Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
File: n5FENjC-1KQYJ6zlcHmpR6yHy74.mft (raw, json)
Hash identifier: zTGiake5PainKWRoDb+LCNxuQR686ihSFJiskcQndhk=
Subject key identifier: 28:3F:F4:A8:02:2F:A7:A9:BF:F1:1B:96:3A:6E:E5:F5:C8:C8:39:FA
Authority key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
Certificate issuer: /CN=9f91443630bed4a41827ace57079a947ac87cbbe
Certificate serial: 01967A1FED0A120193CB028CEB7537C4F31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
Manifest number: 11
Signing time: Mon 28 Apr 2025 02:00:34 +0000
Manifest this update: Mon 28 Apr 2025 02:00:34 +0000
Manifest next update: Tue 29 Apr 2025 02:00:34 +0000
Files and hashes: 1: FTz3I1LwzTnAWMfdkHFOvWrYtnw.roa (hash: ON7nD9k8gZbbUe0iuDqX0lxMxjEVRpGMdIVVvIAhjDg=)
2: n5FENjC-1KQYJ6zlcHmpR6yHy74.crl (hash: KrhNBbL+C6KYn1x494277FTk1W8JOfLg8fmp/4+zA/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:ed:0a:12:01:93:cb:02:8c:eb:75:37:c4:f3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f91443630bed4a41827ace57079a947ac87cbbe
Validity
Not Before: Apr 28 02:00:34 2025 GMT
Not After : Apr 29 02:00:34 2025 GMT
Subject: CN=283ff4a8022fa7a9bff11b963a6ee5f5c8c839fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:74:48:e5:2b:29:24:cd:5b:f9:28:63:48:
eb:b4:47:1f:8a:ed:44:09:bd:13:7e:ab:0d:4a:a7:
93:63:3f:09:23:75:9d:a7:c8:1b:65:8b:43:ad:8b:
bf:82:32:42:e2:0b:1f:61:f4:80:48:1e:5a:81:ab:
0e:c1:41:91:43:e9:07:2e:99:59:29:53:f2:2f:77:
87:a2:71:df:5a:9b:74:da:d4:a3:ba:19:3e:d4:4e:
bc:0c:6c:dd:45:14:7c:21:a8:06:da:9b:04:55:fe:
f9:7a:2d:57:d9:c8:f5:3e:47:34:7a:34:9b:c6:d5:
09:a2:b8:5b:5e:d4:50:db:6e:cb:1a:3d:c6:51:e7:
71:30:7a:3a:c3:da:03:6a:5d:03:20:35:ed:e2:a4:
47:32:dc:1c:3b:8a:80:d5:fd:42:f9:02:59:50:78:
e8:59:86:ce:eb:df:3c:e9:1e:2b:96:85:70:c4:5f:
ea:b7:ae:ac:80:14:de:e4:1e:56:75:f3:9c:8f:9b:
23:60:81:40:d7:68:b6:cb:4a:11:51:5e:2f:6e:e2:
81:83:d1:ce:23:ee:30:4d:3e:90:34:78:a5:fd:5e:
00:41:76:41:83:5c:52:1d:12:0e:fb:e0:03:8b:1b:
45:6b:7a:c6:3d:5f:b2:32:1c:55:6e:53:28:cd:0a:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3F:F4:A8:02:2F:A7:A9:BF:F1:1B:96:3A:6E:E5:F5:C8:C8:39:FA
X509v3 Authority Key Identifier:
keyid:9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:73:df:15:d6:e4:73:7e:f8:e5:99:09:c3:4a:75:48:c3:f2:
b3:c9:fd:32:5e:9f:5e:d8:9a:d7:e9:a3:74:29:e8:4b:71:d5:
0a:c4:c9:43:e2:c4:1c:1e:02:c3:df:f9:f9:70:c2:b6:b1:a7:
bf:df:bb:d9:c7:fc:f0:db:dc:2f:cd:93:2b:18:de:97:61:45:
27:a8:d9:03:fb:c2:d3:04:9f:ec:b6:92:29:70:22:7f:7f:29:
a7:44:e3:a3:ac:75:9b:37:d5:54:94:92:47:83:a9:15:2a:56:
e4:55:3d:2a:8a:0a:f1:6b:83:1c:7c:33:ff:a0:e3:ea:e0:99:
0b:a5:78:9a:03:89:5d:ca:2f:30:52:eb:24:d8:19:b9:e5:f9:
87:38:49:55:ca:5b:45:7e:be:57:c7:9e:2d:52:59:0e:a7:d4:
8b:a9:57:28:87:32:dd:6b:50:57:62:9f:92:6b:3d:bd:be:09:
8f:f1:93:a3:7d:da:50:dd:2e:f3:39:56:e9:51:29:d9:a1:81:
50:c0:50:97:5e:16:fe:41:91:5b:e1:67:e0:e6:33:10:c7:94:
71:e0:22:6c:eb:ef:c3:d9:b0:29:2d:ba:9e:8d:17:2e:3a:21:
f4:9a:15:5c:1f:0a:7d:2a:63:b7:3a:01:dd:8c:66:3e:b3:c8:
8e:01:50:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:30:00 2025 by rpki-client