Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier: V/NakjmJxY9u7pSeFREHH0Qe9SJTWzxAFngST6cL3r0=
Subject key identifier: 3D:01:7A:F4:AC:20:D0:BE:2A:C8:28:C6:B1:08:04:9B:1A:07:46:7C
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial: 019675674339D2F8B5237971B7C6BE0DBF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number: 04E9
Signing time: Sun 27 Apr 2025 04:00:23 +0000
Manifest this update: Sun 27 Apr 2025 04:00:23 +0000
Manifest next update: Mon 28 Apr 2025 04:00:23 +0000
Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: ChRFsbeYAMEqgHGQHUfBT/KoRrD+prHihDvF/bMMZpE=)
2: uDZZBTPRRP5MQogb2OjdT8pUiBA.roa (hash: T9yL9Bw5mv08XIGrA3/0U3W6rC1uZNivZ+GrYQ4KE/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:43:39:d2:f8:b5:23:79:71:b7:c6:be:0d:bf:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Validity
Not Before: Apr 27 04:00:23 2025 GMT
Not After : Apr 28 04:00:23 2025 GMT
Subject: CN=3d017af4ac20d0be2ac828c6b108049b1a07467c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:f2:a0:53:15:44:1c:10:b9:c8:95:a8:81:
75:1e:e7:a2:32:e4:ac:75:4e:21:b6:b6:98:5c:39:
f0:98:2c:0d:f0:69:4e:18:1c:42:da:df:e5:07:a7:
90:08:8d:e2:76:c4:8b:bf:1b:0e:97:3f:24:1f:0d:
8a:f6:b0:97:e1:c6:6c:39:62:20:29:30:72:03:2c:
58:2c:e4:59:d7:54:0b:42:f5:78:7c:f4:52:41:8b:
a6:12:7f:01:4d:c9:f5:b4:85:27:fe:08:4e:aa:d9:
45:06:68:0e:05:c0:b2:29:e3:0c:23:5c:a1:25:9d:
6e:ac:f6:06:66:a6:94:a2:8d:b1:81:7b:de:8f:b4:
59:88:1c:f3:ab:5a:fa:b8:36:ba:2c:7f:4f:4d:9f:
6c:48:ef:fd:d1:15:4c:c3:d1:6e:58:d7:95:4c:98:
1e:8b:53:ba:88:2d:cb:7a:3c:fa:c0:6d:5a:e7:50:
7e:bf:0f:26:be:d2:c8:d8:a0:cc:bb:11:2c:16:d8:
da:c8:b6:1b:3c:f0:e3:ba:3e:67:a2:63:bd:04:78:
36:d4:b8:cc:73:0b:c9:23:3a:8a:fd:95:5a:26:b5:
98:fd:88:28:29:96:7c:49:94:c1:8b:2f:0a:75:32:
6b:ef:f0:4d:a1:75:b8:79:c7:73:f5:c8:04:fc:53:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:01:7A:F4:AC:20:D0:BE:2A:C8:28:C6:B1:08:04:9B:1A:07:46:7C
X509v3 Authority Key Identifier:
keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:36:25:6a:c0:45:fb:2b:c5:4c:0f:e9:4c:87:9c:4b:43:00:
43:d9:1d:dc:39:95:84:c7:4e:86:50:0c:01:e7:60:4d:97:d1:
46:cc:15:57:63:2a:31:67:4f:57:fc:8f:6d:14:d1:35:cd:47:
0e:6b:e1:ef:7f:cd:e9:57:8d:a4:d7:52:7a:56:3f:d7:ae:b0:
c4:bd:61:6c:8d:81:0f:8b:79:33:3d:71:f3:2d:cb:d6:53:32:
87:53:3c:c0:a1:b3:bc:b8:bc:33:ac:04:bc:d7:2b:41:78:7f:
65:27:78:6d:83:ed:e1:c6:4d:9b:92:25:39:30:32:5c:9b:b9:
ae:c9:d5:50:ca:d1:d2:4a:91:f2:e5:dc:57:75:07:91:73:d1:
8e:48:5d:02:0f:ba:48:a9:d7:39:c3:c5:87:b1:3c:4e:17:fc:
e9:2c:9b:b7:c2:33:bd:37:b4:23:60:3f:ee:03:1e:dc:7a:d2:
a5:01:1c:e6:86:98:f2:f3:3a:d1:f1:64:5d:2a:0e:0c:55:9d:
8c:14:f1:10:3e:4e:97:2d:a6:f6:c2:fb:91:6a:69:72:e8:34:
ff:c9:6b:d6:37:12:09:60:fa:e6:1b:f9:d5:a4:62:36:46:9f:
82:1a:d8:35:79:39:d6:5a:3b:93:53:6f:49:f0:90:06:f8:40:
c9:dd:01:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:08:16 2025 by rpki-client