Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
File: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft (raw, json)
Hash identifier: KsGFjETqGoEFpUq8CCpsxXRnPgGfUZ2IIPH+n5ihqvU=
Subject key identifier: 57:3A:56:00:77:D6:77:1B:D8:F9:3C:B7:05:E6:FA:61:69:BC:E8:7A
Authority key identifier: 34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
Certificate issuer: /CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Certificate serial: 019679B20EFD5DEA8C2E0623AAF7B1D6156E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
Manifest number: 11EC
Signing time: Mon 28 Apr 2025 00:00:34 +0000
Manifest this update: Mon 28 Apr 2025 00:00:34 +0000
Manifest next update: Tue 29 Apr 2025 00:00:34 +0000
Files and hashes: 1: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl (hash: IRMJK92Lxg6CaLiSaejugq6uzN/P6If43ltG6AL8rjk=)
2: pJ8B6gtnj6CL56vYC6LrCO5oBmo.roa (hash: F88j9ZRyVWoqzEm3QsXJ4KW1kEET+j/VAKZytfrtK/M=)
3: zsR2hosRcU8M1KGjXd1_k-ktlfc.roa (hash: rTq5tN+JofEk5Za1xiOrbVhdFMOSTGjrPTYOHgXaK+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:0e:fd:5d:ea:8c:2e:06:23:aa:f7:b1:d6:15:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Validity
Not Before: Apr 28 00:00:34 2025 GMT
Not After : Apr 29 00:00:34 2025 GMT
Subject: CN=573a560077d6771bd8f93cb705e6fa6169bce87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:a8:1d:64:56:66:d4:18:ec:a0:58:7a:72:
0e:08:20:52:32:4e:c6:55:d5:03:a7:e0:18:bf:51:
d3:56:75:70:93:44:7c:cd:94:ab:9b:62:1f:7c:c1:
9c:d8:c6:75:0a:29:46:3b:ec:61:b3:51:9d:a3:89:
59:f5:04:d6:27:b3:ff:1e:bd:8f:9b:c4:13:69:92:
d5:73:e0:15:3c:50:1a:2d:9f:4d:34:37:34:0e:ce:
16:54:ba:5e:53:80:a0:77:53:2b:09:fb:e1:54:09:
b2:4f:65:2e:76:8e:ca:a2:43:78:de:c1:5f:4d:0b:
c0:d2:6e:83:82:bc:bb:02:ea:3a:e5:eb:95:91:7c:
53:4b:83:ec:fc:b4:f8:cf:49:b9:d9:1e:7c:39:b0:
49:34:16:6f:03:14:91:b8:0d:15:37:42:bf:fc:45:
2a:8f:ed:71:32:11:80:5f:f4:ff:20:20:2b:8d:32:
9b:7b:74:ae:d6:22:bf:28:e1:10:a8:2a:47:a8:de:
cb:d7:e1:1c:75:1e:c8:6a:cd:74:a2:73:54:94:4b:
88:55:15:02:60:c2:1c:fb:4e:64:c8:f4:63:76:f9:
e1:a0:9a:4a:40:b9:4e:eb:50:f3:4a:b1:f2:f3:a1:
1e:9d:6f:33:ca:54:80:25:0f:7a:40:90:bd:fd:14:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3A:56:00:77:D6:77:1B:D8:F9:3C:B7:05:E6:FA:61:69:BC:E8:7A
X509v3 Authority Key Identifier:
keyid:34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0f:39:0b:88:25:a0:ce:2f:92:96:75:ea:2c:0e:cd:01:af:
89:8b:b0:f7:7f:7f:d8:a2:2e:24:87:7b:2d:0f:41:ff:21:ea:
be:de:f7:e6:e0:68:29:e9:06:94:f2:49:4f:3d:53:d3:9d:7e:
81:b9:c4:c1:39:0d:e8:fc:a7:b1:d6:35:bd:18:94:24:6e:b3:
99:cc:02:b6:73:cc:9a:cf:57:da:d1:0f:66:2d:16:8d:38:71:
9c:cb:c3:84:8f:40:04:2f:6c:ce:49:2b:db:77:d3:b3:68:70:
83:42:a4:21:4b:07:06:ca:b7:b3:3a:c0:5f:e5:5c:18:93:88:
07:88:ab:bb:42:12:0f:b0:f7:fd:75:1c:ba:43:e5:eb:43:77:
4a:ac:8b:23:b6:cc:25:27:64:da:fe:0a:0e:18:28:c1:41:7a:
f4:04:91:f2:3e:85:4f:a1:57:ef:b5:2f:07:48:5d:a4:67:71:
97:c4:05:cf:32:0b:ff:cf:78:65:c9:79:35:2f:ce:5d:65:83:
8b:8c:c1:6d:99:da:3f:cb:2d:2d:d8:9f:00:73:7f:2d:de:02:
ee:14:31:36:23:36:ef:8d:45:b0:be:be:cf:99:10:5e:ff:e1:
59:a8:c6:a0:0d:12:c1:6f:f5:f2:3f:02:5c:32:7b:00:1d:14:
d1:dd:40:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:25 2025 by rpki-client