
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
File: NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json)
Hash identifier: RGRldW2VnmWMd07HxKIsFqfNQsw9n7Bm0FTXiVlkLoY=
Subject key identifier: 6E:3C:E0:51:6F:BE:73:4F:5B:E6:90:E3:7A:CC:50:0F:B7:FB:05:37
Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Certificate issuer: /CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Certificate serial: 01967868849CF67007A7B48066B42A6BD7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
Manifest number: 1055
Signing time: Sun 27 Apr 2025 18:00:37 +0000
Manifest this update: Sun 27 Apr 2025 18:00:37 +0000
Manifest next update: Mon 28 Apr 2025 18:00:37 +0000
Files and hashes: 1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: b8Ha4FJewTxzCcYnHYnYVQ3OtMdmCylq19m1KFJL7Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:84:9c:f6:70:07:a7:b4:80:66:b4:2a:6b:d7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Validity
Not Before: Apr 27 18:00:37 2025 GMT
Not After : Apr 28 18:00:37 2025 GMT
Subject: CN=6e3ce0516fbe734f5be690e37acc500fb7fb0537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c0:68:41:9a:3e:44:e2:46:5b:40:da:30:33:
b1:18:1f:a2:d3:8a:02:fa:78:f6:a3:6c:cd:34:a1:
81:ef:d3:96:4e:a3:07:27:34:d2:fb:56:cd:ea:1a:
96:3b:15:bc:53:1e:4f:2a:d9:05:51:18:f5:19:c3:
3d:1a:a0:39:95:8d:7c:2c:99:f4:12:66:c1:29:58:
67:96:60:12:26:ec:06:4f:3c:81:ae:e1:c8:5b:27:
0b:1f:fa:da:f5:c1:07:c3:54:a1:b9:f1:b6:3a:a9:
8a:75:8a:d9:a9:65:88:a6:3f:86:ca:7e:1d:94:74:
30:60:49:95:6e:46:5b:91:2c:70:af:dd:0e:d4:5e:
ea:93:88:2f:3e:33:e2:97:4b:68:75:14:c0:44:0d:
62:62:38:b0:94:25:9d:5e:a9:e3:a1:45:16:48:33:
67:59:4c:d7:95:e1:4c:db:19:64:c0:df:80:ba:69:
10:0c:c0:3b:40:7a:bf:b7:e6:d9:1c:e5:3d:35:7f:
a5:7b:2a:34:59:5a:f7:6e:67:db:d7:34:4a:18:65:
5a:14:ac:9c:33:af:d7:5c:ac:23:9d:19:8b:bb:72:
90:f6:27:dd:7f:92:99:41:98:40:43:2a:a5:d3:c5:
1f:33:26:d8:1a:54:b0:ad:7e:c1:b9:fe:45:42:0b:
ba:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3C:E0:51:6F:BE:73:4F:5B:E6:90:E3:7A:CC:50:0F:B7:FB:05:37
X509v3 Authority Key Identifier:
keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:73:b5:16:84:0a:82:c6:18:91:09:d8:91:4c:af:1e:56:4a:
58:2d:c1:5b:8c:fe:06:e6:13:72:4a:4e:a9:75:d9:3c:60:66:
1d:cb:52:28:f9:21:f3:67:3c:26:ee:ac:14:08:db:3e:5b:96:
a8:d5:44:62:3f:95:ac:d2:ec:7e:ec:71:20:8e:cc:ab:29:14:
08:ae:d7:b9:f1:1e:41:ad:af:b1:81:b0:96:fc:d1:db:5a:95:
7e:cd:a1:59:59:cf:4a:1e:17:4b:25:c7:f8:82:46:35:e1:72:
de:02:29:26:44:c4:3b:dd:f8:41:3c:bb:5b:be:ec:ac:5f:c2:
73:b0:c5:06:1a:18:9f:d3:c0:46:ae:3b:40:d2:54:62:89:6d:
92:39:18:21:5c:8d:e5:76:6c:4c:c8:9f:eb:39:7c:3a:be:d6:
2a:ed:60:79:9b:ff:6e:6a:8e:18:e4:a3:25:32:20:b1:d5:14:
ba:b4:8f:e5:9a:65:a5:1f:81:e4:aa:e3:10:18:a3:e2:b8:e4:
8a:8e:5a:6d:f9:df:e7:8d:0c:ee:af:26:3e:c2:80:b5:9a:0a:
ac:44:9d:14:3b:3b:b5:bc:28:1e:22:16:a6:2e:4e:06:44:f7:
cc:c7:34:33:f0:6f:82:8e:a5:47:55:34:fe:29:84:15:c2:cf:
fd:07:8f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:52:10 2025 by rpki-client