Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
File: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json)
Hash identifier: 84ypH2KicfmuAXXpcwKjqLhvf0KDk+WjBgNyT8IkA3I=
Subject key identifier: 39:81:19:A8:3B:CA:99:C9:1A:4B:8D:D3:62:ED:62:8A:5F:86:62:20
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial: 019677FAF38E69F734BB9D9A294C11469F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 16:00:57 +0000
Manifest this update: Sun 27 Apr 2025 16:00:57 +0000
Manifest next update: Mon 28 Apr 2025 16:00:57 +0000
Files and hashes: 1: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: SJRFwcCUeHXxF+QBW/14IoPJ+0dDKeA6udBzYQvQ/g4=)
2: ZxlhkpSeT22co3ElobaCavDtI1I.roa (hash: RsOVTQimQxoF2zeQAP5zv2htNZo2elUQhLdSPHG+MC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:f3:8e:69:f7:34:bb:9d:9a:29:4c:11:46:9f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Validity
Not Before: Apr 27 16:00:57 2025 GMT
Not After : Apr 28 16:00:57 2025 GMT
Subject: CN=398119a83bca99c91a4b8dd362ed628a5f866220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:eb:02:ff:4a:d5:03:49:cd:d3:31:72:01:
54:f9:81:0b:d1:37:bd:9e:b4:50:61:59:f5:61:9f:
6d:74:f2:fb:10:29:c9:d5:14:ba:52:e0:bb:c4:24:
a7:83:52:ec:0a:99:31:c4:6e:77:52:d3:5e:79:e5:
f6:ef:e9:b3:49:06:32:a2:43:b8:bf:e8:25:b0:b3:
e2:b6:18:4d:96:03:75:c4:4e:9b:6e:c3:c5:2b:2a:
13:ee:a4:a7:83:28:6e:2d:b9:4f:9c:d8:6b:f6:9c:
27:58:1b:30:4b:36:33:1c:38:5b:0e:41:53:b8:d4:
e6:dd:85:94:3f:ed:57:0a:66:30:e3:d5:5f:0e:76:
09:63:bc:9f:b2:4d:10:e7:b0:98:26:a3:7a:92:3b:
b3:b3:3b:5c:85:06:c9:84:d7:31:fa:12:79:e1:31:
b4:d9:4f:9d:9c:ff:fe:52:d5:f5:23:7b:02:20:a0:
71:f5:8e:56:0f:a9:7c:25:a7:83:61:7a:0c:78:03:
e4:82:cd:bb:7b:8f:fd:41:1c:46:23:33:1a:b7:cf:
2a:fc:b4:c6:e9:0b:aa:cc:4b:46:2d:1a:01:75:54:
de:6a:7a:5f:1c:87:a2:ac:14:4c:b7:da:1e:4d:e2:
0d:f3:24:a0:a7:7f:86:43:55:ed:bf:cd:17:f9:b7:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:81:19:A8:3B:CA:99:C9:1A:4B:8D:D3:62:ED:62:8A:5F:86:62:20
X509v3 Authority Key Identifier:
keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:61:98:24:2a:36:d9:b5:a6:ff:fb:96:7f:96:ba:89:4f:df:
72:b8:63:b6:e0:5a:5b:fd:06:68:ca:d5:27:40:60:e5:98:e0:
1d:95:80:12:49:63:61:a8:fd:04:00:1d:2c:bd:72:0d:0c:9c:
e1:14:c8:d5:7c:13:fd:6d:af:9a:dc:aa:e7:4b:ba:99:6f:bd:
36:05:26:bd:48:f4:66:19:10:e7:16:b8:51:0b:f3:ab:c6:40:
8f:5a:b7:0a:1a:d4:f0:ac:6b:b9:cb:81:15:69:84:c3:b2:f6:
cc:c0:94:bf:09:a0:7e:7b:00:08:3a:65:75:d8:6b:f6:f6:ba:
6c:d1:44:37:16:a0:5a:05:ac:fc:66:2e:44:93:1f:36:7a:cf:
de:5d:07:b1:71:9d:f3:00:b3:8e:47:e2:85:e3:94:93:3a:c0:
8f:f1:81:4a:d7:f3:80:a4:6e:dd:b2:d6:4b:b4:0f:f9:06:ee:
b8:e4:87:1d:fb:84:e9:aa:c4:dc:75:d4:54:b4:62:b9:f6:07:
42:82:37:f6:ae:10:64:4f:0f:a9:b2:db:09:41:11:d4:72:f1:
27:21:a9:9c:ca:23:e4:ca:3d:24:66:fa:6e:a3:23:00:23:96:
e6:c6:2f:ae:68:e5:d0:ea:69:1e:23:62:c3:34:80:cd:15:51:
5e:76:1d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:19 2025 by rpki-client