Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: dQZ1mzEpylkzmHS0JFMUkXv3iN/kEq1172D5WW13UnE=
Subject key identifier: DA:82:26:A3:00:B2:30:95:7E:4C:C8:F6:7B:79:A7:06:83:6C:4A:43
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 019685EDC5DEE3DF570D164B3929A3B8BED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 0EAE
Signing time: Wed 30 Apr 2025 09:01:14 +0000
Manifest this update: Wed 30 Apr 2025 09:01:14 +0000
Manifest next update: Thu 01 May 2025 09:01:14 +0000
Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: rBd5DY3XcmZw4JjfvQrNOZKontq21wq3MmL5HYJCLSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:c5:de:e3:df:57:0d:16:4b:39:29:a3:b8:be:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Apr 30 09:01:14 2025 GMT
Not After : May 1 09:01:14 2025 GMT
Subject: CN=da8226a300b230957e4cc8f67b79a706836c4a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e5:da:fe:47:a2:35:1d:97:e8:e5:75:60:f5:
32:88:a2:be:a9:a4:5e:65:1c:fe:1c:ce:26:56:84:
58:0b:a9:84:ac:a8:b9:50:65:46:db:bc:2e:2e:0d:
e7:89:2e:6b:2b:cb:e9:3e:24:a7:71:eb:c5:e7:c3:
a9:9f:8b:2c:e5:34:02:d7:49:3b:13:2c:10:c5:d1:
34:2e:76:61:a2:5e:07:70:45:70:a6:fa:ee:b6:88:
58:71:0a:a2:63:83:53:21:ea:26:d0:3b:db:df:6d:
0b:80:1c:5b:d3:2f:e9:f1:2d:e0:2a:01:92:f5:c7:
22:f5:55:a4:33:5d:b6:53:86:04:5b:f1:6e:24:e8:
9e:44:6d:05:fb:c6:47:f6:f0:45:c1:69:36:f3:e6:
58:7d:4f:7b:31:cb:df:1c:f0:b5:f4:20:df:10:ad:
48:9b:54:b9:b0:05:b1:52:c8:8f:0b:2f:2d:d4:cb:
41:ab:e3:2d:66:6e:3b:a7:9f:02:7f:70:31:ea:a2:
d2:a5:d6:76:8b:a0:68:e0:58:22:74:ea:24:27:f8:
98:03:13:38:2c:55:1a:fc:04:36:26:ca:5e:6d:16:
95:a8:e7:be:32:a4:36:5b:a9:83:08:18:b0:62:e3:
e4:3b:0b:b8:c0:2e:5d:1d:40:88:46:13:24:21:88:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:82:26:A3:00:B2:30:95:7E:4C:C8:F6:7B:79:A7:06:83:6C:4A:43
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cf:ce:87:0e:e9:f9:fb:a4:a1:fe:e3:ba:0d:93:57:c8:2a:
8c:49:34:5b:ed:4f:b2:ae:4a:ab:b1:e1:1d:8a:5d:eb:ac:23:
50:b7:b1:80:78:05:67:7c:8b:ca:81:49:db:54:02:b0:eb:f1:
00:ff:7a:0b:0d:f1:b1:c5:10:11:e4:54:e9:14:18:8e:b7:10:
0a:da:5d:16:f8:26:59:cc:a6:2d:f1:f1:7b:ba:e9:89:77:c0:
83:06:07:48:f5:26:a9:23:86:9d:70:4b:08:b5:b8:19:ce:63:
2d:32:56:30:f6:67:a9:20:79:33:e2:ba:f3:48:53:73:c3:fe:
14:a2:73:85:95:18:2e:59:fd:0e:f2:6d:df:ce:c0:59:c4:a0:
9e:69:1c:2a:88:ec:cd:89:ab:8a:3d:7e:b5:ac:6e:c7:82:20:
b7:2a:e7:3d:39:33:99:cc:f1:db:03:0c:5d:3a:b1:6e:3b:e7:
84:b3:51:11:84:96:5f:f5:5a:49:28:71:b5:ad:7d:36:3f:72:
2c:59:ca:98:32:85:0f:e9:ba:93:cf:5c:08:c4:8a:f5:03:8d:
2c:4d:8e:2d:bb:0e:7e:60:74:be:64:e7:4e:c2:5c:96:19:b6:
b4:59:9c:dd:e5:34:27:40:bc:32:ba:21:93:da:a3:b9:79:bb:
fc:42:c1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:35:33 2025 by rpki-client