Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: ujVjGS/edwviRYFdi5LMv4qUe6hw3PgTh56nSNT3mB4=
Subject key identifier: 38:86:1F:9F:CD:70:BD:4D:B2:A2:6E:F1:1F:A7:E7:D5:0D:3D:06:0D
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 0196759EB7B4ABF6FAF75C106754DECCB05B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 12E9
Signing time: Sun 27 Apr 2025 05:00:58 +0000
Manifest this update: Sun 27 Apr 2025 05:00:58 +0000
Manifest next update: Mon 28 Apr 2025 05:00:58 +0000
Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: w1L782qW1bAUIMG5zQmUwuFRwxsxebBGm1hpMXBxqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:b7:b4:ab:f6:fa:f7:5c:10:67:54:de:cc:b0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Apr 27 05:00:58 2025 GMT
Not After : Apr 28 05:00:58 2025 GMT
Subject: CN=38861f9fcd70bd4db2a26ef11fa7e7d50d3d060d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:f2:92:52:38:2e:c7:bd:db:bb:b9:d3:43:
e4:e1:ec:44:c0:8f:6b:01:ae:6d:38:75:ea:e7:a2:
01:1f:db:4f:62:5e:83:39:3c:66:40:2f:85:e6:97:
17:14:d0:88:94:2f:f7:96:29:cf:bb:a5:de:bd:a7:
6d:94:a5:81:c0:f5:69:85:05:e7:3e:48:91:4e:5c:
eb:97:d2:3a:73:89:87:5e:83:94:14:91:b6:2c:ce:
63:46:57:08:fa:f3:4c:44:dd:ce:f5:2a:08:8a:52:
a7:49:1c:aa:9c:e8:b0:2d:d0:7d:50:2c:5e:78:ad:
f9:8d:f7:13:93:1b:8b:c5:48:19:8f:74:f3:f2:3a:
12:68:87:78:4f:80:1a:c8:68:9c:67:60:71:47:3f:
7a:42:ca:f8:f6:ef:8b:7a:61:ef:14:8e:b7:5b:25:
b8:d2:37:ee:14:b1:1f:65:6c:55:03:bc:93:d9:35:
ec:6d:a8:1d:f3:ae:28:b6:70:55:40:8c:47:f9:a5:
9d:bf:72:7c:d9:41:a8:8a:d7:4d:ee:7b:c7:2d:4e:
d0:5f:af:28:95:1a:1d:8a:8c:05:0e:a7:8d:9b:ca:
3f:b2:a3:09:9d:bb:97:20:a6:0b:4d:30:0e:03:d1:
13:59:b1:81:dd:21:b8:d5:c0:55:e3:45:d8:34:0b:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:86:1F:9F:CD:70:BD:4D:B2:A2:6E:F1:1F:A7:E7:D5:0D:3D:06:0D
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:17:01:a0:d4:f5:ab:b2:39:32:ab:d5:ed:25:82:31:92:a1:
f4:55:8d:59:a9:a8:bf:95:25:60:bc:5b:26:e2:8a:54:4e:a3:
04:88:a0:a4:79:5e:d6:1f:00:0a:81:f3:32:cf:49:a9:17:e2:
76:5e:15:7a:d9:79:06:ac:b4:63:93:aa:9b:f1:70:5d:0d:ea:
4d:2f:ee:1c:98:da:54:f3:2e:ae:85:b8:ba:3d:f0:af:6a:82:
38:0b:a8:42:ee:71:97:d2:fb:0b:6a:69:73:2f:fa:ee:0d:d2:
1a:b7:91:0f:40:31:00:59:4d:9b:83:29:b8:52:47:a7:93:1f:
a2:96:33:dd:0b:1c:90:82:91:46:6d:10:61:05:b1:16:2a:c9:
d0:8f:69:bb:06:be:b4:07:4f:87:10:cd:90:8c:e0:73:20:de:
1b:63:4c:4f:4f:64:ee:53:7c:7b:4e:a4:c6:db:7f:ef:37:2e:
2e:e1:a9:94:84:14:40:b0:79:d5:ef:8c:f6:df:66:6d:55:f6:
63:d2:9d:e4:1d:2f:ab:51:d1:3c:ee:17:84:01:0c:29:a5:3b:
4a:3f:a9:0b:39:97:06:9c:34:ad:3a:0d:42:e6:5e:1d:67:74:
85:e2:5e:95:85:9c:00:b1:f4:14:58:8a:63:a8:ad:af:dd:dc:
c2:c5:a6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:00:10 2025 by rpki-client