Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json)
Hash identifier: Mv+KCGLJ4V8ku4YjoVSujvUet70agcbcmBlHzbJS+3I=
Subject key identifier: CA:BD:7F:15:3D:0B:0D:35:AC:59:38:72:86:2A:D6:DD:80:E2:04:FC
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 019683FEE5918DDC8303A9F6951657281996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
Manifest number: 151F
Signing time: Wed 30 Apr 2025 00:00:42 +0000
Manifest this update: Wed 30 Apr 2025 00:00:42 +0000
Manifest next update: Thu 01 May 2025 00:00:42 +0000
Files and hashes: 1: L3eXX40R-J2MZIIUJdb8enfoeE8.roa (hash: lwjbJYBJSc/rhMWtZdkfBAupkIFWhtQl6cOuFgh+q0M=)
2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: sDxRTRRRu/a0GVTPo4tWDmNvTLPJSKakNKnIpxxnHYE=)
3: rzrW1TWZL4bnPJ-nB128HmDlFaY.roa (hash: jgoKQgRuGI4ln2b618FpeT2y9vZl1AD1XL8CqPtrGN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:fe:e5:91:8d:dc:83:03:a9:f6:95:16:57:28:19:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Apr 30 00:00:42 2025 GMT
Not After : May 1 00:00:42 2025 GMT
Subject: CN=cabd7f153d0b0d35ac593872862ad6dd80e204fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:3d:db:f8:6d:86:15:63:20:68:9f:8a:61:
fd:8c:a8:c9:2f:10:de:3c:f8:7c:d6:fa:b1:4d:59:
f3:2f:ce:62:8d:ff:b8:b4:48:c4:ac:bc:24:89:e7:
8d:e9:94:c0:ef:e2:5b:ba:18:6d:af:54:89:a0:71:
c9:d9:d7:13:9f:5b:f7:15:78:a6:ab:68:01:98:2b:
b3:a5:78:5f:69:b7:aa:bf:c4:db:04:92:85:67:26:
c0:0a:02:23:fa:c4:79:6c:b6:53:bf:00:b7:d6:98:
95:71:7a:46:9f:9b:1b:7d:79:a1:86:da:04:50:aa:
7a:f4:45:52:f1:ca:81:ec:e0:08:8b:c5:37:84:08:
4f:ef:ef:ce:6a:b2:44:b8:65:23:47:25:3f:91:5a:
3b:02:c8:a4:fc:65:f9:a1:da:e0:e4:cf:49:b8:99:
a4:f6:96:7d:8a:74:17:3f:15:e2:ac:81:96:16:b0:
c4:ff:76:2c:01:e1:d5:2d:5b:90:65:2a:2f:c2:08:
0a:6a:b6:17:c7:ae:8b:c0:b0:54:21:2c:f7:77:96:
99:be:ce:07:e6:47:c6:63:7b:30:e0:27:2a:dd:b4:
ce:c4:6f:9f:38:42:ff:e9:e8:12:e9:a0:9c:ff:26:
87:94:59:f9:a1:08:7b:4d:70:83:9c:0a:dd:4a:e9:
aa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BD:7F:15:3D:0B:0D:35:AC:59:38:72:86:2A:D6:DD:80:E2:04:FC
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9c:82:28:87:56:ad:07:93:55:8e:86:70:ed:fc:21:d5:e9:
94:f7:d6:ae:c7:84:ed:ca:bc:c0:e4:4d:ed:70:07:e1:6a:a8:
73:64:50:51:7a:79:b1:65:c2:7a:fe:69:39:98:07:f0:c3:41:
5d:af:c3:3e:27:f3:a1:c1:5c:ef:0f:52:ec:9b:8d:ef:68:fe:
d4:dc:01:db:3c:8c:e2:60:0a:bd:0a:9f:77:9c:d1:1d:44:c8:
45:3e:4f:ed:65:5e:50:ec:48:56:ab:1f:72:90:76:4a:ac:d0:
63:83:ab:1d:fd:d6:27:93:2b:0e:a1:76:82:e6:cc:38:0b:15:
99:b2:b1:63:29:8a:6e:15:9b:0a:27:32:e5:ec:73:07:20:ef:
9a:d7:aa:51:44:2b:f3:4a:e5:50:79:9a:36:18:e0:35:64:46:
1b:f9:a4:77:f2:c1:0c:2e:ed:a3:d6:2a:2a:4f:b2:15:f3:a0:
cd:2e:ee:83:79:15:5d:23:d8:f5:ba:98:f1:34:4f:ee:0a:c5:
1e:28:02:45:10:a8:3f:aa:85:ae:f3:75:d1:ca:12:70:a8:c1:
f8:16:2b:92:bc:78:1d:54:0c:69:41:89:67:7d:49:10:4a:09:
d9:65:e9:6d:0b:d2:50:32:01:b8:5c:25:32:97:9e:58:9c:e9:
92:08:b9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:47:39 2025 by rpki-client