54:ED:43:AF:9E
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:61:ac:e1:a7:fa:47:56:51:6d:45:0e:37:d6:bf:44:dd:a9:
2c:6e:f8:81:d9:49:5a:0c:a7:9f:32:9b:19:4f:5c:77:ab:c3:
40:d1:24:2a:81:66:68:7f:a3:ea:4b:ae:b1:31:2a:99:4e:c7:
e0:4d:04:27:d0:65:43:1b:df:97:41:bb:22:ab:db:da:26:84:
ad:37:d9:77:f7:e0:ff:fc:60:1a:00:be:45:ba:d1:8d:f2:4d:
8c:e2:28:5b:1c:78:e7:29:84:bf:1f:d5:2a:1a:ab:38:39:70:
59:60:f7:7c:5d:b5:c6:2c:d3:43:10:d6:bf:8d:56:9a:88:25:
4c:a6:8a:1e:34:66:8e:0f:cc:d2:f6:5c:e5:6e:85:83:9b:aa:
63:18:0c:6b:8a:77:c8:29:bb:de:bb:cb:fa:46:7b:fd:85:35:
f4:2f:6b:f7:db:76:3e:f3:ac:1d:23:98:7e:fe:d0:9f:b6:20:
b3:6c:0f:b6:03:8e:9a:0c:8a:9b:f8:42:97:cc:e6:30:93:4e:
e4:c5:6e:8b:28:26:1e:eb:8d:a8:83:d9:26:0b:ed:d3:e5:77:
9d:0d:b8:b3:1c:26:4c:e9:17:a5:ee:85:54:af:6a:3a:c0:da:
89:81:7f:d1:1a:28:d2:38:0d:22:eb:bf:1a:82:cc:72:72:76:
b6:06:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:48:07 2025 by rpki-client