Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
File: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft (raw, json)
Hash identifier: Tkc79rST6eA3lNBD2Y6tKwFvTqi+AVE/jtpSO4wthsg=
Subject key identifier: AF:F7:66:4F:40:7D:43:40:8C:D4:10:F0:39:9F:B2:12:9C:3F:56:E5
Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Certificate issuer: /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Certificate serial: 019676E7AC9F9ACAC74425C3B5B08853CBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
Manifest number: 0AD1
Signing time: Sun 27 Apr 2025 11:00:16 +0000
Manifest this update: Sun 27 Apr 2025 11:00:16 +0000
Manifest next update: Mon 28 Apr 2025 11:00:16 +0000
Files and hashes: 1: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl (hash: BxPp40cO6mO/n5y5Hv6TdkB4f6VM4XVEIDhUYescVjk=)
2: i5CYIYxAtwPyni-Dl_N7cKRXfcY.roa (hash: SZTtaQcBy5UozsIuO5IHd1U+7pFMt22yevLjl5l8lZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:ac:9f:9a:ca:c7:44:25:c3:b5:b0:88:53:cb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Validity
Not Before: Apr 27 11:00:16 2025 GMT
Not After : Apr 28 11:00:16 2025 GMT
Subject: CN=aff7664f407d43408cd410f0399fb2129c3f56e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:12:72:03:83:83:c2:65:83:c9:38:62:36:
bf:60:c4:dd:2b:8f:5e:83:b8:13:8b:84:ee:4e:11:
8e:0b:c4:38:60:8d:4d:13:ac:b4:d2:0f:44:85:bd:
db:61:12:0f:57:e8:1b:1f:05:ba:53:4b:69:7f:7e:
71:13:7b:54:f3:db:85:e2:03:a9:85:5e:6a:1e:0e:
6c:fe:ed:b2:0e:04:e1:b3:e0:91:15:9e:b6:16:1f:
16:b7:ae:26:65:60:b8:a3:19:1d:77:1f:14:a4:61:
dc:c2:e4:5f:e1:56:ba:38:85:87:82:d8:06:e0:49:
7e:ec:4d:4d:0f:05:01:da:d9:15:cd:2b:30:0a:c2:
23:64:d7:37:41:d4:6a:ea:eb:89:69:38:f2:97:ba:
c1:bf:48:02:c5:45:aa:64:7f:65:ef:a3:bc:eb:9d:
59:dd:5a:cc:ce:4e:a2:6c:32:05:c3:59:03:d2:9f:
c5:3f:62:82:c9:74:79:cd:df:fa:15:e9:f4:de:59:
49:ef:f0:79:ed:83:ce:40:20:b8:63:16:1f:01:d4:
40:61:86:84:97:dd:f4:dc:8c:b2:f1:c5:1b:30:d2:
87:d5:3f:41:d9:6d:81:74:4c:e3:05:d4:ef:76:fe:
6d:ec:39:19:38:46:49:43:d5:fc:25:e6:17:27:a7:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F7:66:4F:40:7D:43:40:8C:D4:10:F0:39:9F:B2:12:9C:3F:56:E5
X509v3 Authority Key Identifier:
keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:92:c6:16:e2:3b:a4:d9:3a:98:6a:8e:1f:37:e6:21:44:dc:
5f:9b:b9:c5:72:42:e0:13:49:aa:b3:d9:78:0f:be:f3:a3:48:
94:37:fc:ac:a0:41:21:25:f8:b8:02:c3:f8:c0:ac:6e:d0:0b:
98:f5:1f:8b:10:ee:64:c8:50:50:b5:f5:41:44:92:8f:5f:74:
28:bd:05:2c:6f:ad:71:32:e9:da:88:93:5e:85:ac:4b:ef:33:
db:47:84:d4:97:c7:c9:70:33:53:0f:09:41:c5:86:1f:1c:c2:
df:72:0f:96:3d:d8:77:e6:fe:dc:12:1a:34:73:90:69:e1:c3:
98:84:da:76:e2:71:13:6f:e9:e8:da:a1:02:e3:23:65:b5:62:
73:fa:5e:02:59:ed:c2:bf:1d:e9:e3:52:2a:e0:0b:54:01:4a:
db:7d:0d:e2:2b:de:69:5e:57:f9:0a:72:3a:03:78:fc:19:90:
77:77:71:34:9a:a4:d1:57:49:92:14:db:89:dc:88:1e:94:d4:
0c:74:95:9d:44:5b:62:d5:e8:1e:c0:5a:9d:74:bc:d8:0c:4e:
67:f7:f6:b2:66:c5:97:97:98:f5:eb:2d:de:44:64:8e:66:65:
6d:b5:35:0f:22:49:ff:13:6b:89:70:63:bc:bd:92:6a:5e:84:
01:84:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:48:27 2025 by rpki-client