Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier: QiuxBwTP7Ieu0NXh1c2EIHFVpAs63trbYqkeb/+HBYo=
Subject key identifier: AC:B7:06:EC:E1:EC:28:4B:DB:36:7A:1D:70:14:B7:AF:78:BD:4A:D4
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial: 0196575CDE46C3EC028C365252CE6E474E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number: 010F
Signing time: Mon 21 Apr 2025 08:00:26 +0000
Manifest this update: Mon 21 Apr 2025 08:00:26 +0000
Manifest next update: Tue 22 Apr 2025 08:00:26 +0000
Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: z8oyjdTc/zklnGc9WTgn+mDhCt+PgXWzNXDQNAeLB5I=)
2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:de:46:c3:ec:02:8c:36:52:52:ce:6e:47:4e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Validity
Not Before: Apr 21 08:00:26 2025 GMT
Not After : Apr 22 08:00:26 2025 GMT
Subject: CN=acb706ece1ec284bdb367a1d7014b7af78bd4ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:4c:df:56:99:b6:3c:e1:52:1f:cf:26:1a:
62:92:ed:0c:a9:73:b6:23:48:71:64:36:62:a6:09:
79:c1:81:2d:dd:e5:61:55:57:6f:dc:74:7d:4f:f2:
ac:62:f8:5a:b5:9b:26:9a:61:bf:0d:9d:ce:20:51:
8e:b3:b9:fc:35:19:e5:6b:1e:38:f0:83:12:51:9a:
47:b1:1c:36:54:54:e7:fc:24:2a:04:47:30:20:86:
a6:bb:d7:2b:55:65:32:c1:30:9e:df:46:78:39:2f:
86:aa:d6:c0:df:32:aa:04:9f:dc:6c:a8:61:41:fc:
16:b8:ff:fb:53:36:77:e2:45:d9:9d:33:4a:bf:1b:
4d:36:73:01:80:e6:98:6f:12:70:55:85:53:df:a9:
ce:da:bd:5f:2f:61:db:16:01:15:79:aa:6e:c4:97:
ed:4c:bc:a0:d5:76:77:f8:f8:40:ed:12:7d:85:0e:
2b:8d:fa:f9:5b:e8:ca:7d:93:7f:fd:21:b8:c1:d0:
53:c9:24:fc:2e:64:4e:76:bf:9b:9c:93:3c:d2:75:
a4:49:1d:9e:18:fe:14:41:e9:f1:c3:37:4f:a3:0b:
72:58:ee:bd:d1:d7:55:1a:6c:7d:d1:60:2b:5a:10:
f2:1c:00:12:73:fd:d4:67:bb:46:38:bf:fa:b3:e3:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B7:06:EC:E1:EC:28:4B:DB:36:7A:1D:70:14:B7:AF:78:BD:4A:D4
X509v3 Authority Key Identifier:
keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7e:c9:b5:d6:8e:2f:c5:39:da:1e:69:aa:e6:b1:76:c3:05:
f9:0a:2c:58:ba:ab:67:e8:50:11:2a:f4:13:22:dd:ec:5e:2e:
c4:d4:cd:4c:72:43:eb:58:b5:d8:87:a2:48:e9:cf:9a:63:99:
9c:28:4d:60:0f:27:65:80:1e:2a:39:5b:a5:b8:41:50:9b:b0:
c8:79:1d:10:bd:6d:d1:5b:f7:13:ab:ed:5d:4f:12:70:c3:fa:
3f:de:d9:73:a9:6f:19:04:e7:c0:36:e7:b5:40:29:ba:02:c5:
11:ee:4a:78:22:3a:c7:24:d4:ae:cc:bb:58:c6:51:88:aa:1d:
cc:ec:3f:10:89:1a:e2:c5:d7:ec:05:58:68:40:66:99:44:f9:
f2:06:61:8c:14:df:87:7a:c7:2e:8c:32:ed:ac:3f:a7:b0:89:
9b:8d:7d:ea:28:a5:a5:a3:35:44:3f:96:13:df:f3:55:77:2c:
bf:bc:1d:81:1e:d9:19:ee:18:c8:2e:f7:00:9e:05:f6:bf:2f:
64:74:1f:e8:15:93:53:c8:a8:45:b6:c2:2e:1d:53:1f:77:bf:
42:c0:c2:6b:4f:96:14:8c:fb:69:da:ec:04:76:40:04:b8:fc:
6d:7f:22:1c:31:09:03:46:07:44:9d:64:8e:e9:13:a6:5d:4a:
b9:31:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:13:16 2025 by rpki-client