Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: ZM3oRsSAvWrUW5PR6SwKM2p9npsVlKKvbUGAe5Qp1Hs=
Subject key identifier: 60:FB:B3:14:88:16:76:EC:35:0D:BB:0F:67:46:16:18:D7:5E:86:EB
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 019675D5634E1F18344B7E6753B610E0A40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 0E6F
Signing time: Sun 27 Apr 2025 06:00:40 +0000
Manifest this update: Sun 27 Apr 2025 06:00:40 +0000
Manifest next update: Mon 28 Apr 2025 06:00:40 +0000
Files and hashes: 1: mcodiKTX1slSmfc3nZ7DZKGNYFk.roa (hash: 8YfkV+577aVFpH3FgiABnIRQh7w2LYtBhi55zdviFSU=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: pQoDmHGdMTJdQ30dqyez1Mk7XjAPLU6M4wTOx53UH7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:63:4e:1f:18:34:4b:7e:67:53:b6:10:e0:a4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: Apr 27 06:00:40 2025 GMT
Not After : Apr 28 06:00:40 2025 GMT
Subject: CN=60fbb314881676ec350dbb0f67461618d75e86eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:ad:db:a6:62:87:86:ec:e5:e1:5f:e4:bf:
e9:9e:78:88:65:9e:7c:51:a3:d9:a6:52:c1:95:0a:
af:21:00:e8:51:de:c6:2b:3f:b3:0e:df:7f:0c:80:
2f:8c:f3:cb:4e:8f:3b:30:75:dc:01:3e:18:79:a2:
ae:98:a5:da:9d:4c:d5:a7:91:d1:e8:9e:9d:a4:6f:
05:06:4d:ae:11:ec:15:1d:b1:c1:6b:e7:e3:b0:72:
48:21:95:49:a5:f7:89:3b:99:bd:fc:2d:85:bf:10:
4d:85:28:83:c8:df:e4:83:7b:e9:95:ce:f7:86:a4:
b6:fa:c8:79:fa:ad:b2:72:4f:54:d8:79:34:aa:7f:
81:37:39:ad:93:d7:7e:45:5e:07:04:cd:45:05:d9:
06:13:7e:24:87:82:73:04:f5:ff:12:00:e9:e4:a9:
50:22:dc:1b:9e:63:68:a2:7d:2d:95:f5:11:78:93:
63:ae:2c:4b:a8:24:57:a5:99:dc:5e:f3:3e:11:ea:
1b:72:e3:4a:a7:f8:0d:9d:8c:e8:a9:e1:8e:77:30:
73:d4:f5:61:be:c3:ba:97:dd:c9:ae:ac:ce:e4:ad:
95:a6:35:50:79:4c:85:ca:0b:fc:5a:29:5b:1a:6c:
b8:85:ed:e3:e0:5c:f4:c2:4b:91:ad:f1:e1:54:87:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FB:B3:14:88:16:76:EC:35:0D:BB:0F:67:46:16:18:D7:5E:86:EB
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1a:3f:63:cd:e8:45:40:b5:40:66:3c:88:ac:d5:3a:db:ab:
7b:55:7d:b8:86:24:3b:97:c9:c3:08:07:ff:8e:89:e0:7e:23:
ad:30:6d:74:05:99:ba:b3:b0:ee:ed:b0:17:37:9e:69:2f:87:
a2:03:70:e4:28:e8:ed:5d:d0:bf:c5:1b:cd:90:4d:af:91:54:
fd:2d:7f:6f:10:1d:30:db:2c:40:f0:90:1c:32:77:94:f2:2f:
cc:e3:d8:c1:59:b5:f5:b8:0a:b6:6f:47:89:2a:a6:9a:38:8f:
23:5a:3f:c4:2c:84:0f:21:ab:9b:fb:dc:3f:5b:04:a9:b6:e4:
90:e1:b4:71:7f:6f:09:79:10:e8:dc:18:35:b1:aa:0b:ab:52:
0b:e4:cf:1e:85:9c:20:a6:71:2c:b1:98:f7:b9:25:5c:67:4d:
a9:2a:91:87:b1:11:ea:9f:15:1e:47:5d:55:9d:65:a8:ce:4e:
8f:aa:0b:f7:0b:be:0a:70:e2:3b:8f:41:95:30:8a:72:9f:67:
08:18:95:44:31:3f:a6:22:71:43:0d:d3:f5:8b:1b:0f:da:74:
24:df:e0:14:e7:3d:51:29:1e:5c:20:84:2e:0d:f3:c7:f8:a8:
19:f5:4e:b0:c2:f9:ec:ea:b8:dd:51:59:87:a8:c3:fc:de:f3:
5a:77:7d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:45:20 2025 by rpki-client