Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier: vQMXsDbqNmOioz0ct8ttnwe8nPcar1XwJMaGFIPrvDs=
Subject key identifier: 10:3E:66:62:CE:D6:01:B6:DF:22:E7:1C:55:4D:76:63:C6:07:71:BB
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial: 019676E7A8767DDB16865E0FE860E727984D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 11:00:15 +0000
Manifest this update: Sun 27 Apr 2025 11:00:15 +0000
Manifest next update: Mon 28 Apr 2025 11:00:15 +0000
Files and hashes: 1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: llur7+0k1hOPXQSo8c+5I9UkRvWagpyEzgBh4nEZojo=)
2: qWxHxzkwFGcxa5jSluitx-sE42Y.roa (hash: 3aDiNAN4onF/Cdaq+yTsD+jmRJ2OmMmFOaHRV5Fmhp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:a8:76:7d:db:16:86:5e:0f:e8:60:e7:27:98:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Validity
Not Before: Apr 27 11:00:15 2025 GMT
Not After : Apr 28 11:00:15 2025 GMT
Subject: CN=103e6662ced601b6df22e71c554d7663c60771bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:d4:06:80:d5:c1:27:d1:8e:51:99:ba:14:
6c:57:c2:7a:70:5a:ad:17:5f:17:d6:03:49:92:a1:
58:50:26:56:4c:bb:46:17:af:bf:d4:33:84:ff:aa:
e7:54:f0:a4:bd:65:5e:56:16:a0:1f:2f:3e:b8:85:
8b:36:8e:46:d6:cd:63:a4:d2:e9:33:f3:20:b7:22:
01:9b:d5:e9:4f:91:6b:61:14:4e:d0:6f:2b:39:21:
85:19:2a:09:ac:aa:07:2a:44:72:a7:7f:db:5f:86:
b7:46:04:d3:1e:84:b5:7f:f9:da:3f:da:65:22:d3:
ab:ba:07:29:71:be:4b:e1:94:e7:6a:90:b0:b3:ff:
2c:45:01:62:7b:b1:fd:9d:9b:ba:8a:ec:2b:09:6f:
28:c7:27:ad:2c:f9:58:fb:8b:09:9e:39:6b:83:0b:
11:4b:96:1f:0b:e6:17:06:93:eb:51:b7:49:66:d6:
34:90:fe:81:06:db:09:5c:90:00:19:b9:1b:bd:a0:
a5:8c:a8:04:c5:76:15:ab:9c:e7:44:94:f8:d5:9c:
6d:5b:c3:b8:52:5b:3e:9a:ba:fc:d9:da:3f:62:4a:
9e:a4:75:73:2b:a4:59:cc:87:b9:77:7f:6d:da:7d:
d1:44:5a:e0:d9:48:fc:b5:89:07:c2:1f:4c:97:10:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3E:66:62:CE:D6:01:B6:DF:22:E7:1C:55:4D:76:63:C6:07:71:BB
X509v3 Authority Key Identifier:
keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3e:f6:c7:49:dd:36:a8:1f:53:5c:58:60:d7:ee:e4:ca:de:
bd:3c:3b:2e:43:85:21:4e:ac:25:97:04:01:03:07:44:de:b1:
46:62:69:ea:83:c5:f3:43:fd:1c:17:23:6f:e7:cc:0c:ad:1a:
4f:9e:ee:57:fe:42:7d:30:4e:c5:14:a8:a0:4f:58:72:58:dc:
13:8b:80:cf:12:df:e7:94:02:44:a1:0c:dc:ec:4c:30:73:f6:
91:96:13:e1:ff:ab:58:df:ea:1a:d7:f4:33:23:5d:2b:e4:b8:
9b:35:a6:c7:82:ca:d1:b9:e4:20:a5:43:66:bd:90:27:b2:f8:
21:00:9d:04:a5:e2:32:a3:a5:86:0b:64:0d:65:d8:0d:7f:96:
31:e7:08:28:a0:5a:4c:b7:96:5f:20:03:43:e6:7b:d5:8b:a3:
f5:66:f8:20:e0:ec:25:cb:b5:d5:6d:9b:a7:45:3d:b9:b1:52:
06:29:ae:b0:02:6f:21:17:dd:eb:64:44:4b:f1:28:7d:2f:80:
16:65:0b:c8:bf:d8:ce:6c:23:39:c2:42:dc:3a:e6:ae:32:9f:
a2:31:9b:dc:e0:93:07:30:ae:21:fe:ba:4f:cb:4c:b1:55:02:
2b:07:f8:44:5f:65:59:14:4d:d3:e5:dd:dc:f8:40:f1:20:1f:
cd:9c:85:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:53 2025 by rpki-client