Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
File: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft (raw, json)
Hash identifier: lzJCh27dnOeda4us3T41HuOT1oTbSZJrQ/4V3uUTqiE=
Subject key identifier: D0:08:5F:F1:0C:37:22:21:9A:19:49:B6:EA:B1:D4:7B:AE:A2:F0:F3
Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
Certificate issuer: /CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Certificate serial: 019654C9EA56524D370A5E6C982E474A7EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
Manifest number: 0F93
Signing time: Sun 20 Apr 2025 20:00:40 +0000
Manifest this update: Sun 20 Apr 2025 20:00:40 +0000
Manifest next update: Mon 21 Apr 2025 20:00:40 +0000
Files and hashes: 1: JscmxGl_L2E7JnV0mfv32RHUpNw.roa (hash: 8j6EFW05T3ckFd0k6CAkZlDvS05KieVcVNbYKlWGlos=)
2: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl (hash: VgbAPojR27O+rfQKF3K6xDvJEvmnZQ15VrsrwzLYwXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:ea:56:52:4d:37:0a:5e:6c:98:2e:47:4a:7e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Validity
Not Before: Apr 20 20:00:40 2025 GMT
Not After : Apr 21 20:00:40 2025 GMT
Subject: CN=d0085ff10c3722219a1949b6eab1d47baea2f0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:6e:27:38:d1:e1:44:1b:2b:f4:f1:73:d2:
58:5c:a3:fe:e9:fc:8e:2f:75:4c:4a:14:0f:69:e3:
5f:ed:db:71:dc:70:fe:a8:fa:24:1a:cb:0f:f2:d2:
a5:25:59:e3:03:a2:10:cd:03:ce:13:da:c1:54:da:
db:7a:53:e4:5d:bd:5a:77:20:3c:e8:57:a5:23:7a:
4e:f5:13:28:a9:08:17:13:69:2a:1e:2a:6a:a5:cf:
f1:34:7f:48:4d:69:2a:71:f7:cf:3a:7a:7c:59:cb:
be:b0:06:05:e2:84:ce:71:b2:d6:11:fa:f6:66:65:
94:b5:01:aa:9f:1e:cf:a8:8e:18:8d:b1:a2:0a:9b:
c7:df:13:a3:e0:eb:f2:73:8b:76:a0:57:ea:35:66:
05:09:6d:10:11:05:d3:e2:b0:0b:04:ea:6e:56:b3:
94:c1:5a:fe:c7:ba:c1:d3:20:7f:cd:a7:5f:c7:47:
df:5b:49:54:42:d2:6f:6c:e9:7f:f2:39:a3:71:a1:
ed:7b:f3:a8:86:a6:22:7c:f1:15:08:f7:66:fb:1c:
f3:a8:83:43:81:61:e0:c2:9f:10:da:3a:7a:1b:0e:
82:50:4f:b3:dd:09:67:e9:9a:6b:7e:48:7f:15:bb:
4a:19:e0:c8:99:3b:08:d3:eb:26:23:b0:5c:da:af:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:08:5F:F1:0C:37:22:21:9A:19:49:B6:EA:B1:D4:7B:AE:A2:F0:F3
X509v3 Authority Key Identifier:
keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:07:49:19:81:e1:2d:6b:9e:8b:37:67:04:06:07:0b:a9:4e:
19:0e:16:8c:0b:84:69:3d:1c:13:70:a4:7e:83:83:9f:59:17:
ad:10:01:65:2d:18:7c:c6:55:19:60:74:64:f0:90:79:5d:91:
67:b5:8e:0a:05:ae:34:f4:97:8c:e8:47:2f:48:b9:9d:b1:16:
2d:e3:9d:7c:5d:1f:dc:80:57:9d:89:b8:25:6a:3b:93:ca:d6:
73:56:0e:d0:b7:2b:26:6a:28:5b:bf:7e:ac:2d:26:12:98:f2:
ca:77:f5:80:1d:b0:1f:d7:27:89:69:a1:a1:29:b1:ee:f0:01:
3e:06:01:f1:b8:88:b8:22:69:bd:2e:11:b9:d3:a7:d7:63:65:
48:6e:5d:a0:8a:3b:de:a4:80:2f:15:03:4a:e8:60:c2:be:09:
11:8a:9e:0d:a6:c8:f6:34:0d:6c:01:16:8d:e0:2b:6c:a0:4f:
80:26:34:d9:67:b0:42:65:43:3b:f7:62:1e:71:c5:41:77:9f:
2a:81:fb:a1:a3:de:b1:7d:b9:71:a4:e8:b3:9e:a4:e5:e1:5f:
cc:a3:f9:e7:ad:3d:7c:61:47:29:b3:5f:be:6c:f7:42:95:0c:
6d:d7:0e:ff:c9:cf:40:9f:8a:f5:64:ba:2c:88:ea:e2:23:97:
26:c4:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:42:33 2025 by rpki-client