Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier: 1c2hoLfeHNfsKnsZlzcocqXmFIFKcOJzNg70BgJV1U0=
Subject key identifier: 1E:CA:19:37:CD:F1:71:BB:3E:B0:E4:C5:E9:A1:EE:CA:21:FC:0A:E6
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 0196759E6C13C8C3F30F76DE5CB3848FE248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number: 0228
Signing time: Sun 27 Apr 2025 05:00:38 +0000
Manifest this update: Sun 27 Apr 2025 05:00:38 +0000
Manifest next update: Mon 28 Apr 2025 05:00:38 +0000
Files and hashes: 1: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: FoEA0BQNIxcGM48hT/lQvcay+ZuncmJbwOLu6D80b5o=)
2: v9WYkBz15RpwA0n7rXgCIDyTPvU.roa (hash: vUv7k6coWvAmWrqVuPUy83SA1mmkmDGBast/PkGxxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:6c:13:c8:c3:f3:0f:76:de:5c:b3:84:8f:e2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Apr 27 05:00:38 2025 GMT
Not After : Apr 28 05:00:38 2025 GMT
Subject: CN=1eca1937cdf171bb3eb0e4c5e9a1eeca21fc0ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:5a:ec:ac:83:36:06:b2:94:68:c8:1f:08:
e5:82:08:b4:ee:31:e7:7d:d1:84:72:80:3f:cb:9b:
c1:9f:24:b8:eb:08:17:16:10:9e:39:e7:bd:44:79:
92:4c:91:4b:b5:17:97:86:e5:94:5f:69:9d:33:3e:
88:b9:53:63:1a:8b:8b:20:ce:ea:b3:23:6a:77:43:
67:d6:5f:3f:71:b2:80:47:49:b0:86:70:3f:fa:4b:
34:3f:a9:54:c7:a3:01:b1:84:69:b1:ae:e9:db:53:
9a:13:2a:b9:36:b7:14:e6:25:f7:96:5a:f2:4c:01:
f6:a0:d4:18:c0:14:bc:3e:42:83:f3:07:5e:7e:5c:
d6:01:83:fc:b9:da:12:d4:dc:a1:5a:25:5f:dd:5b:
c1:e5:fe:9b:2a:11:b1:27:3b:36:e7:4e:99:e1:09:
3f:a6:0e:01:5b:83:a3:50:94:e7:df:28:92:03:53:
18:9d:1e:63:5e:11:d7:14:b0:3c:82:b3:64:b2:c0:
85:e5:fc:94:53:1e:02:23:37:d4:f6:dc:4b:9c:55:
fd:e3:58:f4:71:26:29:07:fb:73:fc:21:83:54:3c:
59:2e:1a:af:c9:fd:3b:7a:7e:17:57:49:42:1a:dd:
ea:ca:1c:ab:8e:41:85:8b:90:9a:45:01:7a:8b:a0:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:19:37:CD:F1:71:BB:3E:B0:E4:C5:E9:A1:EE:CA:21:FC:0A:E6
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fc:f7:59:cd:0d:d0:46:28:91:a5:92:4c:92:14:2c:4c:71:
0d:36:9d:ac:05:18:42:0d:dd:1b:13:ae:58:e2:bc:b7:fb:09:
93:34:c5:76:45:58:07:39:b3:78:46:24:4b:68:05:88:6b:90:
37:eb:00:f0:d6:f0:30:27:3a:91:22:9f:92:89:23:1b:85:9d:
e0:7f:2a:19:14:ec:e6:fd:3b:ba:1f:73:4c:d9:48:14:31:6b:
d6:2b:da:42:6e:1b:96:68:e7:a7:03:52:d9:63:5c:39:6d:67:
ac:1e:fd:7c:9f:aa:f2:38:9a:b5:8a:55:92:be:10:2a:2c:3d:
dc:49:c7:ae:39:bb:cc:97:35:29:36:b9:ff:bb:9d:e8:c3:81:
48:a1:bb:af:fd:a2:2a:ab:7e:82:82:21:3f:46:c0:77:9e:2a:
14:15:7e:a7:9f:08:c9:78:d7:19:ae:f4:ca:bc:88:7d:19:49:
72:8f:84:bf:05:df:a7:56:4a:ff:ab:ce:19:6d:3f:49:20:a4:
a6:3f:6f:26:b8:ef:72:bb:dd:39:e0:37:a5:46:c0:f2:15:86:
bc:ea:29:0f:b6:56:77:7f:47:65:30:65:e0:0b:48:86:a1:df:
6d:ac:18:ef:2e:ac:86:73:de:90:a6:47:59:74:35:ed:f5:0a:
39:fb:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:05:06 2025 by rpki-client