Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier: KYDQj53806l+mQ5sj/XE/kMhfZLxzu9/2MKrQWm3PJ8=
Subject key identifier: 03:4E:67:7B:09:2B:A4:04:8B:1E:9D:C2:C1:14:80:0B:28:72:D9:22
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 01967F0F0BAC1823BE905CE0C620220F3539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number: 06DB
Signing time: Tue 29 Apr 2025 01:00:14 +0000
Manifest this update: Tue 29 Apr 2025 01:00:14 +0000
Manifest next update: Wed 30 Apr 2025 01:00:14 +0000
Files and hashes: 1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=)
2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: KYMdTIiNCF+8axs5yk3O2ZQQ/C4f9Mbg+aesY+WWGno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:0b:ac:18:23:be:90:5c:e0:c6:20:22:0f:35:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Apr 29 01:00:14 2025 GMT
Not After : Apr 30 01:00:14 2025 GMT
Subject: CN=034e677b092ba4048b1e9dc2c114800b2872d922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:67:f0:3a:0c:c5:41:41:cd:d1:3b:d5:0d:
c0:81:82:e8:4f:34:2f:1e:de:04:33:e0:b2:82:63:
f1:bb:86:44:52:13:25:c6:45:88:ce:2b:0b:14:97:
3c:24:29:6a:a0:c4:b6:c1:42:25:bf:48:f2:34:ab:
98:34:b5:e2:92:b8:46:3e:59:f4:c8:38:66:5b:bd:
bc:7f:91:c6:f4:7c:ac:68:06:62:6c:87:9a:7c:ff:
16:20:4f:00:0c:5b:e9:f4:5f:96:83:85:04:1f:9c:
dc:cd:26:fc:37:d6:28:9f:3c:38:50:d3:06:05:8a:
4b:cc:1c:a0:55:7a:36:91:5a:5f:ad:e0:17:bd:ca:
0d:99:0a:2c:43:e4:81:3c:a0:4c:9b:cf:a3:2a:53:
94:2f:ff:46:27:d6:19:2e:ea:41:49:d9:7c:1f:ae:
29:e8:39:14:02:b0:04:bd:e8:b6:e0:48:3c:fb:de:
36:cd:73:a7:8d:96:17:16:58:79:42:e0:33:85:9e:
4b:25:b5:91:58:f8:f6:71:2e:9d:74:9c:ea:a0:53:
e8:83:e2:5a:48:68:4c:58:50:f9:91:88:3f:a6:54:
00:5d:0a:ec:66:34:0c:40:4c:9d:6c:c8:77:a6:e5:
c1:f2:ef:56:5b:06:88:f6:10:d5:87:da:99:44:b2:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4E:67:7B:09:2B:A4:04:8B:1E:9D:C2:C1:14:80:0B:28:72:D9:22
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e9:42:07:61:64:69:f5:0b:67:a2:4a:2f:04:19:f1:90:36:
f9:e0:fd:c2:13:8c:9b:de:cb:b8:b8:e6:5d:97:90:56:cb:b9:
b1:17:59:76:58:09:dc:b2:9d:17:fd:44:11:c7:db:a0:6e:3b:
aa:01:d4:41:a1:c1:c6:74:a3:7f:ff:17:87:a7:73:c0:c1:03:
36:2b:18:e2:f3:d5:24:e2:23:64:b5:27:c9:65:1c:a0:a4:b4:
04:01:4c:13:4b:6f:36:08:43:61:1b:4e:23:29:92:16:92:ae:
ca:95:97:15:05:94:6b:40:62:37:10:8c:50:02:3c:ec:89:3b:
14:2d:bb:ea:2a:10:a5:22:d8:e4:78:52:09:40:04:e0:06:d1:
51:3f:f6:65:c1:cd:9e:f7:a1:9f:8b:d5:8a:35:c7:33:06:14:
a0:77:ab:b2:de:51:c7:9c:91:a0:3c:03:10:d8:75:d4:d2:e8:
34:0b:c9:5d:80:03:58:7d:64:64:f5:28:50:8e:82:f6:35:ce:
b5:99:78:ed:f7:69:57:71:0f:9e:4f:06:57:73:87:dc:57:1d:
25:e9:c7:c9:4e:2c:31:24:f0:5f:57:9d:ca:a3:6e:78:39:5b:
93:bd:f0:3a:b2:5d:39:5a:29:58:00:24:ff:c5:d7:1f:05:e6:
cd:a6:b6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:39:12 2025 by rpki-client