Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: /Sa49tKWfKz+vvzkFXg/j09/gW9CbtEj8JRtkBjrgw4=
Subject key identifier: F1:65:3C:13:3F:BC:97:8D:C2:83:85:0D:3F:D3:C9:E6:D3:73:1A:C3
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 0196993D955B31644E87B05141A08F1139AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 1524
Signing time: Sun 04 May 2025 03:01:12 +0000
Manifest this update: Sun 04 May 2025 03:01:12 +0000
Manifest next update: Mon 05 May 2025 03:01:12 +0000
Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: eFS+4gRepL6Gjp/j4HuKAMzoG+3sIZ4R/dl9D6P8N4M=)
2: _g5I57Jrtat3c0sUXQvZ3nqFfuc.roa (hash: grBe56vRIljL0qbICiVpYCBgfKjQkIm+ss1oa9xOZxk=)
3: nyb0R-h__Mic6GDdyNWGNxBzot4.roa (hash: fgTFT13/lPyU/NB1je1ug0Uwy5bGAtYnZFu7LeFmdpg=)
4: pi0m8ItGQU_1KUziIzWipbWTZ1U.roa (hash: dNmRlkGp5JHgq9te/3UnftdEhJnuqvrIk2cLoA0C8Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:3d:95:5b:31:64:4e:87:b0:51:41:a0:8f:11:39:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: May 4 03:01:12 2025 GMT
Not After : May 5 03:01:12 2025 GMT
Subject: CN=f1653c133fbc978dc283850d3fd3c9e6d3731ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:36:ee:35:c7:c1:26:8a:b9:d0:a6:9d:9d:
d8:ef:1c:30:cc:29:1b:c2:c4:fb:24:3f:c4:1c:c3:
6c:3a:e6:58:44:3b:2a:ee:bd:fd:d3:50:c5:1b:ff:
fd:90:bf:14:15:ac:69:11:2f:ef:37:2e:e4:34:d0:
73:6a:fe:6a:19:0c:72:25:b5:ee:f1:d4:c3:3c:b1:
83:be:bf:95:0b:92:59:1e:7e:1f:bf:e8:d3:6f:52:
aa:e3:e1:7a:96:1d:15:f5:57:10:dd:a2:4d:cc:df:
c7:97:f7:b5:40:7f:ea:30:8c:7d:2a:b6:3a:b9:de:
43:f3:60:ff:e1:d7:40:5a:33:24:cc:a9:9e:fa:e8:
e9:75:c3:9f:f3:82:b2:f5:9e:f9:96:78:33:2e:d1:
46:6e:fa:c0:2d:58:e3:10:d1:5c:bc:84:32:a7:d9:
94:28:3c:00:e0:90:2c:9f:bd:c7:89:c9:b3:d8:29:
e8:e4:12:d6:a5:fc:30:46:15:eb:dc:41:81:14:e2:
c4:f9:89:f6:f8:dc:d5:e2:d8:8f:47:c4:72:e6:5c:
b2:7a:3e:d7:dd:61:a3:a8:77:e7:f5:23:59:13:d8:
6f:5d:03:38:ce:75:d8:38:23:d4:12:3a:83:e2:a4:
c6:2f:71:0a:60:75:2c:3c:ca:89:21:84:8d:05:29:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:65:3C:13:3F:BC:97:8D:C2:83:85:0D:3F:D3:C9:E6:D3:73:1A:C3
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2d:c3:a9:fd:28:b8:11:67:4f:bc:9e:06:44:5e:aa:ec:07:
8a:58:35:de:56:61:66:9e:1a:57:56:3a:a8:ea:c7:de:37:fc:
9d:37:a7:64:58:ce:06:dd:69:b0:65:ce:1a:24:1a:8b:a8:b5:
ab:b8:0b:53:78:c0:8a:c4:35:fa:31:40:25:ba:a2:f2:80:f6:
8a:2c:79:5c:7d:04:19:d1:49:6a:d6:d7:8d:88:d0:fe:6a:b1:
68:06:88:d6:21:3f:9a:40:7a:fe:07:e9:f5:e7:a0:0a:bd:da:
ad:ea:3b:59:58:5c:11:69:70:3c:c0:63:1c:8f:d2:92:14:52:
95:29:da:f2:9d:e9:32:9a:25:4d:69:47:e6:1e:f3:1c:c3:7e:
61:43:af:6a:e3:ac:61:e8:2d:60:9c:38:90:ee:6f:cb:87:f4:
1f:15:57:40:09:4b:59:3e:84:69:09:b1:75:e9:a9:0d:37:dc:
63:42:1f:60:be:d3:f3:80:2c:b2:32:db:f9:43:89:fc:68:54:
71:7b:21:a5:32:50:c7:c9:6a:aa:ee:0b:7f:9a:14:60:6b:68:
b9:6d:45:e4:5f:47:1d:c3:3a:87:f9:91:27:b2:cc:96:f9:77:
2b:6b:77:01:60:fd:1c:ae:47:21:12:2b:f6:91:e6:bf:96:c1:
74:ed:42:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:11:12 2025 by rpki-client