Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: tq5sQZ77btOtT+Dwp5CHiKJEF+IFtJ1iP4pz2Q5uJPw=
Subject key identifier: 3F:02:6A:E6:47:1C:54:A6:59:70:A8:BF:6E:1F:31:C2:B7:D2:42:46
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 019687DB761D6C9EFB244EAEAE1DD815616D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 0BC2
Signing time: Wed 30 Apr 2025 18:00:28 +0000
Manifest this update: Wed 30 Apr 2025 18:00:28 +0000
Manifest next update: Thu 01 May 2025 18:00:28 +0000
Files and hashes: 1: FEZEft80jliOlkGyEwySyBAkmWo.roa (hash: WK/TRHiffo4AU+bk5eHbjtuUsofDcjiz4uFJQmb9AMI=)
2: ish4NG6w0suFxadmLrSJLkxjTIQ.roa (hash: SxPMOYIhwaAgOQuSwCZyhiBxyzhniVTSwZchO8Jy+js=)
3: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: n8L51+2W7EV3Fe0bgjJb+KVYAdmK2uVJ2YhcnYZOwf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:76:1d:6c:9e:fb:24:4e:ae:ae:1d:d8:15:61:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Apr 30 18:00:28 2025 GMT
Not After : May 1 18:00:28 2025 GMT
Subject: CN=3f026ae6471c54a65970a8bf6e1f31c2b7d24246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cf:2a:62:00:58:51:55:9a:04:79:f5:c1:00:
49:47:3f:2a:e3:69:bf:68:e2:f0:a4:ea:28:1f:ed:
1a:38:ed:b1:e0:d8:74:ae:4a:f1:ba:b2:73:03:a2:
13:45:8f:6d:0e:d6:1c:72:4a:3b:7b:94:e3:19:2c:
e4:f1:44:52:98:7e:ad:03:94:61:2f:d1:a9:8e:74:
f8:77:88:43:bc:9d:d8:a7:bf:d3:3e:c4:1a:9f:e9:
95:12:4f:18:aa:b8:b9:ad:3c:c0:37:93:2e:ec:be:
68:dd:4d:60:b0:24:27:0e:f1:19:0e:96:e0:c2:e0:
42:49:6f:21:e8:af:42:de:06:5a:88:66:8e:3a:3f:
41:78:5b:67:d3:a2:78:d1:2c:ea:98:e6:6d:b3:65:
39:4a:d0:24:c6:62:00:91:2b:df:d1:1d:61:64:23:
df:bf:49:e4:3b:90:4c:07:74:7e:92:80:43:c4:65:
d3:bb:85:3b:a3:49:f3:cd:fb:88:22:d8:83:a7:61:
77:ec:2f:b0:33:b1:b7:24:6f:45:1f:07:7a:24:6a:
63:73:4e:1c:f0:27:26:08:7d:a4:ee:fd:c3:0e:79:
da:ae:a4:ee:87:04:e0:29:50:85:69:e2:87:5c:8f:
2f:23:84:da:af:84:73:2b:8d:05:e8:c4:c7:da:66:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:02:6A:E6:47:1C:54:A6:59:70:A8:BF:6E:1F:31:C2:B7:D2:42:46
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:32:7b:6d:82:94:d2:89:0e:ed:4a:89:4e:8b:2f:55:07:8d:
98:97:95:31:f1:a9:0d:a7:fa:77:4f:31:16:0c:dd:04:a3:9c:
ff:af:23:c0:2f:b6:e9:5d:c6:48:ea:b9:24:e5:1c:6d:ea:0e:
26:a3:43:bb:fa:4d:87:81:2a:27:86:a2:5f:70:5f:24:63:1d:
44:92:27:bb:e1:46:cb:6f:42:b8:be:a2:6f:b2:a4:81:2e:c7:
06:43:ac:18:37:37:80:27:1b:ef:83:82:b8:a1:fb:3d:e1:72:
66:e4:6a:3e:f8:c9:81:49:6b:0b:92:ad:1f:38:c8:e4:f5:df:
7e:a3:fe:3d:e5:5a:38:53:1b:61:a5:51:be:25:f6:3d:a9:92:
18:83:1b:16:d5:5d:90:63:45:0f:c0:d4:34:9e:66:c7:8d:c0:
a8:60:1e:6f:58:98:78:f9:4f:3e:12:98:27:89:63:e8:4f:94:
90:90:3e:2c:d0:21:c2:20:1a:aa:14:38:af:07:1f:83:09:ed:
cf:38:bd:9a:ed:21:bb:8a:cc:5a:06:58:90:99:04:93:89:19:
20:7b:d8:ca:1d:93:14:4a:04:ec:ef:a2:25:54:11:72:0e:ea:
ad:89:17:19:7a:10:3c:7b:2f:ee:db:2a:b5:56:b0:cb:59:5c:
b3:bf:c0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:48:40 2025 by rpki-client