Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: 1n7C1S8a+6Hykxf7YT59zUdjd4/RegVXr24T+75AxKE=
Subject key identifier: CC:3B:45:E5:D0:EE:D4:DC:A5:FB:4C:19:BC:D7:B1:B2:1C:44:47:D8
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 0196786865227BE96D04D1CA8135901F5921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 0FB4
Signing time: Sun 27 Apr 2025 18:00:29 +0000
Manifest this update: Sun 27 Apr 2025 18:00:29 +0000
Manifest next update: Mon 28 Apr 2025 18:00:29 +0000
Files and hashes: 1: AOLXuvzQH0F3MDzBXr5hgJth6jA.roa (hash: ANOWCNK1N2HN8iwkM8P3PMXp5btgZ6sFl3wjdGu9Tfo=)
2: IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa (hash: N//BCS9/s8yglI9IXPIoNJivxPmiF8d0yubes6L4x2s=)
3: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: o+2mkTRvoE64EOepNoVDOm8GKd6ZWTe9wNFK9hOrVtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:65:22:7b:e9:6d:04:d1:ca:81:35:90:1f:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Apr 27 18:00:29 2025 GMT
Not After : Apr 28 18:00:29 2025 GMT
Subject: CN=cc3b45e5d0eed4dca5fb4c19bcd7b1b21c4447d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:0d:c8:56:bf:ac:0c:bd:a1:9d:08:02:3f:
e2:f2:2c:5d:a1:4b:21:86:da:24:63:e2:8c:79:b7:
d3:a0:b0:19:a0:f5:86:58:44:24:18:94:6c:30:3c:
ff:d2:df:7c:d3:95:6b:74:56:38:96:61:18:4a:db:
02:19:e4:30:16:5b:82:e4:84:09:30:98:bd:b6:7f:
01:31:cf:c0:26:36:ba:c8:fc:73:39:8d:a3:fd:91:
db:54:8d:e7:e5:d7:f8:00:ed:90:fb:41:0f:35:7d:
9b:4f:bc:ee:60:a5:fb:62:f6:5d:e3:02:3c:30:33:
d9:7b:eb:05:f2:10:ec:67:70:97:df:51:d9:28:13:
e9:be:02:e5:de:b7:3c:a9:b6:76:30:db:df:f7:a5:
89:d0:cb:ea:5b:d4:5b:18:e7:4c:b9:56:e8:8a:a2:
8b:19:8f:67:a4:f4:18:96:f4:a7:03:72:cc:f4:cc:
d5:09:6f:6c:a8:57:e8:82:55:c1:c8:0b:40:e7:2e:
bb:b3:03:74:dc:7a:86:41:5a:d6:22:6d:a8:43:e6:
a4:94:11:1e:e2:46:ba:61:d1:ed:b5:5f:f1:14:63:
9d:b6:9f:f7:2b:ef:86:dd:1f:1e:8f:33:68:54:ca:
72:20:e0:51:2f:78:e2:b4:61:e6:e8:35:33:fd:e6:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3B:45:E5:D0:EE:D4:DC:A5:FB:4C:19:BC:D7:B1:B2:1C:44:47:D8
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ac:d8:76:12:94:61:aa:2e:4c:6c:58:02:c2:2f:f1:7e:6c:
a5:2d:4c:3b:25:8d:8e:6b:40:84:51:6b:f8:26:28:71:bf:68:
ab:61:79:56:ac:04:f8:9e:b0:47:f5:69:00:e7:5f:87:84:d8:
0a:3d:de:29:06:8a:50:e8:db:13:45:9e:62:ca:5a:2c:5e:e0:
c1:5e:e1:39:35:2c:a5:a3:09:d5:e0:60:32:ba:b2:74:13:fd:
f6:0e:73:a5:6d:b1:fa:20:dc:29:05:c7:ea:85:05:cc:26:a4:
b0:8e:9d:5c:7a:1b:23:d7:b5:6f:9d:f0:de:ba:a3:f5:eb:a6:
df:f7:c7:06:53:82:36:71:e8:1d:18:1b:fc:38:15:69:af:62:
47:8b:4a:65:f8:8d:21:99:64:94:33:72:a4:8f:36:89:76:5a:
40:c5:57:d2:02:52:9e:95:1a:f4:39:18:2f:99:8a:11:24:f3:
e7:3a:99:a9:ee:6a:8c:6c:b2:9c:cd:ce:d0:6a:95:35:5b:99:
67:92:e9:a6:ac:89:e1:e2:b2:6a:38:26:db:ec:c9:00:03:0b:
fb:09:b8:cc:56:9c:05:29:25:43:20:f1:ac:9b:64:eb:5f:a8:
0b:2a:3b:23:1d:f5:81:44:cc:a4:87:cc:63:96:79:56:15:c6:
65:32:62:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:35:31 2025 by rpki-client