Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json)
Hash identifier: J6uQe2YjXiFRoxei3l4DJSuvPlY5KNCquTdL3JWkJnI=
Subject key identifier: 6B:F0:9C:6C:A8:16:05:6F:10:56:0E:7E:6E:EB:5D:23:B5:EC:7C:B5
Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Certificate serial: 019686C8FDD4FEFFCD11F43C88A91695D003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
Manifest number: 14A9
Signing time: Wed 30 Apr 2025 13:00:41 +0000
Manifest this update: Wed 30 Apr 2025 13:00:41 +0000
Manifest next update: Thu 01 May 2025 13:00:41 +0000
Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: AYdfhirSttGTI3nHJGrXG3krCra79m/iHg4pyprDkjU=)
2: XdAh2iIkdXAUuE10m0pcdADM_3Q.roa (hash: lEtjV/lSmPRly69ux6s/y/s94dr1ooRNJ7kAyfLCuys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:fd:d4:fe:ff:cd:11:f4:3c:88:a9:16:95:d0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Validity
Not Before: Apr 30 13:00:41 2025 GMT
Not After : May 1 13:00:41 2025 GMT
Subject: CN=6bf09c6ca816056f10560e7e6eeb5d23b5ec7cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:3a:8b:37:79:26:be:e7:90:26:dd:ca:78:
76:f3:4f:a5:07:d3:ee:f3:e3:9b:02:89:29:8c:f5:
be:fc:9a:5a:91:cc:2b:9a:3b:ce:4f:97:fe:b1:39:
a3:18:3a:e9:33:c1:da:b8:f8:1b:1d:e8:ca:4d:16:
8f:1c:1e:32:3e:fd:44:95:b0:69:a8:b6:63:e8:03:
21:52:76:3e:8d:10:f7:ed:3b:de:21:a6:a3:2a:ce:
e9:f3:d4:62:a3:f5:9e:d9:80:6a:e9:88:32:4e:cd:
0c:26:d1:be:a4:da:a8:84:28:00:f0:a5:b1:39:39:
ad:e1:cf:e7:7f:f5:45:85:b8:a2:14:d2:b3:ec:5a:
36:42:f1:1a:4c:53:0f:34:78:0e:2d:79:8b:d7:44:
b3:d2:99:01:2e:84:9d:0a:20:8f:fd:6e:ff:b1:ce:
2a:51:4a:79:37:f2:bb:b1:cc:4b:37:a9:64:86:27:
9b:fa:ea:dc:3c:70:e5:a6:96:a6:d8:5d:d2:33:de:
b6:83:55:c9:fe:5e:da:4b:b3:12:15:78:da:d6:ed:
7d:00:df:94:c0:13:2a:e8:ea:de:dd:35:42:ac:4f:
8d:8e:8b:37:af:93:15:17:64:e9:26:c7:c0:28:99:
5a:d9:6c:41:51:e9:fa:52:83:ff:17:7e:2f:09:96:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F0:9C:6C:A8:16:05:6F:10:56:0E:7E:6E:EB:5D:23:B5:EC:7C:B5
X509v3 Authority Key Identifier:
keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8d:67:ca:df:fc:64:85:7c:c8:8d:4e:1a:d3:0f:da:a5:7e:
7c:2f:d1:5b:9e:d9:db:84:66:63:ab:c5:b6:9a:b9:74:98:7a:
14:1b:37:ef:7e:49:25:9f:18:2e:d3:02:9c:5a:b1:62:89:63:
ab:55:03:f2:7e:a9:00:c3:10:83:c0:49:f7:2c:68:ec:1a:e9:
62:13:af:66:39:52:3f:83:32:dd:13:61:41:c4:63:a0:87:fc:
55:30:35:cb:6f:26:cc:f3:39:a8:eb:cd:89:2e:14:95:51:23:
6b:41:70:4f:a2:c2:7e:85:06:66:64:43:33:22:df:ae:10:7e:
fb:e5:65:e6:dd:22:39:68:15:55:4d:5f:54:af:32:2f:70:4e:
da:ac:a9:51:a4:01:09:97:85:75:7e:f2:85:5a:f4:6f:c3:f2:
97:a3:6b:cf:88:54:10:fd:5a:42:02:39:0b:01:4e:ba:04:91:
7c:12:d0:14:f4:90:81:73:b2:a8:a5:e1:57:c5:1a:9f:fb:83:
4d:46:2a:d4:9f:e1:9b:5f:ac:2c:2e:a4:c9:9d:e6:39:d2:85:
18:32:82:60:5c:9f:26:cd:4e:8a:3c:3b:54:83:d2:b8:cd:98:
57:2e:ea:6c:f8:19:2d:22:1c:1e:6b:13:97:c5:99:b6:07:36:
d6:ee:a6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:07 2025 by rpki-client