Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: 3f0Xb8w1CnUWoSSDhUOnwdc0ZsSbA2XzhShZONkOBBE=
Subject key identifier: E2:4E:E7:D5:42:A4:6C:54:78:66:F4:F5:AC:1D:3D:49:22:FE:D7:D6
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 01967A56BD618408EB47D5F298F7D9A81259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 03:00:27 +0000
Manifest this update: Mon 28 Apr 2025 03:00:27 +0000
Manifest next update: Tue 29 Apr 2025 03:00:27 +0000
Files and hashes: 1: DFk17XzVK0-2LT-y57eUHLqsGoE.roa (hash: dXqY+iE+GyZrGAN3VZSoDHBgCd8KrkAD+zhIs/sw6B0=)
2: InA1Og6sR4YUgU6o-aAa42NlxCE.roa (hash: +mBUSakr5JllZ5ayoZAKPyK7MyouaEc8pwLjmxou6hg=)
3: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: poTLC5HYVJKJNgijr+bP1UTUjtC+y1KeCju0vijzNPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:bd:61:84:08:eb:47:d5:f2:98:f7:d9:a8:12:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Apr 28 03:00:27 2025 GMT
Not After : Apr 29 03:00:27 2025 GMT
Subject: CN=e24ee7d542a46c547866f4f5ac1d3d4922fed7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:c4:37:23:87:8e:df:fc:9a:5e:de:6d:48:
01:71:6d:5c:c1:94:7a:d7:94:fc:2e:b5:eb:eb:92:
64:0a:6f:c4:49:c3:95:2f:4a:06:f2:f0:e2:fc:bc:
6d:62:20:2a:3c:bf:e0:7f:b4:2d:43:f3:66:f2:e0:
93:ad:73:30:8b:dc:6f:ca:fd:d4:99:bc:85:1b:79:
6d:1c:08:a0:c5:73:55:72:73:45:c5:51:48:17:61:
fd:2e:ca:0c:37:3e:c5:2c:0e:61:39:03:f5:69:7e:
4a:09:1b:aa:2d:cd:b1:23:1c:a8:9a:4a:ef:9b:be:
fd:62:81:3e:1c:97:37:33:2b:e5:ef:6c:eb:4e:1c:
38:03:b8:99:64:b9:38:17:e9:cc:6e:d4:79:12:94:
f9:99:18:73:9b:4e:51:29:af:b3:6f:bc:fe:01:3f:
ae:6c:d8:b6:14:9b:b4:e3:61:c6:4d:ab:f2:5d:22:
93:ed:cf:9a:cc:cc:c6:62:31:c2:b8:da:94:2b:07:
82:18:02:70:a8:5e:a6:3c:7b:97:80:c3:9f:79:6e:
47:32:5d:16:2f:fe:47:81:d9:af:fd:91:30:71:3a:
62:fb:38:02:d9:50:08:25:eb:b9:0a:40:d7:eb:ac:
b4:0a:fd:da:e1:36:5e:b1:cb:57:84:ce:37:d0:7b:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4E:E7:D5:42:A4:6C:54:78:66:F4:F5:AC:1D:3D:49:22:FE:D7:D6
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:47:a0:0a:df:d5:da:14:dc:61:9e:38:fc:48:84:2e:bc:7a:
54:e4:c0:87:43:3f:61:5d:03:8b:46:1f:b3:45:55:48:66:eb:
bc:46:f2:14:d3:99:94:3c:44:2b:4a:6f:76:5c:af:16:c3:55:
64:d2:ab:cc:42:23:1e:39:5a:a9:88:30:98:88:59:22:91:d8:
df:11:86:38:21:0f:86:c1:cc:6b:9b:a7:a5:db:34:40:e1:61:
26:29:da:c7:b1:1c:49:42:b0:81:61:24:9a:4b:e4:07:7d:46:
32:2f:e5:00:77:1b:02:7e:d0:d5:ed:bd:27:ef:69:dc:a0:15:
24:d8:e2:99:a2:0b:e1:f4:30:d7:89:bc:cd:cb:b5:5e:af:54:
29:f1:2c:66:fc:6b:d8:52:ef:68:c0:18:2e:bf:ae:fd:de:84:
cc:b2:77:4f:97:0d:97:2c:72:c4:58:82:97:22:8d:c1:56:d6:
4c:d6:fb:6c:50:e9:b9:b9:0b:37:af:45:77:44:31:6e:2c:d7:
ee:ed:19:bb:bb:38:da:d2:03:1b:cb:4c:8c:c4:4a:9f:d1:10:
45:16:9a:70:c6:86:9a:ff:66:26:7a:b7:d3:05:dd:6c:54:b7:
53:53:1c:85:90:63:c1:e2:52:98:65:2f:18:79:83:8c:fb:2f:
b6:cb:96:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:26:47 2025 by rpki-client