Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: R8z67zCWCB62B0DvVgh8WHzbKxG+0dojdKHTRw5EgOQ=
Subject key identifier: 0A:C8:07:F6:DC:9D:7E:5B:D2:2A:D3:80:9D:96:B4:41:C0:4F:D7:63
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 01969ABDD146E0B94CCEBC69783F5C44F3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 03F0
Signing time: Sun 04 May 2025 10:00:53 +0000
Manifest this update: Sun 04 May 2025 10:00:53 +0000
Manifest next update: Mon 05 May 2025 10:00:53 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: PaW/ruWAq4pREXQoS967z6BxCP9I8pAP2m3u4TGsDnM=)
2: aOjf7ha4NpM1xf113RLoBKrWwUY.roa (hash: hUQXGx10+6VeL01cd/7kpuKBjZges7kH8YJzcunm/rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:bd:d1:46:e0:b9:4c:ce:bc:69:78:3f:5c:44:f3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: May 4 10:00:53 2025 GMT
Not After : May 5 10:00:53 2025 GMT
Subject: CN=0ac807f6dc9d7e5bd22ad3809d96b441c04fd763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:78:79:a8:07:0e:e1:89:b8:51:32:99:96:
2e:9c:2d:70:09:82:18:ab:2f:f8:cf:2c:2d:f0:6a:
33:c8:4d:55:11:f0:f8:9c:61:b0:92:08:4c:ba:0c:
46:97:bb:20:4b:11:a4:cb:9c:7a:35:34:88:0e:6f:
fb:7a:38:8f:2f:75:0e:81:d0:f4:0f:7e:21:92:e0:
07:f6:a8:18:9d:59:68:fa:22:3e:95:97:f5:9b:e3:
72:7e:36:c3:97:ad:71:b6:d7:64:97:df:1d:b3:8b:
7f:9e:12:b7:b7:e9:1e:69:53:4d:1d:a5:6e:a4:ec:
a8:49:2b:ba:34:3d:75:7d:c7:ed:ff:ab:0a:6c:a9:
bb:81:96:99:6e:24:19:32:62:54:47:c8:48:c1:89:
bf:d0:42:5b:90:7f:ce:02:9b:6b:93:d6:0f:c8:01:
63:c0:70:c1:a8:d6:31:b5:51:8d:e1:7f:47:87:e8:
26:18:dd:7b:98:4a:ec:6d:55:96:72:1a:7f:44:17:
f9:b9:cb:05:22:c2:da:8d:14:64:70:ac:a1:c8:bf:
21:b4:55:61:b5:9b:5b:b6:74:17:b0:1b:d1:be:ba:
e8:6a:48:04:f6:25:af:17:97:fe:9b:9f:ba:b8:1f:
58:ca:29:f0:3c:48:dd:55:ae:d1:8a:83:9c:75:c8:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C8:07:F6:DC:9D:7E:5B:D2:2A:D3:80:9D:96:B4:41:C0:4F:D7:63
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:84:82:b1:95:67:c3:d9:63:13:7f:8a:52:68:6c:47:74:a1:
09:4a:7a:7a:04:3f:0f:a4:b9:f5:82:2d:ac:5c:17:c4:4a:07:
48:a0:04:67:d6:d6:6e:9f:70:f8:3c:32:0f:98:eb:27:5a:a7:
5c:c2:0d:de:0a:03:54:c7:07:00:79:28:f4:8a:04:f1:73:0b:
20:a0:9a:bc:f7:5d:99:22:63:c5:d1:a0:3f:62:16:09:b1:a6:
2f:81:1f:47:6f:0c:06:79:fe:0a:70:b8:d4:03:0a:d4:54:dc:
df:e0:cd:8c:3f:21:08:2b:9e:e1:d8:e4:ee:9d:b3:2d:c1:d7:
48:8b:15:3e:2e:8f:ec:2c:ef:da:2d:27:bf:da:1d:27:ac:b8:
1f:dc:17:e3:a5:83:96:62:62:8d:42:4d:85:13:05:0d:df:85:
93:ee:58:d0:0c:da:98:76:66:0b:d8:cb:f9:40:f5:de:db:c7:
f3:58:0e:a9:71:8c:57:d8:19:a0:6a:6f:60:4b:f3:9b:ce:8b:
43:c9:36:7a:2c:0a:76:f2:1b:f1:c7:44:2d:c3:c3:45:3f:5f:
1b:bf:b5:d1:dd:34:7f:c1:a8:84:57:56:d3:90:76:9c:ce:95:
34:9e:52:a8:d1:16:e3:f5:8d:69:62:e6:99:e7:92:6a:47:df:
fa:d6:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 20:16:30 2025 by rpki-client