Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier: YTwk/AWzjg8F0wG9uUEJm+vhu4iKrdO7uwvXZUyiJlk=
Subject key identifier: 78:1F:B4:25:16:90:E8:66:B1:31:9D:04:CA:C6:DF:55:4C:1F:35:B4
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 01967643479FF2CA2682DCE73AD9560F10AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 08:00:42 +0000
Manifest this update: Sun 27 Apr 2025 08:00:42 +0000
Manifest next update: Mon 28 Apr 2025 08:00:42 +0000
Files and hashes: 1: H8j-KlQfL6AGuM7lJr3knJUrtEo.roa (hash: 1uefLTqkvz0OqXFo/HdbBytkVHKTsftF+EzOemS3iXc=)
2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: 9axIUEXEAYzIm6RCEL0wU9MOincgBwmmKaw+nfh9rYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:47:9f:f2:ca:26:82:dc:e7:3a:d9:56:0f:10:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Apr 27 08:00:42 2025 GMT
Not After : Apr 28 08:00:42 2025 GMT
Subject: CN=781fb4251690e866b1319d04cac6df554c1f35b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2d:a4:59:80:fd:71:f9:5f:2d:fc:c6:f0:5c:
25:ce:2a:e7:4d:52:e4:62:94:a8:2f:1b:e2:8e:09:
63:d0:07:d8:8b:f2:8b:23:fe:4b:90:91:66:d4:c8:
d8:c9:4a:28:ed:dc:84:6d:40:53:22:de:cf:fd:86:
1e:9c:00:0e:84:04:6a:5e:5a:ba:89:6c:41:a3:a4:
8a:ba:0c:d2:ed:75:03:21:5f:38:56:58:03:29:29:
47:7a:87:09:87:fb:90:a7:ca:13:d7:16:a8:11:3e:
9b:36:f5:96:d5:a2:c2:1e:0a:90:f3:6d:08:cd:e1:
7a:3c:8e:1f:44:ea:d2:06:a0:ca:41:30:e8:e7:b1:
5b:70:b3:11:7f:b7:6d:99:48:f7:46:46:63:d7:fd:
65:46:3d:30:35:33:ec:f4:3b:fc:c4:e6:f2:ec:af:
7e:d1:e2:cc:95:78:bb:be:94:7b:83:6f:d7:40:1f:
e8:b6:cc:09:d1:cb:43:03:5a:d7:57:66:7b:c8:92:
02:ee:20:fb:9d:16:8d:6c:83:4a:ba:92:db:88:2e:
fe:7b:cd:cf:16:42:eb:04:65:df:92:f6:04:3c:61:
ec:92:51:c8:d1:11:2f:e2:78:bf:8e:4d:0a:cd:77:
37:be:a8:72:a3:98:4e:32:a8:8a:31:af:8b:78:8b:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1F:B4:25:16:90:E8:66:B1:31:9D:04:CA:C6:DF:55:4C:1F:35:B4
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a6:4b:4e:ad:39:8c:dc:9c:1d:2f:3e:3e:bf:bf:44:c7:a7:
3d:b0:41:92:da:89:c9:ba:83:5d:71:42:5a:b1:a2:90:93:2a:
65:eb:49:7f:97:94:c8:57:6c:f0:49:ac:b3:be:74:99:66:7d:
17:a8:0c:05:ee:d5:2c:4a:f0:2c:d5:f3:6a:ba:50:a2:9c:64:
ad:9f:c8:db:11:f8:5f:c3:f7:d1:d3:d9:ec:fa:e8:74:be:5b:
cb:dd:a0:50:41:df:dc:7b:76:8a:ed:79:e3:5c:4c:86:0f:f9:
27:62:8f:ad:76:9f:9c:0b:d6:17:78:46:a2:a8:70:26:7e:0a:
58:27:8b:46:e2:ba:9a:1a:6f:2e:bd:bd:3d:45:e1:ee:c3:60:
2c:bb:02:72:ae:1c:a7:86:d1:f7:a9:ba:c2:07:84:f0:f9:a4:
83:fa:e2:23:cb:88:e4:d5:d7:99:d7:db:14:78:ce:2c:5a:e5:
85:3b:f2:c5:ea:a6:00:9f:68:60:b9:94:43:3b:c0:3e:5f:84:
04:03:07:28:e9:a0:d3:49:1d:c1:8d:c5:63:e0:a0:20:21:65:
f3:0a:23:45:f8:eb:44:cd:8c:02:26:ab:5d:99:fc:b6:84:50:
8f:41:b8:63:41:80:a6:22:e1:66:8d:fa:60:67:ff:48:ec:a1:
93:d9:cb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:42 2025 by rpki-client