Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: LTw3S9FVV9+pCZqSS7wD2BLlzvVLY9CfyUxrEZebdOU=
Subject key identifier: 8A:CC:80:51:CB:34:A7:4A:9F:A8:D0:3E:3F:9C:64:EC:BC:89:1E:3A
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 01960F44BB68AFF454AFE42245D3FC83BF99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 13E6
Signing time: Mon 07 Apr 2025 08:01:24 +0000
Manifest this update: Mon 07 Apr 2025 08:01:24 +0000
Manifest next update: Tue 08 Apr 2025 08:01:24 +0000
Files and hashes: 1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=)
2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=)
3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: u/fy1cNkGOE6jJFlb4qonWOvySCosBl8+PxvNgrPxL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:44:bb:68:af:f4:54:af:e4:22:45:d3:fc:83:bf:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Apr 7 08:01:24 2025 GMT
Not After : Apr 8 08:01:24 2025 GMT
Subject: CN=8acc8051cb34a74a9fa8d03e3f9c64ecbc891e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:6b:48:f4:43:7b:e0:5d:8a:34:b0:94:44:
81:54:94:40:37:9f:ce:26:b8:f9:90:fd:f9:a5:a2:
51:f2:13:81:eb:d6:fb:43:ca:0d:aa:d7:79:01:46:
3c:89:77:9f:2e:1f:59:d7:e8:73:b0:0d:43:1f:b4:
1c:4a:09:54:64:ad:c4:ca:99:7d:f7:9a:0e:c5:ed:
7f:99:46:64:ba:68:8b:a3:79:49:cf:0d:36:9a:99:
f7:54:2a:20:35:3d:5b:8a:cc:8a:63:48:94:71:3c:
46:7c:68:20:56:d8:cc:85:08:6b:a4:00:31:7f:f0:
3e:5c:ea:2a:7c:40:cb:50:2c:4c:93:cc:21:67:8c:
5d:04:e3:6e:fa:63:61:7a:79:c2:35:c0:a0:d8:56:
da:ad:bd:13:17:70:d1:db:ad:c9:81:96:7a:c4:9e:
1c:1c:c0:5a:da:f1:da:29:f6:c4:06:5f:12:b2:9a:
4d:2e:54:9f:61:33:bf:1f:2e:aa:9f:37:39:ea:51:
70:97:8f:36:2e:dd:5f:d7:92:1d:76:5b:36:30:11:
bd:92:4c:e6:48:bd:cb:61:7e:21:1c:50:82:db:96:
de:34:f8:50:54:10:99:b6:57:a4:8b:91:ce:68:6e:
ed:4c:0d:4f:39:c2:9a:f9:98:1f:26:7a:0d:86:cf:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CC:80:51:CB:34:A7:4A:9F:A8:D0:3E:3F:9C:64:EC:BC:89:1E:3A
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ad:12:9c:b2:c2:f7:fb:a9:bf:22:a0:b2:c9:c6:2e:c0:bd:
50:da:46:24:70:b7:1f:94:8e:35:fa:c4:80:f4:15:28:07:05:
df:cf:83:82:29:52:66:01:99:82:68:e1:40:52:97:84:7f:e2:
10:39:3e:26:f4:8a:59:47:de:b4:b2:2e:32:ad:2f:2e:3c:73:
2d:f2:86:ff:bb:ec:5d:ec:92:12:e6:ea:dc:58:d4:be:44:49:
29:2b:95:bb:fc:bf:43:9e:63:17:9c:7e:00:ff:2a:3e:fa:9a:
2e:d3:76:3f:20:02:5c:6b:37:8f:93:10:3d:97:31:a9:08:4d:
b8:34:de:00:62:5b:2a:85:2e:33:14:50:6e:2d:8c:8c:69:88:
2a:e1:1b:77:2f:70:51:1a:17:e9:87:87:09:87:5e:e9:f3:b8:
8b:7d:ec:47:26:94:d3:40:e4:83:24:cb:fd:a6:cf:e4:75:b7:
d2:fd:6e:b1:5c:f5:b4:81:d3:6f:23:58:63:8f:b1:3c:73:db:
41:f9:29:61:7a:39:db:28:d0:d8:c4:16:f0:1e:67:04:77:17:
16:39:b4:05:b7:ec:6a:11:6a:39:bb:b1:41:74:f1:1d:4e:60:
ec:7f:41:d7:f1:08:03:f6:fb:f9:e6:2b:a3:85:34:7f:77:2d:
b1:1f:0a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:22:09 2025 by rpki-client