Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
File: npWhGdnBpdbj8-Ifb6hj2HouSw0.mft (raw, json)
Hash identifier: HCes6YQnrdbDEuf8BnyH3D2ogcOGuEqjRwRQCp+T77U=
Subject key identifier: 45:C8:BE:82:8C:E2:BA:BA:1D:33:10:78:A4:9E:07:9F:B3:DD:15:F6
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 019687DBE1A990597F97FB962C4059AFFAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
Manifest number: 1119
Signing time: Wed 30 Apr 2025 18:00:56 +0000
Manifest this update: Wed 30 Apr 2025 18:00:56 +0000
Manifest next update: Thu 01 May 2025 18:00:56 +0000
Files and hashes: 1: NZjfqu9x3wDiLJo6GWe02XnKyKc.roa (hash: qGIOcPlEtKKS51xxkiaAUzuK860Uixd+cejLEfWAaRA=)
2: npWhGdnBpdbj8-Ifb6hj2HouSw0.crl (hash: zAL0hziDOrd9zhJHxO87y9AEfGTAw66FxwR0uPcL/sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:e1:a9:90:59:7f:97:fb:96:2c:40:59:af:fa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Apr 30 18:00:56 2025 GMT
Not After : May 1 18:00:56 2025 GMT
Subject: CN=45c8be828ce2baba1d331078a49e079fb3dd15f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:b1:43:a1:fd:eb:b8:2b:1c:58:96:72:0d:
b5:20:1a:7c:42:33:b2:b0:71:f5:f7:b1:02:50:63:
fa:65:17:01:78:e4:e7:5b:96:26:5f:e7:48:45:b3:
b1:25:9c:e3:44:60:d9:e1:b8:b8:be:8f:dd:97:a0:
15:5e:af:cf:00:b9:d9:45:f6:f0:7f:fd:e2:37:f1:
a5:9f:88:9b:8e:d1:39:81:69:0a:d2:e0:cb:18:21:
1e:43:69:cc:d9:90:9f:a4:73:33:8c:e3:3d:e5:5c:
2d:1c:c4:99:63:e2:79:b5:57:57:b4:a2:8e:6e:b1:
4b:d5:6e:e0:05:c4:0d:6e:6b:a1:a5:a2:51:b7:a4:
fc:d7:24:47:b9:f5:81:04:df:24:3b:fa:73:dd:cc:
70:b1:99:05:77:4b:14:e8:62:91:2d:cb:74:84:12:
51:db:eb:4c:bc:8b:71:29:16:15:aa:fa:ff:b0:d8:
24:67:d4:ee:c2:bb:11:1e:4a:8f:68:ba:73:2d:1c:
17:ee:47:a6:ba:0c:71:b0:a0:0d:6b:98:0e:ec:1c:
cd:69:4e:7e:13:15:e1:91:14:0a:a2:47:23:3f:88:
03:db:39:f2:56:66:ea:fc:81:59:39:28:25:44:14:
c8:18:28:2c:47:0b:40:cf:e5:ed:f4:d2:c3:46:79:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C8:BE:82:8C:E2:BA:BA:1D:33:10:78:A4:9E:07:9F:B3:DD:15:F6
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ef:5d:f8:51:83:cd:d0:f7:04:8c:c7:d5:f5:2c:4f:f1:3b:
48:b3:24:d9:8d:b7:2a:ab:9c:86:65:f8:75:9d:fb:55:c0:2d:
cd:54:73:e6:ef:cb:3f:0a:32:e3:31:cf:30:eb:b2:90:b3:1d:
25:bc:73:ff:26:bc:79:af:d7:a8:fe:d7:74:46:7b:cd:7a:35:
b9:af:88:b9:9f:34:64:fe:b1:14:08:ae:6e:65:44:81:7e:f9:
53:54:25:53:59:21:1b:18:6b:59:9f:fd:c4:9a:e0:68:e8:87:
2a:73:91:8d:10:37:6d:cd:be:cd:cb:ae:29:c8:b2:ac:e6:af:
85:27:d7:8a:bc:21:92:d2:3a:b5:50:5b:23:c1:4f:b8:f9:2c:
21:3b:b5:49:1b:df:0c:42:e0:d8:64:c6:48:6b:9e:f6:36:4f:
bb:b0:78:12:3a:79:36:f5:11:33:82:88:29:49:ca:a6:a3:3a:
56:57:72:20:f6:69:4f:41:c8:49:3e:e9:70:f8:8b:c2:a6:8a:
b4:94:55:62:70:a6:60:83:42:c4:f4:1e:ec:80:89:c0:2f:06:
6b:09:49:ac:db:5f:cd:51:f7:b4:de:b2:27:bb:37:bf:3a:50:
62:32:38:29:d7:38:2f:88:e9:e2:ac:84:9a:47:2e:01:e4:96:
51:1a:19:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:09:00 2025 by rpki-client