Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json)
Hash identifier: 9CEPGkiTT1IHEjKtAaN/9Z+d3zvcAhikmBE7nItvEag=
Subject key identifier: A6:A2:95:A9:05:79:96:24:2F:4B:C3:0E:A1:47:5F:00:4E:CA:A6:B9
Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Certificate serial: 019684DAE197716412514B4E93A3F66796C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
Manifest number: 0AC1
Signing time: Wed 30 Apr 2025 04:00:59 +0000
Manifest this update: Wed 30 Apr 2025 04:00:59 +0000
Manifest next update: Thu 01 May 2025 04:00:59 +0000
Files and hashes: 1: ECvfm0gD15erbdYEbJ2O8AxuCuo.roa (hash: GjjofPn0BcYPE+NfKTzkDKX8EBfUwYH0FkVVr77Ou74=)
2: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: 9ZGBCrzus0KVu0rFiX4jCBCWeYZqa5tfaWPPXk2jSjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:e1:97:71:64:12:51:4b:4e:93:a3:f6:67:96:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Validity
Not Before: Apr 30 04:00:59 2025 GMT
Not After : May 1 04:00:59 2025 GMT
Subject: CN=a6a295a9057996242f4bc30ea1475f004ecaa6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:60:fa:30:eb:de:23:4a:58:b2:93:87:b4:
9a:42:9d:4e:ab:c2:85:95:19:df:27:25:31:33:04:
6a:c8:a2:88:9e:07:cb:9d:6d:a2:07:6b:9e:06:8c:
55:e5:79:f9:b5:37:31:4b:6d:1c:7e:e8:7a:a6:63:
4c:da:1d:87:ba:c5:8b:cb:44:0f:d0:13:c2:4b:bc:
88:64:c4:ab:1f:5d:48:ed:5b:52:9d:2a:20:b3:6b:
d4:aa:60:79:63:69:ac:95:5f:00:1e:f0:3b:d8:5e:
cc:a7:e9:89:c7:5d:89:b6:2a:26:99:8e:a5:83:0c:
43:12:14:b9:5c:6d:df:23:ef:1c:f2:c5:b3:83:f3:
7e:17:a2:7a:92:c7:59:4f:ef:be:2c:6b:02:6b:9e:
d7:30:b9:61:b9:22:59:52:62:43:cd:7a:1b:fc:71:
d1:c1:95:9a:fc:48:a3:4e:14:85:73:e2:10:1c:a1:
93:68:77:87:84:2d:03:1e:41:56:03:4e:8b:00:d7:
ef:f7:1d:e4:8a:5b:9b:6b:43:05:89:59:c3:c9:e8:
ef:4d:71:45:f4:b3:0b:6a:cd:86:4e:62:5e:d2:e0:
29:eb:68:4a:80:c6:f9:38:cb:68:95:8c:7d:c4:63:
3f:29:8b:5f:63:44:f3:38:2b:44:b1:79:5f:59:45:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A2:95:A9:05:79:96:24:2F:4B:C3:0E:A1:47:5F:00:4E:CA:A6:B9
X509v3 Authority Key Identifier:
keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d4:de:f1:c5:8c:c0:69:80:b3:61:9b:37:2b:68:87:7e:50:
cf:5c:ac:d5:2a:6a:07:7e:91:fa:09:86:9d:da:21:bb:40:e8:
b2:e1:06:b7:62:d9:a1:4e:cd:c7:50:e7:85:b4:02:33:f8:8d:
bf:a4:63:97:94:ef:51:96:c3:fb:9d:b9:15:ae:a7:3d:45:14:
b6:83:44:48:0e:d4:e1:6c:aa:d8:d5:f0:00:8b:96:c9:24:24:
32:27:57:8a:69:3f:ec:f6:45:68:25:e3:45:63:4a:0c:b5:1d:
40:43:6d:7d:c9:80:94:9e:3f:1e:54:82:26:a3:b6:cc:ab:4d:
d3:b3:b0:2e:2c:fa:e7:36:1e:b9:9e:07:d0:1d:63:85:b5:eb:
e6:dc:ee:7c:8d:a8:fc:c1:cb:33:e9:ed:81:ff:5c:de:6a:d1:
f8:10:49:d2:85:f5:27:1d:52:c4:ab:96:05:60:cb:74:d2:97:
98:2e:96:b3:07:3c:92:58:c8:43:1b:48:34:bb:62:54:fd:f4:
d2:78:cd:3f:bd:92:5a:64:8e:11:4c:a4:71:43:f7:4a:8f:a8:
46:a6:3f:6b:fd:a3:d0:d6:3f:0b:eb:2d:5b:22:72:7f:3a:d8:
53:fb:e6:e4:58:e5:55:09:84:ec:f9:bd:d9:bc:c3:db:6c:09:
b6:27:37:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:26:56 2025 by rpki-client