Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
File: NLFHrBz3fVyPsq90-tO3O10TeyY.mft (raw, json)
Hash identifier: 2d/lnrlsbqni6dIdml6l2a4Cj5E2lT8VYy8p4XN7R2s=
Subject key identifier: D8:94:31:A9:BA:51:B5:61:7F:01:69:40:F1:E9:72:3D:0E:A4:D5:59
Authority key identifier: 34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
Certificate issuer: /CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Certificate serial: 019682EC21727222A49DC81FA99847223593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
Manifest number: A9
Signing time: Tue 29 Apr 2025 19:00:35 +0000
Manifest this update: Tue 29 Apr 2025 19:00:35 +0000
Manifest next update: Wed 30 Apr 2025 19:00:35 +0000
Files and hashes: 1: NLFHrBz3fVyPsq90-tO3O10TeyY.crl (hash: 3RPZOyG4p+GbD8jaSLNmTOAVaQFJnDi0FIeeUlw6KSs=)
2: THnq9fycftVoi9SRyG2RAgjh-xM.roa (hash: CvE6vZRBpMVjaRZR6SZYXH1U/C4JGawX5FU1BEkF3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:21:72:72:22:a4:9d:c8:1f:a9:98:47:22:35:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Validity
Not Before: Apr 29 19:00:35 2025 GMT
Not After : Apr 30 19:00:35 2025 GMT
Subject: CN=d89431a9ba51b5617f016940f1e9723d0ea4d559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:3d:ba:1a:ac:d1:48:1c:c2:da:06:1b:e7:
b2:04:33:df:ae:e5:e4:f4:75:52:81:65:c7:38:d7:
f9:7b:57:2f:b3:2c:c1:55:2b:90:6b:00:6f:df:f9:
5c:21:7c:fd:7a:d2:17:2c:c0:32:b2:4f:a7:7b:d4:
a9:eb:55:ad:d8:0d:c5:4a:59:0c:cb:1e:6e:00:a8:
ff:e0:ed:d8:00:d6:14:59:10:11:31:1d:16:e5:30:
cf:7e:8f:34:a5:5f:2c:f4:ae:b3:58:86:05:65:5d:
d4:d3:82:e3:ae:0e:02:44:a3:58:bb:bd:26:a0:a3:
33:a4:24:1a:79:93:e6:05:fc:66:d0:c8:b7:8e:06:
b0:9b:fd:4e:b0:57:e7:ce:74:2a:6e:4a:50:b1:23:
5c:8a:96:df:87:be:04:8f:46:11:ba:bb:0c:20:8c:
77:4a:51:26:97:55:8a:16:d8:c7:75:e9:4f:6e:21:
f3:25:36:3b:e2:75:16:df:09:5a:a5:12:d5:dd:5e:
b6:ca:8a:a2:36:f9:a9:c2:d5:e3:4c:56:26:53:07:
cc:06:58:90:55:d0:06:e5:d9:2c:f1:6b:c8:7e:87:
fe:c9:a8:b0:67:1a:73:5a:cc:6c:56:18:f1:bc:fb:
5c:16:ae:59:54:04:2b:f3:c1:f9:de:32:e1:cb:2c:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:94:31:A9:BA:51:B5:61:7F:01:69:40:F1:E9:72:3D:0E:A4:D5:59
X509v3 Authority Key Identifier:
keyid:34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:68:ec:73:63:88:2b:73:67:63:ec:94:bf:6f:5f:75:6d:2c:
07:1e:67:a6:f9:d2:48:6e:a3:bc:e6:f6:eb:08:f3:a5:f1:52:
df:a6:b1:6d:57:6d:95:32:fd:19:16:a9:1d:5a:6c:89:d0:82:
08:ba:06:04:e6:15:19:27:bc:a1:b1:e7:08:f5:85:f8:3d:01:
a7:f1:8b:87:e8:85:18:bf:34:6a:8c:71:17:28:ff:c8:6c:ee:
19:3e:35:d1:71:f5:74:b1:74:d5:20:23:e6:57:23:9f:77:be:
ec:96:77:af:84:26:85:ea:31:3b:47:ac:a0:17:d3:b0:19:07:
50:7d:f4:01:ed:5a:46:05:15:0f:3e:13:ae:13:69:7d:60:70:
cb:9a:a7:ec:88:9b:fc:ef:eb:99:c4:3f:6a:a9:c8:09:b0:7c:
7a:a6:53:9e:35:b6:7b:30:e7:22:d7:29:14:d7:69:92:da:00:
43:5c:25:46:c6:a9:c0:bf:34:20:d9:a1:15:c8:7e:d9:3b:69:
a1:28:05:38:8b:98:02:af:3a:72:f3:40:21:ea:04:c5:49:bb:
c8:65:22:91:50:c9:5b:f8:86:0b:08:14:df:8e:79:1b:c4:2f:
fe:69:a4:f6:eb:ed:6a:25:bb:2c:1c:8a:ca:67:04:2e:93:08:
ca:de:d2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:58:48 2025 by rpki-client