Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: C9bNdgRoOlUeSmrzwuSEmPCiDnoqcgq2lp8SbB9fuCE=
Subject key identifier: 66:6E:A6:E4:25:8E:9F:95:24:C0:56:E6:CD:AC:E9:E0:D5:06:B8:65
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 01968D39C0D76E9E3B15310A70FE000582FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 151D
Signing time: Thu 01 May 2025 19:01:34 +0000
Manifest this update: Thu 01 May 2025 19:01:34 +0000
Manifest next update: Fri 02 May 2025 19:01:34 +0000
Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=)
2: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=)
3: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=)
4: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: 5r8vSes/nhos0fklYeSOUUp8Wzr8POhWy7Ni5fGeReU=)
5: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=)
6: n6tTr6zCJWcy243UaHGcvc68Cuo.roa (hash: 0ym6kX5GeiUQfUcNj5Jvc+XuXgOTW8J6SoBaRmr08MM=)
7: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=)
8: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:c0:d7:6e:9e:3b:15:31:0a:70:fe:00:05:82:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: May 1 19:01:34 2025 GMT
Not After : May 2 19:01:34 2025 GMT
Subject: CN=666ea6e4258e9f9524c056e6cdace9e0d506b865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:58:4a:00:45:2b:3e:bd:90:0c:f3:a0:7c:
ad:74:ca:38:ce:2e:6c:4b:22:4e:f3:d7:9d:b5:2e:
7a:43:71:6b:d2:5f:4f:0a:63:a6:85:19:0f:55:7f:
c7:c8:f5:40:16:3d:27:b0:b6:ab:f3:a6:75:44:2f:
9b:2d:42:82:e8:f6:21:dd:d5:f2:82:0d:5e:cf:45:
24:af:67:4f:7d:f6:d7:19:51:a7:7b:2c:6e:5c:fc:
98:82:1f:5d:d1:f1:3c:98:64:b8:26:92:09:65:53:
8d:16:8e:ff:99:b7:63:a9:16:fa:84:3b:27:f7:c5:
11:d2:07:d5:04:75:c8:0f:22:b0:d2:65:15:63:a5:
3f:fb:88:09:c7:ee:94:16:9b:1d:b3:c7:a4:fe:5a:
f4:24:90:cd:57:d7:55:88:75:45:f0:09:92:9b:29:
b3:68:3d:1f:6a:c5:6c:0c:be:80:ad:31:ef:96:1f:
89:7c:7f:5f:2a:2c:58:8a:0d:aa:89:7b:97:e8:c6:
58:58:cb:20:74:07:45:12:2f:48:fe:47:87:c8:39:
80:0f:eb:13:4e:a4:23:7d:df:64:d7:c1:ae:ac:c8:
5d:a8:80:24:f2:5e:d3:52:02:a5:38:94:77:39:5a:
ab:22:16:e5:0e:ce:00:0e:7d:e5:cb:3a:55:97:09:
63:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6E:A6:E4:25:8E:9F:95:24:C0:56:E6:CD:AC:E9:E0:D5:06:B8:65
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b2:3e:23:7b:a7:cf:1d:7f:29:35:e8:a3:0f:f8:9b:28:93:
1c:e2:90:4d:aa:78:c5:45:14:6a:df:84:9b:ad:d3:53:6a:ae:
0b:ac:32:14:bf:44:e4:20:4d:6c:a8:c2:d8:bd:6b:5b:b7:84:
1b:a2:e1:00:19:7b:bc:a7:11:93:5a:65:b5:36:4c:df:f4:60:
64:fa:b3:bf:f6:fa:24:06:a8:b3:b8:2b:25:91:0f:e8:4a:75:
d2:8d:a6:65:1a:70:42:2a:6f:dc:84:91:1a:5f:1c:2a:62:16:
b4:c1:ab:de:d5:ac:15:ea:b6:09:cc:0e:24:7a:f5:12:de:33:
87:e4:35:da:bf:b9:61:c3:a6:18:68:c3:ce:eb:38:98:43:56:
6a:2f:c2:2c:63:65:4d:fe:1c:44:c9:f4:89:54:33:d0:de:c0:
fe:7a:c6:e5:2a:76:4a:7f:81:3d:d9:db:38:11:06:17:66:a2:
5f:5e:e0:22:dd:d9:94:83:a2:16:3a:fd:44:d0:b8:38:86:21:
9a:3b:1a:0c:51:d1:d0:49:51:c1:ed:ff:a7:8e:67:f7:cd:b3:
d9:74:ed:8b:83:16:94:0b:ad:95:70:b7:a5:a8:47:23:8d:57:
ef:a5:9a:ad:de:46:a7:28:24:03:2d:9c:72:7e:53:7d:37:65:
a2:e5:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:00:41 2025 by rpki-client