Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
File: NHjAigY6wtNKGxkeJDY4m77tXpc.mft (raw, json)
Hash identifier: mtTdMUk96oq0poUv2FsT6QZoKhTyGJzq8D8io4OknCE=
Subject key identifier: C8:10:D0:27:81:EC:C5:3F:9E:CC:03:B9:B6:68:41:11:F6:4B:1C:AD
Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Certificate serial: 01967FB44D51DA93E2A1270CC2D9FEDB3104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
Manifest number: 0B53
Signing time: Tue 29 Apr 2025 04:00:44 +0000
Manifest this update: Tue 29 Apr 2025 04:00:44 +0000
Manifest next update: Wed 30 Apr 2025 04:00:44 +0000
Files and hashes: 1: NHjAigY6wtNKGxkeJDY4m77tXpc.crl (hash: dTUwvHs6tjmpTryuh3KbMOQkDcQcpFRIUsCxub0qwSA=)
2: pNlFvC-ThONwUDItOe39MOTdmuo.roa (hash: WDsgShsG54TqHBufqeXclF0wXzsc7Ep5HfaFqkIsZUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:4d:51:da:93:e2:a1:27:0c:c2:d9:fe:db:31:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Validity
Not Before: Apr 29 04:00:44 2025 GMT
Not After : Apr 30 04:00:44 2025 GMT
Subject: CN=c810d02781ecc53f9ecc03b9b6684111f64b1cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:3b:65:2e:41:4b:a6:fe:46:ad:14:bf:fb:
b0:30:d2:ba:2d:e4:0e:63:0f:13:d7:31:93:cf:e2:
a8:18:4f:2a:d5:d7:6a:17:ae:87:67:f2:7f:bf:5f:
85:fb:4f:12:c3:ac:cb:b2:18:72:f2:6c:ea:27:d0:
5a:ca:85:00:ad:3c:db:1c:42:e9:d6:8a:bb:be:a5:
63:b9:20:48:79:2f:e8:9e:2d:4f:2c:87:ca:b0:a8:
f5:26:3c:82:65:05:1d:83:03:cf:60:44:85:33:b2:
08:dd:63:a3:73:18:a3:1c:88:a8:90:df:df:93:63:
fe:6f:a1:f7:9f:44:1c:f8:b6:a6:73:eb:99:00:20:
23:1c:34:25:a3:c5:44:f9:85:f8:f7:32:8d:e3:79:
a9:de:fd:09:c6:45:ef:21:8c:ec:6b:44:ad:83:9f:
e4:c8:60:bc:b9:8e:fb:0b:f3:0c:86:60:36:2c:5f:
a1:2e:9d:23:26:22:c5:1f:cd:51:ab:34:74:18:27:
a1:41:58:e3:91:e0:b3:46:07:43:75:1c:f5:6c:a9:
c3:22:34:d9:6a:0a:7c:70:88:48:c4:75:ce:6f:77:
87:8c:e9:e1:6d:5b:c1:26:bb:e3:b5:a0:eb:82:16:
af:6c:6f:f0:33:50:76:21:8f:5f:24:7c:d7:3f:b7:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:10:D0:27:81:EC:C5:3F:9E:CC:03:B9:B6:68:41:11:F6:4B:1C:AD
X509v3 Authority Key Identifier:
keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5d:c8:cb:43:24:fd:a5:cb:20:58:5f:5b:5a:d2:01:d8:3a:
7b:a6:55:1f:df:f6:0c:d8:e9:a7:55:fd:20:15:4b:dc:08:57:
2a:5b:05:a0:8c:d4:ed:70:b9:a4:c0:da:12:a2:66:84:cd:87:
7b:04:31:2a:f6:fb:80:f6:60:eb:81:4f:bd:9f:27:b9:60:0a:
cf:46:bb:6e:c2:5e:f3:48:ab:be:9d:5e:ba:cd:58:c0:7a:6b:
ea:8f:f7:c9:63:b6:4f:fc:f8:4c:4f:40:c9:28:e1:8d:66:3b:
44:52:b7:e4:a8:72:a0:56:6f:83:1e:24:dd:37:fc:db:3f:02:
18:34:a1:18:30:98:fe:82:fc:24:04:32:69:fd:f0:3e:a2:a3:
9d:88:47:78:fb:82:8c:b3:9e:b8:b2:60:21:b8:a6:b7:3e:b9:
63:ac:1e:dd:d5:4a:e2:1e:a3:07:62:93:b1:6a:fc:9a:69:0d:
02:93:71:cb:5d:6d:4a:0d:49:f4:23:ad:17:9d:8e:95:20:c1:
50:a6:14:dd:ab:28:8e:62:b6:33:5d:57:1f:02:33:6d:ea:6a:
88:42:81:fc:99:24:59:50:5a:1b:ae:f3:9c:e0:c1:72:c3:02:
90:14:58:c7:18:a7:37:88:ec:ad:06:04:f3:db:0f:db:3e:40:
53:ec:55:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:48:56 2025 by rpki-client