Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: RV0HBB1XN2e2n5VfLPSx9PmpSVuLjGM2uaT8Dm94E90=
Subject key identifier: 8E:BF:BF:6B:34:6E:7F:1F:B7:15:45:82:BF:A1:00:4E:D7:D4:46:7E
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 019680FDF88CC232213108B29831C9D02FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 0D99
Signing time: Tue 29 Apr 2025 10:00:49 +0000
Manifest this update: Tue 29 Apr 2025 10:00:49 +0000
Manifest next update: Wed 30 Apr 2025 10:00:49 +0000
Files and hashes: 1: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: nz3S3PKAWoHyPuZ5HzdYQq1Fa0nqpwW6AsXiLA8R5q8=)
2: ZFMFiXOWwPj8k4IMO6NkGD3u9_Y.roa (hash: d308Fz0xAcOGQMBvbHe9umSC8kJ11mxoDxfXwvbWkEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:f8:8c:c2:32:21:31:08:b2:98:31:c9:d0:2f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Apr 29 10:00:49 2025 GMT
Not After : Apr 30 10:00:49 2025 GMT
Subject: CN=8ebfbf6b346e7f1fb7154582bfa1004ed7d4467e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:a0:ee:70:1f:2a:43:9c:29:4b:08:14:6a:
6b:94:e4:cb:f8:57:52:4c:8d:7f:f9:4e:e4:34:f4:
d7:88:c3:fd:34:04:3a:38:1c:a8:7f:b6:94:1d:39:
e3:17:2a:b7:ba:dc:58:62:65:48:52:76:bc:bd:e3:
dc:91:85:c1:3a:93:27:e9:4d:50:52:28:0d:29:48:
21:6e:30:48:96:1f:01:2f:d2:a2:21:3d:ab:5f:f4:
e6:bf:b0:b9:38:6e:07:e0:30:87:f0:54:53:11:57:
3c:57:f7:00:de:af:e8:02:45:83:d2:d6:6a:aa:68:
9c:85:19:0d:ba:e4:99:4c:74:6e:92:50:1e:f5:c2:
f9:dc:19:b0:4a:97:ab:81:97:9c:48:3a:bf:45:3c:
27:29:2a:d7:3a:b2:17:9c:8e:72:f7:aa:2d:41:6d:
3b:05:69:cf:f4:34:80:3f:85:05:c7:71:4e:fa:9c:
93:ac:05:5f:c2:5a:46:1a:fa:cf:c0:b5:d7:90:6b:
8d:e4:3f:c9:76:7a:48:9c:03:a4:08:be:c2:1f:e4:
51:0e:d1:56:7c:0a:39:ff:ec:dc:54:ee:f9:ea:48:
fa:6a:18:58:cb:b3:61:99:9a:1a:dc:93:9b:13:a6:
41:25:97:ad:00:4d:61:eb:7d:08:8f:18:92:ee:6a:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:BF:6B:34:6E:7F:1F:B7:15:45:82:BF:A1:00:4E:D7:D4:46:7E
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1c:c7:85:ef:91:aa:79:15:a3:3a:14:51:c3:b4:6a:1d:21:
1a:b7:02:d6:8a:ff:f1:42:1b:d7:4f:f6:95:5a:61:5e:9a:a1:
ce:31:da:3a:5e:2c:77:58:be:39:cd:4c:bb:96:7c:ac:14:59:
7d:c3:44:2c:8e:a1:42:18:34:9c:2d:b9:80:4a:38:66:1f:8f:
61:69:30:df:74:84:eb:18:62:0e:06:1f:58:41:a8:26:a2:9f:
16:54:f5:b7:3a:1f:ad:10:e4:e8:81:fc:65:47:12:e8:02:ff:
ed:e4:83:99:c1:a8:63:60:c0:87:15:ad:41:07:f5:c5:95:9d:
43:a5:c4:14:1f:e7:d2:86:1a:3f:01:5d:4a:41:98:ff:f9:4f:
3b:1e:5a:b9:d6:b1:d3:a0:6b:11:03:ff:de:11:7c:29:75:a8:
fc:9b:e7:4b:2b:88:f2:a5:c6:46:e3:2a:74:21:8c:c7:b2:7c:
d3:62:1c:97:a8:3a:ce:be:d9:60:dc:05:19:60:c5:97:cc:97:
9d:77:cb:ca:30:95:2b:de:1a:02:c6:81:c6:7b:c0:ef:02:ba:
e5:ae:57:ef:4e:da:31:8f:45:92:06:d5:65:25:3c:70:a2:d4:
0e:46:46:96:3d:58:0c:51:ac:78:61:a1:3a:69:9a:99:7b:cc:
20:51:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:19:42 2025 by rpki-client