Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.mft
File: NAahLsxTolGnXOe6yqyeQa7otMo.mft (raw, json)
Hash identifier: jJAlE0UqVfKeltMxXecX2IoAYoN5ZuGsSoosOgQ83Kk=
Subject key identifier: BB:89:D0:FF:CE:E3:D6:D3:9C:64:2D:77:4D:6D:DA:42:1D:08:17:FE
Authority key identifier: 34:06:A1:2E:CC:53:A2:51:A7:5C:E7:BA:CA:AC:9E:41:AE:E8:B4:CA
Certificate issuer: /CN=3406a12ecc53a251a75ce7bacaac9e41aee8b4ca
Certificate serial: 019683FF6728B429A96DD19E1A8E73EB6F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.mft
Manifest number: 1515
Signing time: Wed 30 Apr 2025 00:01:15 +0000
Manifest this update: Wed 30 Apr 2025 00:01:15 +0000
Manifest next update: Thu 01 May 2025 00:01:15 +0000
Files and hashes: 1: 9N71vXZ6iYuqWW-If0CgsO_Wjpg.roa (hash: plP8bbCihgTmT1C8mtLaGAuAfGPMZ93aIA1Z/LkRd90=)
2: NAahLsxTolGnXOe6yqyeQa7otMo.crl (hash: 14aXDWNTfnq7UrrgTuCX7JePW0WDYAZHT277nFsHOC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:67:28:b4:29:a9:6d:d1:9e:1a:8e:73:eb:6f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3406a12ecc53a251a75ce7bacaac9e41aee8b4ca
Validity
Not Before: Apr 30 00:01:15 2025 GMT
Not After : May 1 00:01:15 2025 GMT
Subject: CN=bb89d0ffcee3d6d39c642d774d6dda421d0817fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:16:98:08:28:da:3e:75:3f:34:84:6f:05:
a8:07:b6:59:35:88:8a:e1:34:81:76:94:ff:e4:f6:
41:30:06:71:07:ce:00:53:1b:30:7d:03:4d:b0:67:
f1:41:65:76:6e:6b:79:58:b1:d4:14:c3:0e:f4:39:
2d:62:13:af:fd:3c:e8:0b:0d:6d:d4:75:f0:1f:b0:
b7:fb:ef:d0:1a:e4:2f:a9:ab:8d:ed:6b:81:0d:fd:
84:bb:62:cc:08:b0:8a:81:8c:35:b0:91:da:cf:09:
bb:00:4f:31:56:36:3e:cc:b4:0e:90:bb:e8:db:ef:
9e:e0:26:c4:75:59:68:39:1e:6c:c3:17:2f:ed:af:
24:d2:24:82:c2:5c:0d:e4:e6:32:14:11:07:a3:b0:
e4:c5:8b:77:00:e0:85:43:db:bb:33:a8:9e:c8:9b:
d1:0b:1c:24:1b:c8:06:92:74:36:77:a3:99:c5:b1:
31:11:e6:66:b6:1c:90:ad:36:20:3e:dc:36:4a:91:
15:66:cf:44:ff:a8:0f:51:04:5e:b7:8c:c5:67:42:
3a:3a:68:3e:3d:c6:42:6a:9b:2f:5f:fc:b3:54:88:
fe:e8:91:f0:31:f1:7c:40:a5:3f:58:cd:c5:a2:a3:
1a:01:25:70:44:2f:e5:38:e3:d6:21:1d:ff:20:fd:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:89:D0:FF:CE:E3:D6:D3:9C:64:2D:77:4D:6D:DA:42:1D:08:17:FE
X509v3 Authority Key Identifier:
keyid:34:06:A1:2E:CC:53:A2:51:A7:5C:E7:BA:CA:AC:9E:41:AE:E8:B4:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ad:a6:a3:55:37:5e:1a:51:9f:8c:d2:53:b6:09:5f:7f:f0:
42:60:05:2b:03:6b:9f:f0:6b:a5:63:7c:f0:17:23:c3:19:8d:
38:32:cb:c5:20:83:27:1e:82:d1:4a:21:1f:13:65:da:6b:94:
16:37:38:ce:c6:a8:42:d5:c2:ae:b9:7b:d5:e4:ff:a4:c6:8d:
fe:d2:10:4b:6c:50:79:7f:a8:65:9e:3a:86:d9:a1:10:d0:11:
70:54:9c:4e:7f:74:49:3d:08:92:22:2c:f6:82:f4:36:6b:e1:
16:c0:71:b7:0b:2c:2e:f9:11:2d:ac:92:b8:88:3e:a4:09:c7:
24:27:61:e7:d9:c3:02:62:2c:12:f4:06:42:fe:e4:b8:03:c1:
88:85:c1:52:5e:95:c8:ca:e2:7c:46:6b:f5:73:fd:79:7c:b2:
8b:a1:e7:9e:48:05:51:87:71:e3:12:a0:a4:35:38:20:26:91:
21:e9:5f:85:63:00:8c:19:ae:19:b3:8b:71:56:5e:15:cb:8a:
0a:c3:5d:32:8e:6b:64:b5:df:91:ad:b7:35:b0:d5:e3:59:dd:
fb:2f:b1:e0:f4:e5:8f:d7:d5:4f:22:db:c1:68:3d:28:62:ff:
1c:4b:dc:29:ea:85:ef:fb:87:79:6c:52:22:78:e4:39:8a:b3:
27:57:0d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:35:03 2025 by rpki-client