Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: 2CxA9OHUKuWXi521byXPpBamb/cNgqJngiL8NsJG0GA=
Subject key identifier: 18:14:F6:9A:32:D2:2E:A3:BA:02:B4:91:20:9C:1D:70:07:BC:71:F7
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 019672300F3D98D1CEC8322464E51BDBB0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 144C
Signing time: Sat 26 Apr 2025 13:01:14 +0000
Manifest this update: Sat 26 Apr 2025 13:01:14 +0000
Manifest next update: Sun 27 Apr 2025 13:01:14 +0000
Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=)
2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: NG/ZhueGxozgz4kHe4WMy2SBQiDSWdq+9DUrqW4eE3c=)
3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:30:0f:3d:98:d1:ce:c8:32:24:64:e5:1b:db:b0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Apr 26 13:01:14 2025 GMT
Not After : Apr 27 13:01:14 2025 GMT
Subject: CN=1814f69a32d22ea3ba02b491209c1d7007bc71f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:c0:4a:bb:ea:41:d4:53:43:5b:55:27:2d:
99:2d:11:98:9d:53:06:53:46:44:55:1c:d8:1d:b5:
7d:90:e8:c9:45:f1:dc:94:19:12:71:4a:3c:ac:96:
e4:38:e3:b8:71:fd:9d:e8:7a:eb:43:5f:98:bf:e6:
c2:77:38:6b:f2:a6:ee:6b:ce:eb:a8:25:62:d2:56:
b9:93:8f:b8:7d:d4:8a:e6:be:84:a8:9b:17:8a:ab:
49:13:b6:44:d2:13:36:bf:84:87:d5:95:f2:38:be:
93:01:0a:d5:32:ff:87:11:3e:30:02:6c:1e:4f:4c:
d8:1c:ee:8c:61:74:3a:c9:b8:cf:0b:6b:2e:77:99:
c7:b8:c0:76:8d:6a:73:96:ef:d7:f5:a0:7d:72:c2:
ad:c8:57:40:6b:69:1a:87:57:0f:f5:50:65:ba:c2:
fd:f5:ba:e2:7b:27:8c:4e:b8:d0:f7:28:83:9b:0e:
45:30:35:54:d1:10:0e:66:26:b4:6c:69:b0:28:65:
ce:d8:20:28:a8:b3:ef:86:70:fa:fe:99:f6:e5:79:
44:a3:5d:5c:33:9f:e2:02:4e:99:d7:15:d2:37:0a:
e1:3c:a7:00:63:09:3d:bd:4e:2e:12:c5:15:4d:67:
3b:96:d6:c5:70:30:0a:5c:7d:36:05:3b:ac:1e:98:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:F6:9A:32:D2:2E:A3:BA:02:B4:91:20:9C:1D:70:07:BC:71:F7
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b1:30:07:74:35:25:b5:f5:89:43:97:b2:49:45:a4:e3:36:
6d:a4:d6:b7:bc:cd:5d:59:95:36:53:2b:a2:aa:5c:54:4d:e8:
e9:cc:91:55:5e:45:96:7b:e9:8c:aa:00:03:3f:02:d4:68:84:
d3:fd:c1:34:b7:c8:6f:8b:22:64:01:ca:e1:a6:ac:57:1b:f5:
99:74:51:32:29:dd:c1:8a:39:3d:4f:b0:42:d4:74:60:de:d5:
c5:bf:0f:2d:cc:17:85:11:07:7b:42:e7:d4:51:d9:71:07:9f:
4a:92:8d:5a:2d:cf:9e:3b:c7:a8:a9:59:cb:23:15:fc:39:e0:
7b:6a:fd:04:8b:b0:06:81:3f:56:51:98:d5:5b:a7:49:26:d3:
67:3d:62:20:00:7e:84:03:47:16:5f:63:a2:a0:3f:53:fe:f1:
b3:ca:d0:bd:53:d2:fd:15:da:a2:85:5b:6d:12:55:8f:a9:38:
1e:32:54:b3:74:89:97:b8:e6:ad:d1:5b:4f:fa:7a:6a:b1:59:
97:4d:a2:67:1d:40:c5:a2:c4:a0:49:3e:d6:27:ca:d7:69:ea:
5c:f8:b4:4f:12:32:d7:ec:2f:4a:d0:21:3b:32:46:8d:e0:b6:
7b:39:43:9e:c4:e6:05:70:49:dc:9f:33:9f:58:83:25:1b:5d:
6f:6d:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:09:12 2025 by rpki-client