Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: 2PnVmucurGy4ZEUGIsOXqkztwbJI0ISLmIjv3AJH2No=
Subject key identifier: 8A:2D:FE:3A:38:FF:A4:D0:74:64:DB:E7:D7:A0:46:C7:44:BC:C7:BA
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 019678D6315498A2D3E67FC43BD295134932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 0E47
Signing time: Sun 27 Apr 2025 20:00:25 +0000
Manifest this update: Sun 27 Apr 2025 20:00:25 +0000
Manifest next update: Mon 28 Apr 2025 20:00:25 +0000
Files and hashes: 1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: BX0wh7+cywoUra5K8Hfnh9uDfoXV4pyPHr3BNjjvJjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:31:54:98:a2:d3:e6:7f:c4:3b:d2:95:13:49:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Apr 27 20:00:25 2025 GMT
Not After : Apr 28 20:00:25 2025 GMT
Subject: CN=8a2dfe3a38ffa4d07464dbe7d7a046c744bcc7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:4a:4d:81:c9:b3:49:0a:68:6b:5e:b1:8d:
7a:ac:8c:ae:7c:47:ad:97:11:5c:3e:d9:4b:38:ea:
cb:39:90:86:fa:c8:88:5f:bb:aa:f9:35:8c:ab:4b:
85:32:93:e2:fe:7f:d6:c9:92:fe:db:5f:e6:79:e9:
71:45:89:33:39:26:5b:fa:f0:b7:a6:85:70:0c:df:
29:af:e4:96:01:fd:99:78:6d:1f:09:70:1c:af:99:
d3:05:0f:94:57:b9:e7:c9:97:42:26:1b:f5:e5:5d:
80:b8:ca:01:b9:10:fc:de:8e:68:d7:16:d5:2f:af:
34:fb:21:7e:0d:97:f5:ce:ad:ad:02:39:68:65:e2:
59:26:c1:17:ab:42:33:84:1f:b8:14:b9:b6:f0:18:
11:2e:d3:07:03:51:47:ab:c9:4f:fa:7f:2c:07:8d:
cc:83:2f:cc:05:a1:2f:18:13:4a:68:d6:72:78:58:
5d:20:f0:b2:07:47:45:b9:0d:51:c4:eb:bb:8d:ca:
cf:d2:76:8d:cc:de:3d:07:e7:96:25:45:b6:e8:f3:
9b:c1:b3:c5:48:07:83:05:51:ff:35:1d:cd:78:2d:
21:1a:8a:95:00:e9:a1:19:87:0f:16:22:60:40:73:
b9:82:2d:2c:93:be:f9:1b:06:b1:e4:8a:3b:59:b7:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2D:FE:3A:38:FF:A4:D0:74:64:DB:E7:D7:A0:46:C7:44:BC:C7:BA
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1b:72:64:e1:60:ff:94:8c:f4:d8:70:bc:b0:06:a9:4f:d9:
0e:dc:c4:06:f9:4a:65:8c:ea:2b:8c:43:be:b0:4c:f4:05:53:
7f:c5:59:cd:39:de:55:ab:79:51:d6:da:23:73:23:cd:d5:d9:
e6:00:b5:ce:bf:3f:23:57:a2:26:f9:d5:19:0f:a6:d9:6a:4f:
fc:91:ca:7b:26:5f:5e:e1:af:6a:c3:15:51:59:4e:ac:bd:85:
e2:6f:a3:60:b4:d0:f6:55:61:5d:ea:9f:5e:6b:f9:1c:01:44:
7a:dc:fd:c3:35:1b:44:74:da:c1:c4:0f:54:78:f2:bc:51:8f:
a6:ea:3c:0e:9c:1e:72:1d:b2:8c:3e:55:89:fe:8a:09:83:af:
47:d5:28:bd:18:47:b5:6e:f7:73:9e:19:c2:fa:f6:a8:f6:22:
88:3c:c2:a5:17:6a:47:74:d6:4e:90:ef:57:32:a4:ad:a6:f2:
e7:48:af:0e:24:9a:1a:8b:1f:c8:f9:74:10:ef:a2:f6:e4:98:
2a:8d:45:1c:31:bf:b6:d3:fc:91:9e:02:6d:a4:36:51:df:eb:
50:81:72:1b:c3:9b:0a:63:7c:8f:6d:1c:50:a8:03:52:c4:71:
57:e3:c4:db:17:5b:86:ec:eb:4f:02:51:9f:01:a1:77:c1:91:
ff:5e:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:12:57 2025 by rpki-client