Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: L/woEyZFAzTZltL1dnvTcUuXQ1H3HeSET6pc+lilA4M=
Subject key identifier: 0D:50:6D:43:3D:C0:67:D9:24:DC:7D:ED:FB:9E:8F:F1:5C:74:FA:21
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 01967642ECE914520DDF0D1A00A94783FE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0BD0
Signing time: Sun 27 Apr 2025 08:00:19 +0000
Manifest this update: Sun 27 Apr 2025 08:00:19 +0000
Manifest next update: Mon 28 Apr 2025 08:00:19 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: CkmAtcAgY5U7UjPe3pkRTbxBGBNLriWxNK0YYQpORNI=)
2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:ec:e9:14:52:0d:df:0d:1a:00:a9:47:83:fe:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Apr 27 08:00:19 2025 GMT
Not After : Apr 28 08:00:19 2025 GMT
Subject: CN=0d506d433dc067d924dc7dedfb9e8ff15c74fa21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:b6:40:bb:51:4d:7f:94:92:3e:4a:e4:76:
9f:33:3b:6c:cb:f5:31:46:ee:48:db:65:d6:3f:08:
ba:b0:74:20:c9:dc:69:72:79:6f:d3:35:85:3a:01:
bd:88:cc:5d:38:0f:3a:e0:db:62:0a:d3:3c:49:59:
4e:1d:7d:de:12:1b:95:67:54:e6:2c:f9:10:0e:be:
3d:62:aa:ae:f9:d5:80:18:83:26:26:91:ea:87:a6:
9e:2f:13:a9:a6:88:00:e8:1f:1c:10:3e:55:bc:4a:
90:19:31:af:ea:c1:c4:77:f0:67:99:ad:fb:4c:a5:
28:a5:05:bf:90:1e:d9:53:55:59:f4:ab:95:b3:bf:
ac:83:9d:be:84:27:34:99:23:fe:ea:5f:a1:b9:dc:
0e:d5:ed:b7:2b:3f:4a:04:2d:70:b8:77:1c:f0:c0:
55:e7:58:32:7c:d8:18:86:62:dc:b0:41:3f:87:1b:
a1:dd:7a:98:fa:19:91:1f:78:78:d7:43:98:18:05:
1a:0b:23:b5:67:17:5a:2f:1c:ad:65:7b:56:84:a7:
e3:b4:3d:58:57:b6:8a:af:ea:fb:eb:30:67:93:60:
fc:10:93:3a:bf:2c:fb:77:b3:0f:6e:33:b0:4f:db:
eb:6c:d0:90:3e:26:31:6c:79:73:d0:3c:db:53:13:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:50:6D:43:3D:C0:67:D9:24:DC:7D:ED:FB:9E:8F:F1:5C:74:FA:21
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b2:81:83:77:26:c4:5f:db:02:37:d9:c4:11:64:be:2f:f4:
fd:a3:46:0c:2e:2d:aa:4d:54:a0:9a:f5:6d:1e:8d:d6:4e:78:
67:2a:f2:e6:d4:13:47:32:1e:93:82:d9:f0:27:c1:2a:0b:78:
2e:e5:39:f0:d2:aa:67:de:68:64:eb:67:42:63:ba:2e:91:6c:
ab:50:ec:ff:70:22:99:44:4c:49:32:b1:14:2d:6b:b5:6c:e1:
82:fc:f1:cd:f6:3d:b1:31:24:68:6c:22:45:66:dd:8f:e0:fb:
91:63:af:78:75:fc:27:08:9d:6d:da:82:ac:cf:df:14:09:03:
ca:28:ad:bc:48:01:a2:86:51:06:59:b8:22:1f:4f:fe:f9:f5:
5c:7b:fd:89:c3:43:b1:21:77:c3:c3:c1:0f:e9:01:23:27:2e:
d7:2a:52:58:ea:d6:06:c7:1d:1b:4e:44:4c:b5:14:eb:1e:cf:
41:70:f2:71:94:53:66:ad:4d:14:ee:c8:52:08:4f:6e:56:8b:
95:d6:7d:20:af:7e:ba:1e:9b:87:70:b7:cb:36:e6:6f:1f:bc:
5f:ac:54:5d:93:8f:2b:11:c5:01:8d:d2:0a:05:81:b3:f8:38:
7a:43:ec:72:12:ae:d8:80:25:da:5f:c2:1d:0f:12:0d:13:20:
82:10:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:13 2025 by rpki-client