Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
File: ngV1AShe0hwz2zraRFXEykfdTpA.mft (raw, json)
Hash identifier: VjFLT2yC2mdIJza7MAbjAfX05KmxXI0E5y14KxCtWao=
Subject key identifier: 35:C0:A6:F7:CE:37:FA:1C:96:03:88:BE:FF:AB:DD:B7:AE:D6:7E:1B
Authority key identifier: 9E:05:75:01:28:5E:D2:1C:33:DB:3A:DA:44:55:C4:CA:47:DD:4E:90
Certificate issuer: /CN=9e057501285ed21c33db3ada4455c4ca47dd4e90
Certificate serial: 01969115830DA02A0DC05DEBCDC0228D7674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngV1AShe0hwz2zraRFXEykfdTpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
Manifest number: 058B
Signing time: Fri 02 May 2025 13:00:28 +0000
Manifest this update: Fri 02 May 2025 13:00:28 +0000
Manifest next update: Sat 03 May 2025 13:00:28 +0000
Files and hashes: 1: ngV1AShe0hwz2zraRFXEykfdTpA.crl (hash: 6w5jc0qJt3JW6/QSs6hIwSvGe/cd02JtsI4QKWYSJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngV1AShe0hwz2zraRFXEykfdTpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:83:0d:a0:2a:0d:c0:5d:eb:cd:c0:22:8d:76:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e057501285ed21c33db3ada4455c4ca47dd4e90
Validity
Not Before: May 2 13:00:28 2025 GMT
Not After : May 3 13:00:28 2025 GMT
Subject: CN=35c0a6f7ce37fa1c960388beffabddb7aed67e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:ed:c0:96:8c:92:1b:cc:3d:a0:3d:d2:c9:
82:be:9e:80:47:4a:46:09:9b:47:ad:0c:e7:6c:53:
dd:89:48:98:e8:71:f8:44:c8:01:05:99:77:04:00:
90:a9:57:09:c7:2b:a6:89:3b:e2:41:56:b6:d5:f9:
aa:46:5b:49:dc:fd:79:ca:d9:ed:f5:1c:67:b5:58:
76:ac:27:4a:9d:67:8e:13:5a:03:8f:ce:38:ff:cf:
3d:6e:43:df:ab:f1:fe:4b:53:d5:6c:da:8f:c4:9e:
aa:b1:35:f4:9b:21:5b:bf:cb:db:4a:28:8d:9f:a1:
54:fe:6d:f2:a4:71:0e:08:ec:4a:af:f4:c8:3a:5b:
2e:e1:23:e4:67:ac:9c:ab:ff:16:eb:29:d8:e1:84:
e5:66:fc:b2:a8:0d:a2:38:df:52:a5:8e:ae:a6:e7:
65:ff:97:47:d3:50:aa:33:d3:fa:c5:e4:37:46:ea:
62:0a:a2:fc:3c:e9:cc:20:45:1f:01:4d:63:08:4a:
b2:e1:35:2d:8a:12:e6:60:a0:80:88:0f:9c:42:e9:
dd:2d:7e:96:de:d2:42:50:ad:5d:fd:a0:c1:95:bc:
7b:58:0d:6f:ac:63:7e:72:96:36:d2:2e:1d:eb:6e:
33:29:61:84:7d:72:82:82:0d:86:b4:18:33:02:4d:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C0:A6:F7:CE:37:FA:1C:96:03:88:BE:FF:AB:DD:B7:AE:D6:7E:1B
X509v3 Authority Key Identifier:
keyid:9E:05:75:01:28:5E:D2:1C:33:DB:3A:DA:44:55:C4:CA:47:DD:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngV1AShe0hwz2zraRFXEykfdTpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:df:a3:4b:ac:ea:e9:0a:67:a7:11:03:25:e1:6a:4d:76:af:
51:46:24:6b:13:4c:fd:2a:dc:34:25:d2:b8:8d:66:75:54:ed:
45:37:79:90:32:04:5f:75:f6:eb:00:91:4a:dd:b3:7a:b2:00:
31:ed:7d:61:cb:48:ec:40:b0:b0:c2:83:5c:a1:33:e6:ae:fd:
14:c0:92:6e:20:94:d8:1d:e5:ee:76:c3:6c:ad:dd:8e:21:48:
69:ca:f9:a3:ab:84:31:64:5c:5f:fe:9e:56:08:65:81:55:39:
76:da:38:6f:53:d9:17:14:a7:6e:a1:fc:3e:21:eb:1c:aa:5f:
aa:88:0b:c5:eb:05:62:fc:c2:78:af:a1:dc:97:c3:16:be:a5:
03:f5:5b:07:b1:b9:3d:fb:e0:31:63:a0:76:75:c7:3d:64:ef:
73:bb:16:02:09:b7:a3:33:02:67:98:bd:43:b8:83:31:77:44:
79:a4:b2:b7:6e:5f:1d:5b:f4:cc:dd:82:66:7d:57:21:ae:2a:
b5:da:60:b7:9a:bb:28:a7:a4:c3:61:f1:71:c3:0e:8f:8b:a6:
3e:4d:e2:ec:bf:a5:b2:3a:3b:6a:71:e8:94:54:16:ab:ce:8f:
65:4c:d1:1b:5c:de:b6:48:ea:98:c6:a2:73:8e:ea:01:35:96:
84:75:2c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:26:20 2025 by rpki-client