Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
File: nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft (raw, json)
Hash identifier: p/nwEAToBI0jc77jpQrjaECj/14yFBKBpWZRX8MLJGA=
Subject key identifier: 7A:32:EA:13:EF:48:A0:09:DB:3D:1E:81:9A:0B:D4:24:AA:47:B7:E0
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Certificate issuer: /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial: 01967D5823E4C9556875B481304E00819252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
Manifest number: 1409
Signing time: Mon 28 Apr 2025 17:00:50 +0000
Manifest this update: Mon 28 Apr 2025 17:00:50 +0000
Manifest next update: Tue 29 Apr 2025 17:00:50 +0000
Files and hashes: 1: D2puN1AdZ1JNvFyB30_yGN8jQe0.roa (hash: 2k+YekT8y6pWHIhQMm8Q342e5tW1eRByVypogLnX8G0=)
2: U_LNSvlDlkkr0YEu8loP_N3lVG8.roa (hash: sfDFxTDzQkmKbFdSJOmY1OQKmiVJ1hkpwWXjIhD3ogw=)
3: nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl (hash: 0hQFR0XnP86qo7sCyIh7HsWtteZ4YK13LFrrS+/5pW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:58:23:e4:c9:55:68:75:b4:81:30:4e:00:81:92:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Validity
Not Before: Apr 28 17:00:50 2025 GMT
Not After : Apr 29 17:00:50 2025 GMT
Subject: CN=7a32ea13ef48a009db3d1e819a0bd424aa47b7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:cd:e5:29:7c:2b:49:b5:9e:0b:79:7f:28:
c7:15:50:5b:a1:63:a6:dd:19:d6:d3:b4:43:47:3a:
39:bb:6e:8b:9e:8a:cc:21:55:46:dc:0a:16:82:f1:
bf:ce:0d:a6:a6:ea:58:f5:fd:d1:a6:da:b9:4d:4d:
8b:3f:16:d3:6f:45:b6:53:43:7a:6f:f3:cc:2e:d6:
1e:2c:d3:21:a5:a5:bf:b8:2a:c6:6c:64:95:b3:da:
73:10:84:03:85:7d:b3:af:0b:17:de:3e:69:33:bd:
44:75:ba:a7:35:2a:38:53:6e:29:30:86:ac:c3:94:
35:e0:f8:10:c6:50:3a:b6:71:1e:b4:d0:d7:8a:e0:
04:10:d1:09:83:bc:14:66:11:9a:28:0e:9c:51:39:
6c:a5:99:b5:1e:f6:ba:22:9d:85:a1:4f:1a:f3:64:
ea:71:e1:ef:f4:50:a1:bd:2d:7c:81:2d:66:59:e4:
37:e0:a1:f9:2b:51:f8:91:f2:88:47:12:86:0f:63:
95:29:7f:ec:84:f5:e0:b6:47:5b:c6:d3:05:33:1b:
22:b1:bf:61:03:8f:43:63:38:b2:48:7d:a4:94:9e:
df:40:11:99:73:00:cc:5d:6d:f7:d5:38:75:76:6c:
57:ee:20:15:de:ee:b8:f1:cb:cd:0e:ee:aa:50:1f:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:32:EA:13:EF:48:A0:09:DB:3D:1E:81:9A:0B:D4:24:AA:47:B7:E0
X509v3 Authority Key Identifier:
keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:12:c3:95:c7:ca:28:a8:c1:95:4b:bb:2c:fb:d0:2a:9e:26:
85:1d:a9:ca:c6:44:d4:55:5b:8c:3d:eb:10:a9:3d:02:42:b0:
cd:5a:b6:76:bf:b6:40:a1:7e:04:7a:00:c5:e2:9c:3a:11:22:
8b:46:9f:c3:17:f8:2e:79:fb:50:56:dc:a7:bc:9b:76:da:f6:
a8:f5:94:a1:63:17:ec:db:fb:12:5c:d5:5b:98:6c:1e:d7:d6:
b5:8d:ec:69:87:4b:82:fd:2e:89:40:ed:5d:e0:c3:a7:63:17:
21:5d:70:91:b3:de:11:db:ff:14:16:9f:fa:c1:4a:86:77:d0:
63:46:54:15:67:82:1c:7e:ae:01:28:49:0d:c6:31:cf:39:2a:
f3:b7:e4:8b:ab:6c:7c:c5:8c:c7:7f:49:75:52:6d:4e:e7:7c:
67:51:5c:6a:b9:ad:e5:b5:d2:1a:0e:0f:3b:90:ca:e4:e0:00:
0c:d3:14:aa:d7:88:cf:16:2b:a0:17:9e:09:53:f4:c0:80:e4:
64:d6:f0:18:fc:cb:5e:3a:02:c4:0a:a6:01:7a:21:33:2d:36:
ac:5c:cd:f6:83:7c:d4:5f:3f:b3:7b:6c:6a:47:af:a5:c4:28:
8a:06:bc:23:bc:50:5b:d6:b0:85:2f:f1:73:ed:78:5d:98:6c:
28:ab:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:42:07 2025 by rpki-client