Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: vUINUW4PcehKz8ROUHBtngwyDErp0Q7p+bVjcqWd4Vk=
Subject key identifier: F1:63:5C:9D:C0:5E:44:53:E2:89:65:EB:91:5A:C4:74:F2:06:95:93
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 019647E9BAFCBE1A22A20FA1224F7F9CE05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 0CEC
Signing time: Fri 18 Apr 2025 08:00:22 +0000
Manifest this update: Fri 18 Apr 2025 08:00:22 +0000
Manifest next update: Sat 19 Apr 2025 08:00:22 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: Bkv7zFC9HnOYnmyyq9Quxjs8WJuLMJOe8a1iWZQdf1Q=)
2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:e9:ba:fc:be:1a:22:a2:0f:a1:22:4f:7f:9c:e0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Apr 18 08:00:22 2025 GMT
Not After : Apr 19 08:00:22 2025 GMT
Subject: CN=f1635c9dc05e4453e28965eb915ac474f2069593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:63:b2:b6:71:39:de:86:0f:d5:11:ad:4e:
e6:71:31:f2:a1:43:5a:aa:32:75:fc:7a:a1:cc:06:
23:13:db:1f:7b:35:31:fe:fb:eb:c2:1d:eb:c2:ba:
e2:43:3d:90:00:9a:52:0e:d4:58:40:27:23:ce:ce:
06:2c:57:f0:85:5e:5a:eb:e0:5f:5d:c2:61:9c:fe:
c4:ab:6b:4c:e5:cc:3d:2b:22:3a:5c:f2:13:4a:4c:
ba:2e:f8:44:d7:04:56:18:93:c6:9f:b8:a0:8b:9f:
39:98:97:d3:f2:d5:34:dd:87:9f:b3:a7:1b:82:55:
cf:45:63:de:f0:8a:41:e4:b3:e0:41:39:1c:dc:1d:
00:46:cb:ca:de:98:31:fd:57:59:8b:82:88:b0:32:
ca:be:b7:13:87:83:2d:41:7c:1d:d5:e0:0f:7e:4d:
14:2c:f9:73:aa:a7:1c:06:1d:a7:db:70:8e:4e:da:
ac:20:6f:ec:2b:5e:82:76:e0:0e:32:68:bf:80:12:
1e:fd:d7:ac:89:9c:f8:1c:7d:30:a8:80:7a:97:2c:
b1:f1:96:c8:61:0b:99:2a:25:18:65:b7:2d:20:c7:
5d:32:d8:c6:1f:f4:cb:a9:df:a6:66:7c:5c:3a:9e:
f4:06:54:84:20:d7:52:0a:e4:51:6f:e8:14:88:27:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:63:5C:9D:C0:5E:44:53:E2:89:65:EB:91:5A:C4:74:F2:06:95:93
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:97:a4:8b:f7:63:ef:2e:74:86:cd:e4:80:f8:12:8f:b2:c4:
43:8c:94:17:0e:79:fa:cc:43:66:6f:e3:65:9f:30:27:67:2c:
55:7c:5c:c9:ed:8a:45:0d:b5:06:44:85:24:bb:d4:f6:81:c4:
bb:ad:9e:b2:55:d4:ae:a3:36:d5:c7:88:8a:aa:2a:b9:cc:44:
23:1c:b5:19:6a:87:42:fe:59:38:60:87:c0:2c:ba:2e:b0:75:
72:63:a8:6e:2e:e1:c4:1c:de:2a:d3:ed:d6:f7:f6:ff:93:c4:
03:40:ba:10:e8:d3:4c:03:78:37:2e:51:8c:5c:eb:f8:92:5e:
a8:02:c9:5f:74:3b:91:60:1a:45:3e:84:79:ea:6f:c8:5a:a5:
62:50:34:24:fd:34:de:7f:4f:2a:7b:42:fb:3c:1a:2d:c3:9f:
53:9c:7d:d2:c4:29:1a:a4:30:a2:26:ae:34:84:6f:df:77:f8:
83:80:21:14:d9:26:c2:69:4f:32:6c:4f:cc:04:c0:cc:39:10:
3b:f2:0d:84:1a:4a:9a:82:c2:fe:02:bf:3c:e2:26:85:8e:a3:
d5:04:e6:93:9a:83:5e:bd:81:c5:0e:0a:c3:7a:08:1c:2c:16:
17:bf:18:c7:cc:cb:14:f2:df:63:d4:42:52:a9:0d:93:3d:69:
ae:51:ef:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:26:22 2025 by rpki-client