Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: tH8mE15ZzvGmhdU7IsCCuvpRAfGRsMOEFcTRHfXIPpk=
Subject key identifier: 7D:DF:AC:E4:05:69:C8:92:6E:91:36:CD:5F:0F:86:20:04:40:CC:A2
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 01968623D6946FE54ECDDDBF0035ADA455FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 0E66
Signing time: Wed 30 Apr 2025 10:00:17 +0000
Manifest this update: Wed 30 Apr 2025 10:00:17 +0000
Manifest next update: Thu 01 May 2025 10:00:17 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: +LP2o9PGrcpV76WVGuxTh7R4pdLNKN90slvl/XBn7h8=)
2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:d6:94:6f:e5:4e:cd:dd:bf:00:35:ad:a4:55:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Apr 30 10:00:17 2025 GMT
Not After : May 1 10:00:17 2025 GMT
Subject: CN=7ddface40569c8926e9136cd5f0f86200440cca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:e6:3e:8f:88:57:a2:48:ea:f1:e8:96:fb:
06:3c:66:02:2e:7b:17:01:60:4e:e5:28:ae:8a:a6:
2d:3b:5a:a1:04:77:10:ad:1b:64:be:07:12:f3:fa:
d6:61:46:7f:5a:02:46:5f:e2:bc:0f:f0:1c:ae:3c:
49:92:2e:a9:5f:14:46:ab:64:cd:aa:9e:65:23:39:
9d:a8:0a:81:65:66:24:d6:70:8c:be:83:c8:65:bc:
6c:c3:17:b1:67:55:4c:a5:fd:1b:bc:13:89:70:c5:
1e:5c:bc:db:02:5d:41:a7:df:50:18:d9:ff:dc:31:
f5:58:38:d5:ae:c8:f3:08:d9:74:07:9d:f7:55:65:
ed:41:da:7b:2c:08:1c:ce:7c:d1:68:86:6a:fb:a9:
5b:97:72:35:32:9d:35:f9:a7:59:f4:97:04:4d:c3:
56:4d:00:a0:ec:5a:9b:a9:13:36:e5:36:88:85:bd:
b5:dd:3a:f7:a2:fa:1b:be:43:fb:ef:f3:48:70:83:
ca:16:fe:dc:eb:42:5f:40:ff:39:2f:b7:da:c8:06:
2c:6f:76:82:07:44:55:a2:0e:d9:48:7a:eb:45:34:
2c:3a:e9:2f:0a:a8:6d:6a:7a:1d:4e:84:f3:23:0b:
d5:7f:f0:6f:1c:c9:d4:eb:a6:95:80:28:99:b4:9e:
78:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DF:AC:E4:05:69:C8:92:6E:91:36:CD:5F:0F:86:20:04:40:CC:A2
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:76:d7:c5:fa:3c:55:53:0c:29:12:11:66:f5:22:a9:24:2d:
e7:7e:dc:37:33:4c:f2:4e:34:d8:ea:1e:f3:b3:04:4e:c0:b5:
9f:b7:dc:62:d8:fd:c6:4e:ae:2c:b6:98:04:d4:df:97:46:0a:
57:87:09:a9:4a:c9:55:ca:0c:b1:b4:bf:0e:6a:e6:df:ad:75:
9e:af:31:bd:a2:ea:c7:49:ed:e9:93:b9:fa:77:fd:bd:53:0c:
d9:bf:1d:bf:20:69:6e:e1:cb:36:9c:cd:e3:74:d4:b4:73:ac:
c5:55:ea:7d:f2:c1:f8:19:af:34:28:a5:da:c1:6f:73:31:9d:
73:c0:6b:df:0f:2c:3e:95:e6:63:17:e8:05:70:e8:aa:8c:30:
c3:f6:6d:f1:b9:c1:38:01:1f:3a:2d:a6:ef:a2:2d:d9:fe:0e:
03:68:f3:ee:fe:2b:6f:91:81:fa:62:65:33:87:9f:5b:2a:a1:
d3:2b:59:6c:62:c7:b1:11:ff:44:0d:6b:74:e6:4a:07:b5:fe:
96:7c:b9:bb:a1:e5:2f:e2:2e:95:33:40:d1:ae:fa:0d:0b:93:
2c:e1:60:a6:9e:c8:fb:11:2c:f2:92:2c:51:46:2f:68:51:2a:
bd:0b:20:ed:e8:67:ab:aa:62:60:d3:59:8e:7e:30:d8:7e:5d:
f0:f7:e4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:22:17 2025 by rpki-client