Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: YT7xfen1/kr2+tK0JRhOgTvsRc3Mauhg4/qbu5uBfYw=
Subject key identifier: 4D:E0:9A:46:63:90:85:AB:85:02:8F:A1:A1:E8:E3:DE:AC:FE:EB:74
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 0196808FFA687742D46B02A475FECF99194D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 7F
Signing time: Tue 29 Apr 2025 08:00:41 +0000
Manifest this update: Tue 29 Apr 2025 08:00:41 +0000
Manifest next update: Wed 30 Apr 2025 08:00:41 +0000
Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: jsYrNRyUCzbIhXBYGP9p53nNBJWaWHEwm3osnbrXkX8=)
3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:fa:68:77:42:d4:6b:02:a4:75:fe:cf:99:19:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Apr 29 08:00:41 2025 GMT
Not After : Apr 30 08:00:41 2025 GMT
Subject: CN=4de09a46639085ab85028fa1a1e8e3deacfeeb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:1a:8c:07:5a:80:7c:3c:d1:9c:90:e2:02:
c2:e9:1b:c3:fa:23:3d:ca:e3:16:ec:2b:45:82:bd:
0b:c6:f0:c7:73:d0:fa:89:e4:d5:78:21:9d:e5:f0:
58:83:a8:c3:99:c3:6b:d9:31:eb:1c:39:98:97:2b:
55:84:8b:64:5e:be:b6:2a:66:18:05:83:16:61:4a:
a5:28:33:d2:36:41:ef:5f:90:7d:00:6d:e3:9b:b6:
ec:37:e2:49:37:56:14:b5:b6:68:59:0f:45:b2:ea:
c6:37:3a:77:bb:8d:17:f4:60:f8:30:52:65:5f:f6:
3c:98:8b:e1:7f:db:07:c9:59:57:b4:88:fa:05:ec:
d4:0b:0f:82:6f:02:79:e0:fa:d1:4d:b1:08:a4:6c:
b7:b6:42:91:c1:36:7f:44:f7:99:b2:23:ff:c1:70:
fd:a7:e2:5c:3b:00:c7:3b:9f:f6:49:c3:73:7f:5d:
a6:5a:a3:f3:9b:a9:e3:78:2c:c7:12:50:0b:ef:0b:
ac:45:25:ae:c9:dd:26:f3:05:ae:b3:e2:6b:6d:52:
e4:bc:10:1e:8a:77:01:fc:2c:dd:41:55:62:d1:04:
d3:88:c0:11:59:cc:9a:1d:f3:54:23:ed:11:87:5b:
23:3c:08:bf:6b:3b:6f:4e:29:08:7c:80:3b:b6:3f:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E0:9A:46:63:90:85:AB:85:02:8F:A1:A1:E8:E3:DE:AC:FE:EB:74
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:2c:82:f8:e7:29:8c:8a:34:99:f7:3f:30:81:fa:0b:8a:16:
98:4b:0b:6c:7e:43:a1:d5:47:32:6d:b1:18:0d:a8:78:05:49:
8e:db:1d:7b:d5:02:09:58:56:23:c5:af:a6:2e:e1:d6:3a:81:
28:34:03:4d:f9:eb:59:84:78:cd:f6:3d:18:cf:2d:2a:b5:fb:
b5:d3:b1:3d:2f:76:d0:3d:3e:ae:21:3e:16:14:97:8b:94:e4:
ef:91:50:aa:58:5f:d9:33:81:66:80:cb:d7:e2:07:54:62:2c:
56:73:1f:d5:04:85:7b:48:f8:e5:af:ff:23:26:cb:1d:09:cb:
af:d6:bd:cf:88:9c:f3:2b:a9:4d:64:38:e3:ba:d3:56:ce:41:
3b:41:67:2e:91:2c:34:22:9b:3e:e0:ef:77:7e:bf:18:83:35:
46:8e:7e:ed:75:3e:fa:b0:40:d0:8b:c6:69:57:d6:bb:65:e4:
94:67:75:97:26:da:ee:ab:fa:69:e3:04:d1:b9:77:79:ac:c0:
16:6e:a2:c8:59:0c:ba:77:87:fe:0d:f4:ce:d8:f9:cd:fc:fd:
d8:27:29:52:b1:6a:ea:a9:ff:23:df:0f:ca:6f:dc:87:72:d5:
32:12:81:77:57:88:2b:45:e3:12:4e:83:e2:78:9c:41:08:87:
86:b5:aa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:24:58 2025 by rpki-client