Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: nD5dYgl4WJ/mlpRXEKH7QOjneHbtPZ3HMMyouKMQI4w=
Subject key identifier: 0F:28:16:EA:EB:EB:A4:AB:C4:2D:C8:9D:CB:38:5B:84:EC:42:1F:9C
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 0196748B683732CF614617110BC0BD4E184D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 0DCD
Signing time: Sun 27 Apr 2025 00:00:15 +0000
Manifest this update: Sun 27 Apr 2025 00:00:15 +0000
Manifest next update: Mon 28 Apr 2025 00:00:15 +0000
Files and hashes: 1: H1xZrK8BzhRwkTkCMVhmcve9QBM.roa (hash: Ikkhh1Z73FpF6J184UPhQAhV8U+jJLMRcZ3g/9Cu0hA=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: cQ5ak8kAfrDgYA6wMu5SK+u17KKucFiXgb7FoKAqcus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:68:37:32:cf:61:46:17:11:0b:c0:bd:4e:18:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Apr 27 00:00:15 2025 GMT
Not After : Apr 28 00:00:15 2025 GMT
Subject: CN=0f2816eaebeba4abc42dc89dcb385b84ec421f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:ac:9f:9d:a8:87:f0:fc:b9:77:33:90:42:
90:c5:d9:e0:7d:49:6e:bf:4b:c2:92:48:ae:95:7c:
62:69:4b:ae:da:95:89:37:49:9c:9a:60:4d:47:e5:
02:c5:7b:4d:ab:3c:a0:b9:18:96:fa:f4:db:95:d7:
98:0f:32:58:7b:4b:09:f1:30:60:83:b8:fc:47:3c:
e7:b2:1b:b6:51:f2:52:eb:d6:2f:e8:05:0c:0d:2e:
ab:6b:08:65:6d:a6:7f:b4:b1:71:72:dd:e2:fc:12:
79:32:63:32:70:6f:b1:1d:78:9d:89:be:f8:60:8e:
19:ac:c1:4a:a3:d5:02:ca:bc:87:7b:98:7c:5c:4f:
95:07:17:38:e3:aa:c7:b2:25:07:a2:3e:4d:56:d0:
0e:ff:c4:b2:de:c1:78:a4:d5:3d:e1:13:e1:b3:f3:
43:0e:11:5d:77:0f:93:74:4a:db:c2:ef:17:ba:c8:
b1:33:3b:64:c2:c7:a6:79:50:48:b3:b0:b4:38:2d:
b2:5d:14:5e:50:0b:75:15:98:a6:06:cd:d8:4f:5a:
f4:be:0e:d4:46:8a:bc:fa:c0:46:85:73:13:2e:60:
52:1a:ad:50:73:83:1b:b1:1d:5c:bb:60:2a:74:90:
e2:f7:31:19:f6:55:f8:98:89:98:28:65:a6:38:00:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:28:16:EA:EB:EB:A4:AB:C4:2D:C8:9D:CB:38:5B:84:EC:42:1F:9C
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d3:97:09:60:b1:74:a5:e9:c5:17:19:7b:dd:52:ec:63:3a:
c1:4e:eb:6d:10:87:09:75:b1:86:40:2d:56:25:c4:20:a9:67:
67:1a:11:83:c8:ed:f5:df:3d:1b:b5:65:d7:01:11:09:28:1a:
59:fd:16:d4:88:a0:d8:e3:d5:93:2f:1e:8e:e7:ca:33:b2:b6:
06:01:c1:2c:61:34:fe:17:71:c8:e2:4a:7d:d4:65:a9:a2:2a:
62:76:5e:30:e0:a4:29:48:07:fc:1f:e9:c2:f8:dd:cf:8f:b9:
1a:4a:e6:6a:30:b4:db:d7:98:81:55:67:8e:b5:07:c6:ef:d0:
1d:e5:4c:24:a9:2d:b3:f0:03:a8:cc:07:5b:01:04:55:4a:03:
0e:8d:19:bb:8e:f3:9d:df:3a:8b:76:84:19:91:4a:d3:2b:59:
a3:22:2f:d8:a9:15:1f:13:c5:d4:1b:a6:bb:74:2b:7b:4f:14:
f8:7b:8b:43:33:ba:40:d0:61:7e:a9:d3:b7:18:41:ef:06:16:
d2:0a:1c:af:80:06:de:55:36:e1:d7:1e:94:41:d1:e0:8c:60:
a1:90:6e:39:aa:15:52:d3:dc:1e:59:b7:51:09:e9:f7:c9:62:
dd:99:37:80:a5:26:a0:1b:01:89:c4:ba:f5:26:0b:a0:f4:a8:
39:e8:95:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:46:56 2025 by rpki-client