Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: tiGumIEN2UHl+HYBQCfGym5S6xg4bcdrs9PXelWfqeo=
Subject key identifier: 92:9B:7F:41:30:9C:B0:50:26:BF:C1:8C:BD:1E:7F:EE:A7:F2:F1:1A
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 0196748BD58119D7F893448B5227A51CC089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 0E38
Signing time: Sun 27 Apr 2025 00:00:43 +0000
Manifest this update: Sun 27 Apr 2025 00:00:43 +0000
Manifest next update: Mon 28 Apr 2025 00:00:43 +0000
Files and hashes: 1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=)
2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=)
3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=)
4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=)
5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=)
6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=)
7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=)
8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=)
9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: NqzGbAbYFze0uuR9KKCCWMS6+dvaabvhEqCBNLSHyes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:d5:81:19:d7:f8:93:44:8b:52:27:a5:1c:c0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Apr 27 00:00:43 2025 GMT
Not After : Apr 28 00:00:43 2025 GMT
Subject: CN=929b7f41309cb05026bfc18cbd1e7feea7f2f11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:08:64:38:f7:39:6d:14:15:f7:54:b7:d5:
37:5f:2a:ce:cb:1f:d3:91:55:da:2a:8c:71:9d:c9:
fc:4b:37:fb:44:4d:65:51:ed:b6:1b:14:10:11:b7:
1c:70:5c:ea:fc:3d:dd:c7:7c:67:c8:ae:43:93:1e:
3c:e0:cd:69:0a:e0:86:c3:c4:29:fb:0b:e1:c8:11:
8f:12:7e:ed:be:86:e0:51:5e:2f:7e:e4:d2:6c:16:
a7:92:f7:b2:63:a8:3c:2e:d4:95:d6:9a:36:c7:af:
0b:e4:bf:80:3a:1e:05:40:c4:e9:1f:c8:de:c1:07:
ea:0a:47:fb:37:ba:ca:d5:32:97:a3:46:85:74:e7:
71:e5:b7:ea:a7:bb:be:25:84:47:8c:f8:59:0f:ce:
b7:f5:48:b1:71:ea:a8:32:ce:13:ad:eb:cf:a7:8c:
2b:ef:e2:b9:f2:3c:a7:2e:95:19:5f:81:0f:85:eb:
3e:82:b0:54:bf:b6:89:d8:84:96:06:dd:68:0a:ba:
c5:b2:3a:29:bd:9b:55:f5:27:bf:0b:a2:43:22:0e:
4c:06:ce:48:fb:41:30:68:ed:dd:e3:13:75:38:93:
d1:2a:97:a1:44:58:0e:b0:44:68:75:09:b8:f7:0e:
ba:c2:f8:55:de:a7:9f:2a:c5:58:81:ef:53:f2:c0:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9B:7F:41:30:9C:B0:50:26:BF:C1:8C:BD:1E:7F:EE:A7:F2:F1:1A
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:dd:81:ba:42:6b:57:9b:df:66:6c:22:ff:b5:0f:12:bb:55:
50:f7:31:0c:8d:75:69:2c:dd:22:47:b4:2d:ad:f0:ff:a7:04:
43:3c:3a:04:38:24:fe:4d:c9:c6:ed:73:b1:c6:11:a7:94:8d:
16:d2:79:c0:7e:da:4e:80:b1:f0:f4:9b:ea:6a:ec:de:12:ab:
5d:4c:26:0c:64:47:09:06:f4:a1:8b:55:da:1b:12:b8:1c:e5:
48:d6:27:30:83:1c:61:ff:26:3e:e8:e3:a5:cc:00:8f:41:d2:
79:95:af:bc:b0:67:e7:46:6e:4b:0d:f1:cc:53:6f:de:f1:96:
43:70:f9:bd:df:5d:e9:1f:7a:16:3a:34:e0:2a:15:96:e2:54:
02:8c:ec:d4:0e:f7:ab:11:2d:9f:55:1e:ad:62:91:bd:52:e6:
82:ea:6f:69:ec:0f:a4:a1:e9:d3:55:91:d3:e0:1a:b8:51:5d:
15:a2:b5:03:ea:8c:54:1c:36:a9:85:99:a8:7a:40:14:88:d0:
7a:da:35:bb:7d:36:c8:f6:42:c3:44:3f:01:2f:13:39:22:94:
65:6a:c5:9f:6b:c8:e7:1e:f4:1c:2c:b5:69:51:31:f5:cb:9d:
94:9e:6e:70:51:08:2a:d7:26:fd:8b:a4:6d:0b:3e:92:ab:0c:
67:0c:41:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:00:24 2025 by rpki-client