Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File: NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier: CSXqhkmpn9loIy5DoiIFH9OioIadkaGSB08d/PZG8lc=
Subject key identifier: 8A:2F:31:16:C7:F1:24:3F:3D:5E:6F:E2:83:A8:93:88:73:2C:06:37
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial: 019656B8157320690F26C30B0E25D2F8BA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 05:00:26 +0000
Manifest this update: Mon 21 Apr 2025 05:00:26 +0000
Manifest next update: Tue 22 Apr 2025 05:00:26 +0000
Files and hashes: 1: EeFPhEstvW1EwmoMEs09YH1cZlE.roa (hash: zuogsczPuVIDLnfiQ5YgxbbQeRIuIE6FvsJkQLHPGfI=)
2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: pXCRXtoF3lHdnTkauH+ibz/Ex9Wex66/VmK0wdypaAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:15:73:20:69:0f:26:c3:0b:0e:25:d2:f8:ba:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Validity
Not Before: Apr 21 05:00:26 2025 GMT
Not After : Apr 22 05:00:26 2025 GMT
Subject: CN=8a2f3116c7f1243f3d5e6fe283a89388732c0637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c9:a1:7e:6a:55:7b:95:43:f7:af:03:6b:c8:
98:39:25:0e:32:9a:26:a9:c6:c7:fe:a2:ed:fb:e3:
12:16:26:11:58:6b:cd:3a:ff:d2:ab:a6:cd:8f:10:
fa:56:88:a3:cf:28:b0:00:31:91:08:15:04:02:b4:
44:73:3f:11:34:12:f6:a9:82:07:2c:28:85:b7:1c:
4f:fd:bd:49:52:6b:d7:7c:70:73:bb:6a:49:64:45:
ab:ec:7f:34:08:b4:7d:c4:66:79:ca:aa:70:0b:8b:
5f:be:a0:75:89:3c:d1:0e:8c:1a:29:ae:00:59:c9:
fc:77:9a:e1:6b:1c:38:ec:77:92:9f:9e:67:46:70:
0f:9a:22:df:64:63:d3:80:6f:a0:dc:58:c9:f4:22:
01:89:9f:d0:92:9e:6d:1d:5d:de:85:b0:0e:55:14:
7c:7a:4c:3b:ba:ab:d1:9c:3c:99:d3:76:03:cf:c3:
fd:ec:72:de:47:9a:66:eb:94:50:60:08:ce:b8:d6:
2d:f5:f7:92:4d:22:e7:76:41:20:3d:4b:91:f1:f7:
e0:ba:3a:98:10:fe:6f:94:56:4b:41:d3:f0:62:1e:
75:0e:dc:ac:01:28:8c:50:7c:d1:4f:d4:7d:3e:c2:
a4:6d:50:0e:93:a4:d5:42:e7:d3:91:4d:22:bd:d3:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2F:31:16:C7:F1:24:3F:3D:5E:6F:E2:83:A8:93:88:73:2C:06:37
X509v3 Authority Key Identifier:
keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bc:3e:98:9d:fd:33:ce:c0:a7:7e:da:14:67:4b:ba:4d:d0:
7f:7c:5e:d1:68:51:cd:ca:0c:f2:9f:d4:28:42:40:c2:72:93:
b3:90:14:1f:05:67:23:5f:a4:17:03:7f:ad:87:b4:7a:99:fd:
55:08:d9:7b:95:ce:e1:19:4d:50:b5:31:b4:26:dd:b7:e3:ca:
d8:db:19:57:b5:75:bb:22:fa:4e:8b:d6:6b:3d:5e:b1:56:73:
fc:84:29:46:70:bd:66:2c:b0:29:1a:92:02:ed:5c:96:00:5f:
06:7a:ef:4c:46:b9:1e:95:a8:33:f7:b4:f9:45:14:e3:bd:b8:
42:8b:7b:f4:d6:05:24:e9:0b:eb:81:be:1d:63:a7:c6:84:15:
c6:b6:fa:8d:ed:12:50:37:b0:bf:e2:e8:67:6a:fe:00:43:f4:
a2:45:95:cb:52:5d:36:fa:4c:d0:55:ec:6f:ac:af:72:de:05:
11:31:cc:6b:cb:3c:d9:1d:45:55:7f:7e:65:70:de:39:1a:25:
11:fc:6b:36:bb:97:25:2d:22:e7:78:a4:9b:99:90:d8:55:05:
be:52:33:02:71:db:f0:ec:00:37:9f:53:15:22:01:31:a1:1a:
4f:90:53:45:b3:fe:9e:90:f1:1d:4a:67:f4:51:1a:d4:09:cf:
33:81:30:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:19 2025 by rpki-client