Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier: yCYyaCNKbemzsRpZjH6yVfeq25KV+jnkC/cZT0BffeE=
Subject key identifier: 5D:56:C2:AE:B3:5D:97:0D:87:8C:9D:69:79:93:BF:79:A8:0B:40:16
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial: 01968D6FFAFE492B05143F84558F243EA751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number: 012B
Signing time: Thu 01 May 2025 20:00:48 +0000
Manifest this update: Thu 01 May 2025 20:00:48 +0000
Manifest next update: Fri 02 May 2025 20:00:48 +0000
Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: pnsILdwZKlYbniS8ThGMIO5FrNIM7AFKR9sZsfzSFxw=)
2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:6f:fa:fe:49:2b:05:14:3f:84:55:8f:24:3e:a7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Validity
Not Before: May 1 20:00:48 2025 GMT
Not After : May 2 20:00:48 2025 GMT
Subject: CN=5d56c2aeb35d970d878c9d697993bf79a80b4016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:56:7a:e9:23:d7:88:46:5b:ba:28:ea:45:
bf:fa:fc:62:4e:78:0a:eb:fa:38:15:3d:69:14:e8:
75:52:5f:48:93:fe:99:46:d6:31:22:49:76:e0:6e:
2d:1b:75:c5:15:34:80:56:e1:93:e4:a4:3c:e9:98:
48:0d:de:68:3c:85:a0:41:cf:93:71:0c:a9:dd:34:
78:39:84:3e:31:a4:52:e4:df:1a:ff:26:84:57:2b:
f8:cd:c2:64:e9:ca:f6:d6:14:8c:1d:9c:70:e4:e0:
af:61:3d:b4:71:ba:91:78:20:be:98:83:db:bc:c1:
88:7c:dd:e7:05:5b:de:fa:d2:19:9c:ae:17:88:e4:
49:ff:a8:8b:81:7b:2d:3e:9c:31:81:ac:14:17:71:
30:38:f5:6b:da:f9:3e:47:fa:b5:50:98:e3:46:8d:
87:32:f1:4a:e7:7e:94:ef:3b:a8:83:de:f5:da:ac:
b6:0c:0c:9a:0e:93:d6:36:c4:29:58:d7:21:ca:b1:
bc:b0:b1:47:42:cf:c6:22:de:69:75:d1:c0:6a:97:
e5:a9:26:a6:3b:a1:83:9b:7f:4a:42:db:b0:f5:a2:
fb:20:c6:ee:bb:eb:9e:6d:7d:b3:3f:17:f8:cc:72:
03:29:05:9e:ce:e8:70:21:2e:cd:dd:85:01:b6:a7:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:56:C2:AE:B3:5D:97:0D:87:8C:9D:69:79:93:BF:79:A8:0B:40:16
X509v3 Authority Key Identifier:
keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:73:a5:c3:ff:cf:b9:7b:8a:f6:ad:9f:65:c0:58:17:99:e2:
9a:5e:17:a5:56:30:70:82:78:28:e6:17:86:3d:a5:76:19:35:
d6:bd:95:62:c9:cc:c0:03:47:75:8f:53:0d:4c:f6:90:95:58:
d6:e8:cb:ff:e1:e6:6a:1a:87:ce:ea:06:ff:95:ab:35:3d:27:
a1:e1:cd:6c:e6:86:51:cd:19:7e:c1:5a:39:95:2c:88:99:c9:
d5:8e:24:ad:f8:3f:2f:9b:bd:70:0f:57:4c:99:3d:a3:f3:bd:
87:58:a5:1f:f6:3b:3a:27:bc:f9:fc:82:65:0c:39:aa:ac:b2:
59:1b:ab:ad:a7:9c:a3:64:fa:77:93:ce:f2:a0:da:9c:03:37:
4a:59:c2:bc:9a:58:d8:f1:20:8f:bb:25:8e:4e:f8:e0:cb:de:
63:8d:3a:22:c5:bb:f6:13:04:c6:68:34:0a:df:ea:10:28:8e:
90:76:27:1b:90:03:4f:21:c3:23:f4:c1:ba:1a:5e:f1:9e:6b:
67:1d:41:2f:5d:06:08:b6:a1:20:19:fb:74:40:48:83:3a:5b:
ea:4d:a3:04:e6:fc:52:9a:52:2e:bd:a7:bc:64:cd:f3:ca:76:
0a:58:9d:1a:dd:ba:13:b6:a7:69:79:9c:24:a7:91:15:77:29:
f4:07:f0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:16:47 2025 by rpki-client