Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: BIS0qbZKAkDW48BHGp7eEdgRIg+WdnSoceYkqkTjw+E=
Subject key identifier: B0:F9:0D:2B:22:8A:C2:D9:05:3A:06:42:2B:BA:F4:72:D3:D7:5C:20
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 0196729D2092F20ADC0D3A22E9BF30B2B9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 04DE
Signing time: Sat 26 Apr 2025 15:00:22 +0000
Manifest this update: Sat 26 Apr 2025 15:00:22 +0000
Manifest next update: Sun 27 Apr 2025 15:00:22 +0000
Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: G98QywnwkYCdhXOAZ5PA3XJsWDoxX9VEEyTkgj0EHzQ=)
2: hzr42e2R_h-LWwgBpSQZacNEqsc.roa (hash: 9mXipkAV76pHGL76kppNcnsru8YUceXMwinc9f3N1VQ=)
3: t7tnySRpEFMTydXCzGToiDJgYGQ.roa (hash: CXeAI4+kyWk1ca7T6WDcTTVmJi/Ezadlx47KG35a8Bw=)
4: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (hash: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:20:92:f2:0a:dc:0d:3a:22:e9:bf:30:b2:b9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Apr 26 15:00:22 2025 GMT
Not After : Apr 27 15:00:22 2025 GMT
Subject: CN=b0f90d2b228ac2d9053a06422bbaf472d3d75c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:12:d4:df:0d:16:4b:15:7b:47:f2:23:72:
26:12:66:2f:f8:ff:0b:e8:b8:f6:d3:c4:4f:d3:1f:
71:cc:32:28:6e:7d:40:80:fa:c0:c8:9b:0c:04:af:
64:e4:f5:59:5e:b0:06:08:55:25:76:bf:a4:6a:72:
67:0a:1b:39:b3:ed:6b:9d:e5:ec:ef:f2:54:e3:e3:
b8:bc:f1:33:cf:bf:cc:4b:04:a1:71:88:f0:a9:29:
c6:e1:1d:b9:5b:05:96:4f:62:0d:b1:ad:de:3d:ff:
2e:d7:b7:96:ea:04:fd:57:49:a3:3a:ae:43:1e:ac:
ce:6f:ac:c3:ad:db:32:e0:e5:4d:90:77:19:1e:85:
43:73:68:23:b3:54:ab:81:57:54:2e:81:07:59:3e:
aa:ad:f8:4e:77:04:b5:c2:1e:b0:06:b1:a1:36:b3:
d6:71:ef:e4:b3:f6:14:86:96:ad:ec:fb:38:00:e4:
50:f5:38:96:7e:b4:46:b5:25:43:0c:d6:d3:46:b4:
31:aa:12:5e:f1:b4:ea:da:cd:17:ff:dc:a7:40:7f:
cf:0a:31:ed:17:d7:78:54:ec:19:f7:d3:1e:ba:02:
88:b0:78:c3:f1:74:61:4d:8c:83:26:cb:91:0a:a2:
cc:2c:8f:d7:a8:1d:32:a0:2d:f7:27:64:4e:64:38:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F9:0D:2B:22:8A:C2:D9:05:3A:06:42:2B:BA:F4:72:D3:D7:5C:20
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ff:a7:ad:8f:e0:3d:e1:86:2c:82:92:5b:33:de:8f:e3:5b:
4c:7d:4a:6a:ef:d5:0b:16:47:f6:a4:a2:fa:b3:af:cb:4b:88:
bb:16:d3:3c:ff:d5:d2:60:59:95:74:e6:c1:b2:14:dc:bc:4b:
f2:fa:2e:5c:0e:ad:6b:b2:dd:03:ec:d1:4a:c6:87:49:d1:fe:
fc:54:54:49:89:e7:6b:ad:f2:d6:52:ec:84:cb:b9:85:ed:27:
33:f3:6d:7b:f9:9e:ee:54:8e:c0:df:bc:71:1b:94:3d:04:d5:
61:c6:bc:82:0e:be:1d:aa:18:d0:86:77:0f:4e:89:d7:c4:94:
1a:ca:8b:cb:ba:d8:f0:db:85:cf:6d:8c:07:a5:1f:d6:35:53:
9d:95:24:33:4a:4b:fd:b7:15:3e:10:a9:28:0a:71:7f:06:a1:
ed:82:76:11:95:4b:8e:7d:eb:c3:82:0b:0f:20:e5:8c:3b:6c:
97:cd:10:d1:2c:83:e4:6e:cb:e1:ee:56:03:31:ca:a1:aa:2f:
a0:b4:39:48:e7:1d:00:be:53:34:4d:75:d3:3a:1c:e7:00:97:
99:cc:dc:b0:56:ed:81:f7:54:d1:31:6d:73:14:2e:06:e2:35:
94:41:3a:b2:e7:d7:b4:05:22:7d:7e:01:05:e2:4a:b2:51:b3:
d5:83:62:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:28:13 2025 by rpki-client