Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: TDxJCWfBQUL5V5ZyyEoctF6dBN6ZUQYpAdNK1fPm5Qk=
Subject key identifier: 2F:38:6C:78:A1:09:E3:DE:DB:93:FF:DA:13:91:84:AB:6A:D3:B6:95
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 01967C44FDAB6F97ED5A226796148C701F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 1517
Signing time: Mon 28 Apr 2025 12:00:18 +0000
Manifest this update: Mon 28 Apr 2025 12:00:18 +0000
Manifest next update: Tue 29 Apr 2025 12:00:18 +0000
Files and hashes: 1: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: RT13tRd6dmn38e6v6Q7xoeMqAvMrwxzw+WWvNYCS0YY=)
2: u2BNAAC7Dm0euPOTB8HOX-QylyE.roa (hash: GNqBAmVB3is0CDKmPUm0vfs8TWmU1YL168pv/EKk5Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:44:fd:ab:6f:97:ed:5a:22:67:96:14:8c:70:1f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Apr 28 12:00:18 2025 GMT
Not After : Apr 29 12:00:18 2025 GMT
Subject: CN=2f386c78a109e3dedb93ffda139184ab6ad3b695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:d3:85:36:15:29:bf:4f:1d:f5:74:5f:31:
01:46:a6:3c:85:83:c5:c6:f3:34:41:13:48:83:7b:
60:55:c9:83:18:aa:10:ba:5f:4e:bf:5c:a8:a1:d7:
d2:f5:bc:c8:e9:60:12:77:62:39:95:e3:d2:74:3b:
c6:9e:9a:8c:ba:34:72:e7:44:bf:65:8a:42:5c:6a:
5a:36:06:0f:f6:73:7c:4a:32:48:3d:cc:bb:c5:48:
fa:64:fa:60:bf:45:7b:68:97:73:5c:4b:be:b1:67:
dd:55:a4:a9:a8:06:11:c8:bb:d0:ba:38:6d:12:89:
10:bc:85:16:20:ab:b0:e6:9a:b7:e7:53:bb:e5:e2:
5a:43:c7:19:8d:ae:a4:1a:8d:a5:9c:2b:1b:6c:1e:
98:e3:82:61:97:c1:dc:4f:e8:17:01:2b:b4:63:22:
d9:54:9d:26:88:b0:47:71:f5:5b:cb:90:2e:1b:cd:
b6:a2:e6:da:44:1b:b6:5b:74:b5:5e:fd:b3:15:fc:
79:ab:b0:f1:4a:66:a8:33:c7:91:3a:ed:41:7f:09:
a5:09:5c:06:8f:6e:fa:19:27:57:65:26:68:a0:4d:
32:a8:70:0d:37:d3:c1:67:ff:0c:d7:06:bf:01:55:
4e:c7:ef:7a:7e:27:67:39:16:21:1b:f4:9b:f9:a9:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:38:6C:78:A1:09:E3:DE:DB:93:FF:DA:13:91:84:AB:6A:D3:B6:95
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f9:54:4a:c6:f6:b2:b0:96:ba:da:64:51:1b:0b:5a:1e:ee:
ca:85:7b:16:0a:3e:6a:94:d3:d8:34:de:f3:03:47:c2:b9:f0:
31:c6:65:77:87:c9:f5:ef:d4:dc:50:42:e0:11:40:a4:7d:55:
dd:85:70:8f:04:50:98:97:cc:23:19:6f:75:2b:bd:a2:9b:f8:
a7:69:82:db:23:ba:fe:b4:e5:cd:18:32:f0:3a:e0:ce:41:49:
43:2d:d5:fb:94:e7:f8:8d:87:1a:2c:15:63:c7:19:0f:1a:6c:
3c:b5:32:55:2c:e2:f4:2d:a8:33:5c:6c:28:90:d6:32:c6:78:
c3:2d:8f:5c:6b:20:b1:eb:5f:df:eb:7c:8f:c4:fb:3b:b0:7a:
67:be:9a:3b:c6:a3:dc:eb:d3:31:eb:b8:8f:e6:3d:c1:fa:44:
28:4a:20:90:09:fb:c8:d6:93:82:95:42:5d:7c:ea:54:19:b2:
b1:bc:ee:d7:5d:c0:dd:09:65:b6:de:30:d8:84:c9:4f:b7:0b:
83:4a:1f:20:56:19:be:aa:cd:eb:46:7d:c5:1f:4a:12:8b:8d:
e1:88:78:52:3b:45:4f:3f:62:f4:d2:8c:ab:e4:8f:ae:23:b5:
cb:e3:9b:42:63:f3:1e:1b:f1:17:84:b5:f1:d8:fc:51:8f:90:
a2:b3:c5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:59:54 2025 by rpki-client