Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: w8XAxL04e2TzbXSsjJumqSwmY5KVpRnU40vrq9KnstA=
Subject key identifier: 29:6F:FC:CC:44:B7:9E:00:37:11:D2:0A:96:8C:3E:5F:23:AA:3B:C4
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 0196748B56D437C1A5D89894A92762AC8C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 00:00:10 +0000
Manifest this update: Sun 27 Apr 2025 00:00:10 +0000
Manifest next update: Mon 28 Apr 2025 00:00:10 +0000
Files and hashes: 1: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (hash: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=)
2: Cefp2MinUNICkZh50zBZ0en6wPE.roa (hash: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=)
3: IUaglXMoCfWHYoEHDvfMOLW0gCo.roa (hash: SIDwg/N1xEcZG6CVXI1MxQJ23X7MPqohUnh5tpikeYs=)
4: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: R35IzGaBHquDZ+uK80RgcBxI7D2X0Xsa1Tq7hsxCSAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:56:d4:37:c1:a5:d8:98:94:a9:27:62:ac:8c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Apr 27 00:00:10 2025 GMT
Not After : Apr 28 00:00:10 2025 GMT
Subject: CN=296ffccc44b79e003711d20a968c3e5f23aa3bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:77:33:14:f6:2e:0e:29:df:48:b8:4c:2d:f1:
2a:3e:cd:ec:a3:d5:d6:a3:19:d7:9f:ee:e3:8e:fa:
91:a5:8e:c1:0d:61:de:1b:76:7c:42:50:b1:a9:d3:
37:89:3c:d1:64:99:76:52:61:db:c1:2e:e2:92:dd:
20:70:df:dd:02:1a:e5:67:b3:4b:d0:45:a4:c2:67:
f8:8b:c7:eb:a5:d1:38:4d:4b:85:59:3b:78:f6:92:
c4:9c:b5:0a:6c:ea:c2:f7:e8:c6:0f:2c:c8:fd:fc:
32:d2:4f:9e:ef:dd:0e:6c:31:d5:75:b8:24:5c:3f:
25:1d:70:c3:8b:44:db:24:d5:ef:79:20:4c:c9:94:
70:24:fa:f9:92:47:eb:b8:50:d2:1d:f0:36:70:1a:
40:8f:fc:91:78:a4:70:38:73:99:92:22:3f:ef:c1:
5a:75:43:88:2a:ad:76:e1:c1:a5:cf:ee:51:d8:97:
8f:1e:1d:d3:8a:12:af:b6:91:9b:dd:fd:d0:1e:76:
63:94:4b:3c:9a:af:8a:f9:2b:fd:7b:92:ba:51:df:
23:4f:0a:e0:a0:17:82:58:e1:99:20:1f:2b:be:49:
be:06:d2:08:14:d8:78:fe:12:11:7b:bb:07:d2:80:
2f:00:bf:8a:7e:5e:f8:19:c7:25:3e:d7:1f:eb:c4:
ad:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6F:FC:CC:44:B7:9E:00:37:11:D2:0A:96:8C:3E:5F:23:AA:3B:C4
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:1c:84:3b:3c:27:ea:dc:62:a9:98:83:66:10:cf:0c:6d:e0:
e7:f6:58:9e:d2:1a:24:2e:b2:3e:5d:5a:7f:b9:56:35:fe:57:
85:87:20:b5:e6:25:f4:3d:f0:df:58:b3:71:6a:c7:97:f6:3b:
9d:05:c5:31:1e:e9:e2:b8:fa:6d:c7:45:66:c1:df:cd:21:7b:
b0:9d:ba:cf:55:9e:32:4a:13:90:59:05:14:5b:ee:7f:7e:a7:
16:f8:7b:4c:34:a4:f2:a5:0f:c3:45:5c:47:03:aa:0e:e2:82:
fc:9c:b8:1d:14:72:8e:e1:57:3f:55:97:2d:17:bd:15:1d:cf:
bb:cf:1c:30:1d:48:7a:82:6d:59:22:52:74:cb:50:3a:ef:0a:
19:ab:e8:31:08:76:fc:dd:1f:71:09:e0:f6:ef:a1:94:b3:8e:
69:f3:a4:f1:54:a8:c9:33:23:2c:a3:43:34:27:11:5c:fb:13:
c2:25:9d:52:16:7b:58:11:e0:0c:61:07:ec:a3:0b:5a:38:ca:
4d:a8:b6:2f:ce:71:ca:e6:77:a2:bd:68:d8:97:b8:43:1a:95:
e0:2a:46:a5:af:80:63:c0:6a:14:dc:60:c9:0a:6e:ed:58:01:
92:47:4a:12:12:7c:ca:82:d9:99:17:ad:7d:1f:db:33:ab:c4:
32:d1:6e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:17:31 2025 by rpki-client