Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json)
Hash identifier: Y//3zwzucODHU3ERGL2MAMDlb6d6aiT38b3EbKkoers=
Subject key identifier: 76:3C:0A:81:59:6F:2E:0D:41:1A:60:11:6D:EE:D6:B9:F5:29:C7:76
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 01965983032B4110268ED0019384E60CCBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
Manifest number: 045C
Signing time: Mon 21 Apr 2025 18:01:20 +0000
Manifest this update: Mon 21 Apr 2025 18:01:20 +0000
Manifest next update: Tue 22 Apr 2025 18:01:20 +0000
Files and hashes: 1: 1-lCQIu3wKSeUq2VrUD5tWenu5SY.roa (hash: uGVhG0epQ2wGofSbe1ShOYtQrordv9iVyPvHij3V4P4=)
2: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: y2z/CHhxfX6aQyYcqgtF/Ncl7AfyQYchv4wO/ZK/LLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:83:03:2b:41:10:26:8e:d0:01:93:84:e6:0c:cb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: Apr 21 18:01:20 2025 GMT
Not After : Apr 22 18:01:20 2025 GMT
Subject: CN=763c0a81596f2e0d411a60116deed6b9f529c776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:23:2d:89:f2:34:a8:d0:53:2b:26:27:6a:17:
9c:29:7f:9e:31:ee:e0:d0:e8:da:ed:23:77:a7:4b:
10:4b:d4:ca:6a:07:d8:33:1e:5b:85:f4:e7:e5:78:
42:de:6b:d6:f3:5f:fc:81:98:2b:58:c6:61:05:3b:
fd:f5:2d:c6:23:f3:9f:95:a7:e5:09:3a:31:31:9e:
df:b2:65:8c:71:53:03:cd:40:0e:67:7e:18:e6:3b:
9b:8e:2f:87:61:45:10:94:d2:04:6f:ba:b5:a4:1c:
50:06:78:d9:85:1d:fd:79:63:0d:3e:8f:25:d1:e9:
ac:9a:55:d2:a6:b7:a2:f0:6f:df:d8:63:e2:f9:00:
87:e4:93:ca:2d:64:3f:08:e9:81:e5:56:eb:be:ac:
0c:5b:3b:e8:9c:2a:02:05:11:66:54:f9:e6:f5:20:
35:23:0a:5e:2b:fe:99:20:70:6d:a2:9a:15:eb:8f:
f6:f6:24:f6:87:19:5c:4c:1e:77:16:d6:6a:7b:ec:
61:63:30:38:ed:18:82:22:80:43:f3:d0:94:dd:72:
91:4d:c3:94:6e:fb:f1:ee:d5:e1:10:cb:bf:ad:91:
ee:fa:f3:51:c7:c5:e8:41:64:95:f1:57:8b:21:bb:
6f:cf:ba:aa:ab:f8:9b:5f:86:76:aa:d3:fd:88:e5:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3C:0A:81:59:6F:2E:0D:41:1A:60:11:6D:EE:D6:B9:F5:29:C7:76
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:07:1b:70:62:f9:7e:cc:9f:9e:1e:d8:93:42:6e:2f:4e:99:
7c:62:a1:ba:00:cd:a7:6b:1c:b1:9d:8a:bf:78:42:2c:df:0c:
55:45:2b:eb:57:19:85:f8:4a:1a:19:ea:a8:26:55:f6:7d:eb:
ac:1f:ae:b3:44:57:fc:31:3a:8e:54:8b:a3:4d:50:f9:b1:64:
3b:a5:c5:b2:85:1c:19:33:db:73:03:e1:30:33:d3:f2:06:b0:
f8:41:9a:ae:31:58:a8:00:60:aa:9e:fa:c1:31:33:63:89:b1:
29:02:7e:3f:d4:59:14:5b:3d:4d:cc:88:8a:d9:12:88:2f:d5:
d5:7b:c2:39:c3:04:ef:23:1d:c4:90:4d:20:61:57:27:fa:43:
d9:b9:f5:b0:d6:8c:04:22:67:dc:fd:b0:9a:b8:17:f1:d3:1f:
36:c4:03:d2:78:5f:c7:46:1d:94:b8:e8:9e:a2:74:d8:0d:54:
c7:55:c4:c9:82:64:70:f0:29:7d:2c:8b:9c:0d:a3:7a:93:19:
58:08:7f:12:07:2e:49:ba:da:f3:28:0a:96:4a:d9:3b:bc:16:
20:74:78:bb:57:37:1d:98:95:9d:0f:c6:36:b0:e9:49:18:14:
65:5c:f0:c7:3b:e0:77:91:07:b4:28:aa:3e:8f:0b:83:da:c7:
f9:f8:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:20:41 2025 by rpki-client