Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: B7ac31QjtO/jBux2mykZe3EXOPZazUTHFvW3tyjtv5g=
Subject key identifier: E1:E4:55:05:1D:8D:8C:30:D0:F1:D8:49:C4:C1:12:9A:CA:37:32:78
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 019679B200FB02DE15598BED6C7C47C9B614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 13D9
Signing time: Mon 28 Apr 2025 00:00:30 +0000
Manifest this update: Mon 28 Apr 2025 00:00:30 +0000
Manifest next update: Tue 29 Apr 2025 00:00:30 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: iJXt4ivabwwboYrZJLrSnAZveNTRM1Y2OZqAHuJ1xiY=)
2: i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa (hash: F0HuxkG9RZJHtx6EFFj7jJPD9PIqUuIoXshg3545UXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:00:fb:02:de:15:59:8b:ed:6c:7c:47:c9:b6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Apr 28 00:00:30 2025 GMT
Not After : Apr 29 00:00:30 2025 GMT
Subject: CN=e1e455051d8d8c30d0f1d849c4c1129aca373278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:62:0f:50:1f:1c:2f:a3:ed:5e:07:41:4e:
6b:1b:8e:0e:34:95:69:50:62:4d:89:38:2a:e6:0d:
ba:ed:28:95:ff:85:7b:27:44:f7:fd:e1:1c:38:ee:
50:26:2a:2a:b6:59:50:61:53:e2:cc:f1:ff:4b:dc:
4b:22:ee:8b:5f:d9:96:e9:8e:e7:27:61:fd:51:a0:
74:13:8d:47:8e:bc:75:40:a3:c3:8a:1a:47:db:fe:
d3:8c:9b:72:90:17:34:5b:e8:d9:d3:a3:e6:5b:10:
ad:9e:4e:46:85:7c:a9:fb:13:a3:90:ad:e9:ca:87:
0c:d8:48:69:39:c7:85:9d:92:9b:87:92:3a:52:e0:
25:f5:36:58:94:5d:a4:30:a2:f4:27:01:dd:1f:a9:
bc:1e:43:2a:50:9e:00:14:72:8d:18:c3:a1:a7:05:
72:2c:1f:91:0f:ac:2a:80:eb:38:21:23:f7:90:d1:
ed:da:e2:f0:38:38:9c:14:ef:5f:9e:fc:5b:04:39:
e3:aa:7a:01:82:7e:69:25:b1:53:17:db:47:18:d0:
22:f0:75:48:61:f8:fe:14:8f:ef:1a:02:7b:fa:68:
27:6d:a7:6b:aa:e9:89:87:ef:84:0f:2a:f0:74:77:
3b:78:95:e3:b3:d5:20:ee:58:bd:d8:2f:45:81:9b:
06:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E4:55:05:1D:8D:8C:30:D0:F1:D8:49:C4:C1:12:9A:CA:37:32:78
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a3:78:dd:ea:25:64:4d:c4:8a:cf:cd:1d:f9:2b:e3:7a:0a:
ed:03:93:27:63:e0:97:24:72:ad:14:23:97:57:14:4c:08:68:
22:fb:e5:1b:9a:e3:65:eb:b8:96:93:f0:21:e9:f1:4a:60:01:
ad:37:9b:1a:50:19:b7:44:b3:43:3e:a1:87:ce:2c:79:08:0c:
1c:b9:d9:4f:63:31:b4:f4:52:f5:d0:1d:43:df:67:62:2e:a8:
bf:7d:a6:54:34:5d:2b:0a:cd:13:be:16:89:9c:65:8a:11:34:
7d:34:8c:2f:35:0d:29:28:71:fa:4c:ae:db:27:36:98:c2:48:
9b:82:7f:e6:1a:3f:bd:b2:2f:ff:cc:08:b1:56:c7:66:fb:cb:
52:0a:81:c3:25:0d:50:45:0e:bd:5f:cb:c8:7d:14:ea:89:e7:
6e:4c:97:4d:8d:ca:69:54:32:04:f1:37:dd:0c:b9:c2:a9:7a:
f3:6c:99:07:46:9a:ff:ab:c0:16:e8:47:bf:80:f0:cd:50:fe:
dd:11:37:43:d9:81:99:2c:16:08:c8:ec:78:fb:62:09:73:0e:
b6:bb:d1:32:0d:54:ef:29:31:49:2a:a3:b6:99:dd:2a:79:b5:
1b:14:e6:7e:d5:fe:0c:f3:35:b9:79:f1:e7:a6:d0:cb:b9:5d:
09:0d:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:20:41 2025 by rpki-client