Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier: n5OmWqUD0l2Atpun92pJFGjylqX0rU36eNVNHiq8+U0=
Subject key identifier: 6D:6F:D8:24:94:8C:42:73:50:CA:8C:56:F5:60:86:E9:53:27:06:AF
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 01968058F4AF00718057FAA32945A1617F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number: 043D
Signing time: Tue 29 Apr 2025 07:00:35 +0000
Manifest this update: Tue 29 Apr 2025 07:00:35 +0000
Manifest next update: Wed 30 Apr 2025 07:00:35 +0000
Files and hashes: 1: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (hash: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=)
2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: pd+Ihk/KJblSKKxPiuDgM2Sd6iHtThd77zUwITic4KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:f4:af:00:71:80:57:fa:a3:29:45:a1:61:7f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Apr 29 07:00:35 2025 GMT
Not After : Apr 30 07:00:35 2025 GMT
Subject: CN=6d6fd824948c427350ca8c56f56086e9532706af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:4b:d9:de:a3:19:f6:20:f9:b1:f8:96:3a:
c7:f1:8f:84:53:fd:e7:d6:02:ff:54:2c:63:23:c2:
c8:1f:0e:1f:fa:0a:4e:63:88:12:85:e4:bf:78:9e:
c1:4d:bf:ff:63:35:52:29:46:11:5e:4e:59:04:95:
f7:75:09:40:65:0a:e9:bd:56:46:5e:85:55:25:6e:
89:90:89:46:67:be:93:f9:f8:49:7a:6e:16:1b:e2:
ac:cc:88:fb:eb:b9:35:ac:f2:b1:bf:12:d4:38:65:
b5:98:4f:57:7a:83:3c:a3:c5:f2:82:09:28:73:5e:
a6:bb:a8:ee:6a:9a:01:41:02:95:5c:41:fd:58:19:
31:29:92:a8:09:74:55:2d:91:d6:66:74:b2:f5:29:
53:6e:6f:92:d7:cd:2a:10:9e:67:87:57:b1:a6:3a:
6b:46:ab:e8:ce:f0:74:fa:49:56:ee:92:ef:f6:82:
90:c3:82:eb:11:c5:8d:86:96:a3:8b:aa:78:0e:05:
97:d7:43:17:87:da:bb:c1:c1:25:ce:33:22:e3:a9:
88:77:c9:ea:e3:43:36:d7:d3:a6:39:4a:92:4b:01:
6a:90:c4:14:b1:f0:d2:0d:0d:f6:c8:7b:70:12:62:
58:d9:72:69:cb:21:a6:98:e1:01:f1:52:27:74:79:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:D8:24:94:8C:42:73:50:CA:8C:56:F5:60:86:E9:53:27:06:AF
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ae:84:71:3a:20:af:19:d0:ae:b7:77:36:c4:41:8c:cd:20:
65:5e:ca:30:cf:b4:b7:6f:5a:06:e8:8d:57:2c:a3:72:ec:7e:
30:06:91:e3:21:bb:88:98:23:c2:f1:17:95:b4:bc:c6:b1:b5:
7f:7e:0f:67:a6:87:b8:23:d2:49:3d:6e:46:3f:03:0c:fa:da:
ee:43:83:aa:37:58:d8:8b:8c:e3:b7:6f:e8:43:7e:69:de:86:
e7:6f:61:55:92:ba:cf:fd:69:38:98:11:a8:07:b3:75:ae:81:
2b:7a:c4:b3:a5:46:e1:77:a8:31:38:81:04:7c:07:48:0c:68:
3a:eb:e5:ca:88:ca:ae:78:e8:f0:f3:4b:71:2b:b2:f5:1a:ec:
52:4f:3c:1d:11:1c:7a:03:47:f3:27:fc:f6:ff:d2:01:57:f9:
2f:83:45:8e:ef:0e:e6:4f:1b:01:91:64:3b:9c:7f:97:6c:da:
49:49:87:c9:fb:95:53:54:8c:2d:dc:40:35:e0:72:18:6a:91:
00:55:c4:77:1b:54:8e:bc:e1:46:50:29:d7:47:6a:dd:e9:e6:
1c:8f:5c:4f:4f:e7:50:b9:67:dc:c6:23:f3:01:94:b0:13:25:
b6:6f:69:fe:ab:fb:06:74:de:fb:59:85:3a:71:d4:5d:86:26:
c4:96:7a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:36:12 2025 by rpki-client