Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: xSjdFY/c6bHSh4AAMaTy4HN/KOVjP+qGxTClZcq8r8c=
Subject key identifier: E8:46:D1:2D:E2:38:30:3E:C1:4D:6C:0E:12:53:B5:65:8F:7F:9B:BC
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 01967ED890F93E78E855FFCFEABDD2EE6979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 1320
Signing time: Tue 29 Apr 2025 00:00:44 +0000
Manifest this update: Tue 29 Apr 2025 00:00:44 +0000
Manifest next update: Wed 30 Apr 2025 00:00:44 +0000
Files and hashes: 1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: QKIECMDaN2KQbNYJNTB9fDFXNj80rC2l7cPrfr2Igg4=)
2: dYJMd1xHra4qPvxWQ63pWL2NPkE.roa (hash: lMxX8BkZ02l91WMGdaFajJSu4NcGeGtSFmauEg/qSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:90:f9:3e:78:e8:55:ff:cf:ea:bd:d2:ee:69:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Apr 29 00:00:44 2025 GMT
Not After : Apr 30 00:00:44 2025 GMT
Subject: CN=e846d12de238303ec14d6c0e1253b5658f7f9bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:ac:2f:8b:0a:bb:a8:27:42:e6:91:76:c1:
61:0a:d6:27:f7:dc:83:5f:a9:3f:98:88:54:dc:8b:
c4:6f:82:0d:d1:3a:27:0e:6d:b9:25:ec:82:81:f2:
5b:cf:99:1b:df:4c:9d:bf:aa:d2:c5:3e:06:1a:8d:
65:da:1b:7c:6d:11:b2:5e:8e:9c:33:2c:96:0d:50:
81:b6:80:49:db:2b:a6:03:c4:4b:3d:6e:01:a5:e0:
d7:f0:8d:c0:a2:f1:d5:33:f5:f2:22:38:3a:45:2f:
3c:05:9b:51:9f:1c:24:10:b6:23:c6:ae:b9:f6:96:
6c:cf:92:e0:14:23:40:40:34:41:2d:db:e9:90:be:
25:21:b4:fb:23:40:39:2c:65:14:61:25:06:c9:3a:
77:09:a7:6b:95:03:48:03:56:64:cb:fc:97:3a:f6:
36:1d:a7:59:e8:92:b0:f8:c3:7e:87:51:a1:cd:16:
49:0e:fc:63:ba:b2:40:2b:8c:f9:33:74:29:f3:4e:
ff:3d:ef:0a:41:85:c0:26:21:f0:3a:f4:3d:4f:43:
d9:c6:87:3d:58:52:3b:b4:c8:85:b8:37:f9:f6:ad:
a6:8c:be:4a:2c:2f:84:7d:cf:1d:8b:6e:9a:5c:df:
e8:21:4b:7d:95:73:2a:19:31:0e:31:ff:81:e3:2a:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:46:D1:2D:E2:38:30:3E:C1:4D:6C:0E:12:53:B5:65:8F:7F:9B:BC
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:81:9e:8d:27:fe:6b:84:8b:9c:ab:85:e0:ff:f3:57:e5:e6:
a0:2c:20:7d:b7:9f:a7:6c:ac:7c:91:db:5d:2e:e7:31:28:14:
47:c2:45:91:1b:d3:4d:5d:57:7e:0c:cd:f4:01:f9:44:3f:2a:
63:71:26:51:16:c4:c3:1d:c4:88:1b:55:f3:f1:76:d5:05:56:
fa:5f:7d:8c:3b:75:14:38:8a:54:f1:ba:20:9a:dc:59:d6:b5:
01:fc:66:e9:5c:22:dd:c4:51:da:65:f0:43:96:3a:d5:5f:3c:
30:c8:e1:e6:e7:c4:b2:90:d0:5a:08:cf:68:27:9b:b8:fa:a9:
65:f2:7c:78:1a:81:14:ca:1e:e9:e0:68:45:bb:18:3a:64:e8:
e3:48:0e:28:0f:fd:af:31:6f:a7:56:3c:e0:7f:fd:d7:f1:e5:
6a:15:47:4a:50:cd:ed:7b:bb:d5:9c:fc:6b:e9:5e:c5:0c:20:
0b:47:a5:c9:0a:72:b0:f2:55:a3:ef:34:41:c6:f6:d4:6f:44:
ca:99:24:48:01:d3:50:85:6c:87:3e:1e:31:ec:63:b7:c9:03:
64:c2:1d:f4:e4:d5:dd:25:78:ed:46:40:e0:4b:b3:26:ea:2b:
c8:98:41:72:88:41:47:63:ff:88:12:2a:c1:ef:09:1d:23:f3:
5a:c4:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:15:17 2025 by rpki-client