Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: 5UicQr8uchzb9NCt3QhYN4CGBo1UTNWzmpgONDP7dZY=
Subject key identifier: 2E:33:AD:5A:20:EE:DB:05:E4:86:69:02:DD:1D:FB:FB:FF:00:A2:61
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 01968021D6F4E73A04B7BA5DAC91CE055E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 1519
Signing time: Tue 29 Apr 2025 06:00:23 +0000
Manifest this update: Tue 29 Apr 2025 06:00:23 +0000
Manifest next update: Wed 30 Apr 2025 06:00:23 +0000
Files and hashes: 1: Etd-zR5nQJ_3oZWsvX_yh9qZs04.roa (hash: Va9UidVPtYR8CQHobQQrWe+S/Z2ABdjjbhF7ggqh2M0=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: wa0mx9wHLk6CEMmS5V4R40W8FGs9LpNDelPUkldOk+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:d6:f4:e7:3a:04:b7:ba:5d:ac:91:ce:05:5e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Apr 29 06:00:23 2025 GMT
Not After : Apr 30 06:00:23 2025 GMT
Subject: CN=2e33ad5a20eedb05e4866902dd1dfbfbff00a261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:76:4d:40:99:76:78:85:d7:a3:75:20:f9:22:
07:8c:c1:f6:ed:a6:a0:89:dd:19:4e:f6:7f:f3:5c:
7f:02:5e:7f:12:6f:ee:0b:9e:a4:4a:8f:14:0f:f5:
f2:52:d8:b3:6c:b4:32:70:29:5c:24:ce:21:9c:4d:
ac:81:63:f9:46:a2:bb:53:81:d1:6d:86:f5:ad:d7:
bc:81:87:70:12:d1:b7:e7:6a:3d:e1:d2:68:13:49:
67:0a:14:53:91:74:65:b7:69:b2:de:ce:0f:c1:c7:
7b:8a:6d:ac:02:f6:95:de:6f:ef:4f:10:06:34:57:
a6:87:a3:99:20:ce:f7:c1:01:21:08:18:6a:1c:a0:
de:60:6f:67:06:f9:32:2f:c5:91:3e:ae:89:4e:10:
74:c3:a6:58:d2:5f:25:c7:ce:8d:48:c6:0b:fb:a5:
56:55:c0:ba:e8:ed:4b:a8:7d:d4:a5:61:da:47:4d:
ae:2f:5d:76:76:4a:3e:9b:8c:48:01:02:38:09:63:
6d:ff:63:a0:bf:36:25:7e:81:37:a1:19:7d:a8:5e:
f5:9f:89:e5:73:19:90:eb:5c:e8:a8:71:ef:12:0d:
70:26:0f:66:9d:23:be:36:dd:1c:92:81:f0:ce:f7:
9a:f4:62:9e:66:8c:ce:e2:80:90:c8:5c:0e:84:a7:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:33:AD:5A:20:EE:DB:05:E4:86:69:02:DD:1D:FB:FB:FF:00:A2:61
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e5:42:2a:fb:51:5d:d1:9e:96:56:d2:ef:d7:a5:2d:6f:38:
03:98:e0:80:08:d3:92:66:00:db:03:cd:94:5a:d4:f9:b5:27:
0a:2f:15:eb:5a:cc:76:8e:8a:0a:03:cf:b5:1e:c1:15:13:9c:
11:51:fd:b1:8d:21:ac:4a:c1:97:84:66:7a:90:f3:5f:08:ed:
ed:8e:18:35:25:77:7b:80:76:5d:c0:84:53:39:05:b6:d2:4b:
bb:9b:04:0e:a0:12:86:24:41:79:29:78:61:7e:78:db:48:0f:
ec:b7:98:70:9b:d7:4c:db:59:d2:67:18:9b:a0:8c:65:af:fb:
64:51:a7:5c:3e:45:29:3f:67:58:b2:46:08:fc:e5:2c:b6:31:
f1:b6:f6:0a:47:14:5d:fd:88:fd:4d:52:c2:7b:95:a4:0d:86:
ef:06:ee:57:24:6d:b9:28:91:c0:22:96:c6:c9:7b:c7:6e:c2:
a4:48:49:11:4d:81:1b:7f:c8:03:38:42:25:c2:93:9a:4e:31:
39:53:a9:a4:0f:50:d9:15:6b:31:c5:10:0e:11:75:cb:26:02:
b4:f7:8f:00:7f:92:d2:16:6f:0c:c5:32:c6:de:07:48:69:07:
32:4f:5c:5b:05:f6:6e:10:34:e6:b8:24:d2:69:e4:31:ba:46:
ca:b7:ee:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:30:46 2025 by rpki-client