Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File: Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier: 4bhmiheUnv2Dn7KwXSF6CTESFMxZ9i8dWXnCwbDywv0=
Subject key identifier: 8C:BD:AA:DC:E2:B3:F1:89:33:E9:AB:84:02:2D:E2:BE:FC:1E:D7:8E
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 0196925F0DF134C583F61F35B23C02DCCE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 19:00:25 +0000
Manifest this update: Fri 02 May 2025 19:00:25 +0000
Manifest next update: Sat 03 May 2025 19:00:25 +0000
Files and hashes: 1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: sBi63VmeK7/qukqCy+9AZ9yq9SO1iHn/DiHaiRNaStA=)
2: SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa (hash: 790cASmrwFRWvIHgSFvW34RkdQVbe9565zpCVGOf6tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:5f:0d:f1:34:c5:83:f6:1f:35:b2:3c:02:dc:ce:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: May 2 19:00:25 2025 GMT
Not After : May 3 19:00:25 2025 GMT
Subject: CN=8cbdaadce2b3f18933e9ab84022de2befc1ed78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:06:4b:f8:33:77:e0:d4:53:5d:88:88:fa:b2:
6e:56:77:15:bc:7f:29:3f:4e:72:6a:ba:79:5f:b1:
3c:95:85:a5:30:fe:84:dd:ae:23:eb:d6:b5:98:81:
83:ef:b3:40:46:63:d6:79:ac:e2:fe:0e:30:c2:c7:
94:c7:3d:1f:2c:09:e9:30:2f:01:20:66:97:a8:5f:
5c:68:cd:ec:27:43:4d:98:92:32:42:31:14:51:58:
c3:4b:79:ec:2a:72:6c:e3:ca:56:a8:fd:05:d8:a2:
df:02:54:4d:16:2e:91:48:f8:c0:34:fb:ff:82:f0:
17:f9:83:fa:a8:a6:1b:b3:c5:53:19:e1:52:a4:93:
a2:8b:31:09:98:e1:1d:26:32:a9:f0:7d:e5:92:88:
1f:67:9f:87:c5:69:54:43:54:85:72:4a:70:9e:22:
94:c3:f3:10:98:6d:d9:f1:28:8e:08:e9:45:69:d2:
e5:55:4c:1f:18:bb:5d:c4:78:3d:7d:25:64:fc:e5:
a4:7e:de:42:33:1b:be:17:ec:1d:00:4d:b6:1b:b7:
3f:86:38:03:5c:cc:4e:c8:d9:6f:9d:34:c4:e9:85:
13:62:c0:dc:aa:3e:40:70:17:d0:c4:b5:90:17:29:
99:a4:ed:21:ec:7b:ab:c2:1b:21:c0:7c:a1:13:c3:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BD:AA:DC:E2:B3:F1:89:33:E9:AB:84:02:2D:E2:BE:FC:1E:D7:8E
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:38:3c:f8:e4:98:4f:ca:d8:82:fa:f6:af:06:a1:29:91:cf:
8e:ae:5b:64:3b:fc:5e:87:f9:cc:47:65:de:85:f5:ac:d4:10:
7c:e8:c7:41:ba:ad:98:6a:29:b9:79:38:65:f9:ed:81:f5:59:
27:1f:ff:f8:bc:a2:c6:95:26:79:66:3e:f9:b0:02:7b:eb:66:
1a:a3:52:f1:b6:70:56:1d:63:45:f0:d5:30:56:16:a6:2b:85:
ea:85:f8:28:2e:83:34:9c:8b:05:9c:e4:ca:e0:21:e4:f9:17:
88:42:45:20:3b:dd:2e:6d:e9:56:a7:68:4a:e4:bb:85:34:60:
6f:57:d3:c5:5f:ed:c4:a9:e3:34:73:35:df:c7:fc:2a:33:c8:
df:be:08:a4:08:55:ca:fa:1d:37:0e:e5:f1:c8:68:84:15:bc:
e4:64:f3:3b:5d:44:62:de:27:5f:3a:3a:e3:81:ea:4b:98:e9:
73:dd:87:c1:50:e1:6e:3a:b2:97:f6:3e:19:d6:cc:e3:28:ac:
27:b6:09:4f:69:dc:69:a0:69:9f:07:60:b4:93:d1:da:99:bb:
39:ad:51:8c:5a:0c:09:a6:49:aa:7b:98:47:c0:a3:d6:71:15:
a7:fc:d3:59:7a:0e:44:fb:d8:8c:57:7c:8b:9d:79:0c:fc:0a:
69:b8:f9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:28:05 2025 by rpki-client