Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
File: NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft (raw, json)
Hash identifier: SnjYyFf//vAEkxB1wr1iXGc92fR/MX89Z/J9CuFUQG0=
Subject key identifier: B6:A8:9A:2A:5D:4E:BB:27:93:40:8B:D3:EC:76:DD:0D:76:C2:79:91
Authority key identifier: 35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
Certificate issuer: /CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Certificate serial: 01965537BD8BA3619012B71C2074314D723B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
Manifest number: 07AC
Signing time: Sun 20 Apr 2025 22:00:38 +0000
Manifest this update: Sun 20 Apr 2025 22:00:38 +0000
Manifest next update: Mon 21 Apr 2025 22:00:38 +0000
Files and hashes: 1: NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl (hash: NRwdaTiYTzU1bpqA0eTDgi+98pl/LirD9nO67WsdKWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:bd:8b:a3:61:90:12:b7:1c:20:74:31:4d:72:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Validity
Not Before: Apr 20 22:00:38 2025 GMT
Not After : Apr 21 22:00:38 2025 GMT
Subject: CN=b6a89a2a5d4ebb2793408bd3ec76dd0d76c27991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:bf:21:5f:1d:7d:d6:f8:a6:a2:78:a8:a6:
a4:e5:ce:9e:ef:e1:a8:1c:a8:ad:67:75:c8:08:f3:
18:df:63:48:05:90:a4:c9:78:67:55:75:39:69:5e:
be:e1:e8:e2:47:03:50:62:a2:52:be:e5:93:de:df:
43:dd:19:18:52:b8:4f:18:38:f4:7f:37:04:98:fd:
24:2c:dc:2a:06:0c:14:a7:c3:29:fd:48:36:d5:e9:
6c:bf:3e:6d:bd:ff:aa:a3:6c:e2:b4:7f:a0:5a:cc:
49:e1:a3:03:01:da:75:3f:5c:d3:54:3c:53:19:29:
50:4a:79:a3:37:98:34:8a:63:f1:ab:b1:dd:75:0b:
4e:94:18:f2:fc:9b:82:d6:ca:55:08:51:2b:49:7c:
ae:79:d9:61:85:8c:c1:f1:dc:22:44:c6:76:ea:09:
9d:e5:9c:a2:c3:23:68:b9:46:f3:0e:0d:e2:50:61:
4e:ba:e7:79:2d:7d:a1:32:cc:b6:b1:ec:db:f5:b2:
f3:59:8a:7f:92:23:99:35:16:f3:7a:3a:f1:78:5d:
99:ba:37:9c:06:af:55:c5:2e:2e:bf:66:8e:9a:23:
e7:af:41:2a:b6:e1:ed:6c:70:df:35:b0:d8:37:34:
49:61:60:c7:15:78:f4:e3:27:e3:ae:44:f6:1e:22:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:9A:2A:5D:4E:BB:27:93:40:8B:D3:EC:76:DD:0D:76:C2:79:91
X509v3 Authority Key Identifier:
keyid:35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3f:bf:ea:17:33:e2:4f:33:a1:39:bb:a3:25:b4:dd:0e:38:
76:a5:40:ee:15:75:b5:b6:5d:74:fc:17:87:98:db:15:2c:3a:
3a:48:ca:34:09:03:98:89:df:66:b0:d8:c1:33:2b:8d:c0:28:
9c:e1:0a:ba:38:25:b3:6f:c9:2d:c1:f6:ae:02:12:18:57:2f:
dd:c4:41:03:9c:e1:ad:d9:4f:8d:c9:2c:0c:0a:d6:ec:b8:fe:
cc:76:e4:a8:fa:79:1d:68:35:bc:ae:e2:b3:48:31:ad:3b:c6:
5c:cc:37:98:31:e1:28:3e:2c:e0:e2:fc:ac:17:ee:d2:12:4b:
dc:c0:71:0a:ce:cd:2a:b5:72:4f:9f:d8:b8:1e:c8:9d:41:e2:
a6:f8:a3:b2:f7:e3:6e:aa:34:c7:ac:9e:59:38:88:46:d0:35:
a8:32:39:da:d6:14:76:1b:49:b3:0d:bf:09:56:54:81:cb:9a:
2f:8d:a3:b5:80:6a:04:5d:ef:39:61:ce:c0:dc:b8:60:2b:4b:
cc:c1:55:4d:35:7a:20:0e:ca:8c:3c:dc:51:59:78:cf:d3:81:
99:07:ab:e6:65:60:1d:d1:fa:19:39:ad:4b:6d:14:e1:06:bb:
b6:cd:be:fc:19:48:f2:35:11:2d:69:f4:c2:4e:a8:59:96:f9:
03:e1:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:59 2025 by rpki-client