Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
File: NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json)
Hash identifier: EUk+b8Dsi++N2x3IiYjUD44t15gBS7wpistf8h4d1WM=
Subject key identifier: F4:BD:61:B2:CD:F5:DE:3F:CF:2C:40:84:35:74:B0:81:9B:51:CD:3F
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 019678D6C4388221CA696C664A0C09EB2198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
Manifest number: 0ED7
Signing time: Sun 27 Apr 2025 20:01:02 +0000
Manifest this update: Sun 27 Apr 2025 20:01:02 +0000
Manifest next update: Mon 28 Apr 2025 20:01:02 +0000
Files and hashes: 1: IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa (hash: fyR22c3qbngtIbooNJXlmC6fXpgIjnWVTMNZ/hhGG0A=)
2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: LAmPZnuxUb10bj4Bf0rrTT1DhJQaXJNoO7rcXX6FEOE=)
3: SAAncdb2H87xzD0WkojsMdkjI9E.roa (hash: bzjggaHNN8SzirhLiuBFGlBjgMu/vnVg8ZfnlYMY9GY=)
4: _E9iapjx7rmdCjMi6lOxJAzw41c.roa (hash: XzeBU1MqaK56hZttRGiRoj2k5rsX6aCywVY+pFC+b8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:c4:38:82:21:ca:69:6c:66:4a:0c:09:eb:21:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Apr 27 20:01:02 2025 GMT
Not After : Apr 28 20:01:02 2025 GMT
Subject: CN=f4bd61b2cdf5de3fcf2c40843574b0819b51cd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:d9:90:ff:34:bc:f8:8f:b3:3b:78:26:0f:
83:e8:2f:3e:95:22:be:93:92:9d:b3:4e:92:3e:a6:
ad:70:87:d3:be:53:00:5c:36:bf:30:f7:15:58:37:
82:43:53:bc:b8:7b:3d:f2:c3:ae:20:88:97:42:bc:
f4:d6:e7:c3:b4:a9:b3:c9:4f:90:6e:b5:ce:ea:a2:
b8:e7:74:fd:98:b5:ac:8d:be:b5:47:ad:f8:cd:ed:
d7:fe:80:99:df:38:09:13:cb:64:4b:ac:9c:78:a2:
36:a0:6e:b8:d6:00:77:18:2d:f8:37:63:09:95:70:
3d:70:37:43:80:89:57:e6:76:5c:38:84:47:53:be:
84:75:91:46:38:3e:da:1a:5e:27:c2:be:f5:cc:a5:
68:81:59:4f:bc:fc:00:c8:78:92:8a:45:62:0a:4f:
a7:c8:cd:61:ff:66:29:89:eb:83:0a:98:9f:03:c6:
87:f0:07:79:57:cf:84:4a:cb:8a:5b:89:fc:b2:3b:
25:c5:9f:42:e4:c7:6a:89:38:c8:b2:27:c1:1d:a5:
8b:5e:b2:4c:44:09:cb:55:9e:c0:84:80:84:f6:3b:
dd:02:19:04:56:7d:71:1c:93:3c:2e:b0:97:28:bb:
39:b7:00:6e:19:9b:23:d9:37:5e:68:0d:4a:b7:19:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BD:61:B2:CD:F5:DE:3F:CF:2C:40:84:35:74:B0:81:9B:51:CD:3F
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7a:ab:6c:e7:45:3c:e6:77:d5:53:58:18:80:26:25:7f:24:
22:0b:72:73:e7:a0:e0:98:11:85:54:04:ee:8f:ce:9e:70:3c:
38:c3:16:3b:df:4f:47:68:78:c2:57:ef:d8:89:ad:26:b5:67:
ce:f1:73:49:66:82:d2:79:8f:be:5b:98:e1:85:93:3b:78:a1:
fd:b4:d3:c4:da:ff:5a:d9:8e:06:c2:84:a4:7b:af:0f:d0:10:
17:68:6b:52:7e:2e:9b:23:55:a1:ee:f5:59:f9:2a:e5:c7:b6:
8d:4c:a8:23:15:47:35:26:1d:9e:3a:3c:24:13:9b:38:4c:d1:
ed:09:df:15:cd:d1:5b:f6:75:a5:46:f1:90:5c:30:97:7a:88:
9e:56:e0:01:ef:59:a4:78:0a:11:7a:be:1c:4a:75:93:f9:50:
4d:36:60:a8:98:cf:cc:62:6a:ea:1b:fa:82:a6:06:3f:23:56:
9b:72:0c:10:cd:d1:35:75:80:1f:5e:e6:cb:12:91:ef:cc:66:
e6:75:69:78:c1:86:be:d7:5f:39:d4:37:d4:bf:5a:f8:50:6d:
4c:ad:dc:0f:d6:4f:70:b0:62:e7:68:31:a6:fc:2f:06:61:52:
3d:46:6d:51:93:58:51:85:41:03:0b:8d:1f:fe:8b:db:11:49:
ad:7d:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:30:26 2025 by rpki-client