Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json)
Hash identifier: 146WwKhcYUOuhd9EAI1qhnB4YxZ4f+3J4yqmdjpQnoU=
Subject key identifier: 70:09:C0:B1:64:BA:7A:CD:29:A2:8A:BC:A4:89:1A:85:82:10:49:41
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 019644B1F391A72CFD337FF9DBB15389829D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 17:00:34 +0000
Manifest this update: Thu 17 Apr 2025 17:00:34 +0000
Manifest next update: Fri 18 Apr 2025 17:00:34 +0000
Files and hashes: 1: 44PWl9t-VK2hhZNHr5AmomvoGFc.roa (hash: OxQ7QHN27yQWahrAlORJzxbYRAyj5Alk9/N2TAEqxrY=)
2: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: +nw0paYpyBPR/AHbz/1ERcDqKISpH7KZpmdIxWaOOg0=)
3: fHM2AB9lWMdrr6W98wCcBfFFZto.roa (hash: O5xk5dJ9bNLjoHECEnZnVJ7Que2qp5xFQYolbd9r+sI=)
4: yGyQiv41kYE21uqhtuih0OLSi9I.roa (hash: tdu5vnXKQDyjaj/70REfOS/T9RJiHmxdfg/dwymFlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:f3:91:a7:2c:fd:33:7f:f9:db:b1:53:89:82:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Apr 17 17:00:34 2025 GMT
Not After : Apr 18 17:00:34 2025 GMT
Subject: CN=7009c0b164ba7acd29a28abca4891a8582104941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:aa:d2:27:81:1c:2c:2f:27:69:93:75:9c:
96:b9:3c:98:01:53:8a:70:2b:f1:0c:4b:15:11:51:
28:52:5b:d0:6f:f6:26:26:cd:48:1d:e9:d5:e2:fd:
4a:d3:3a:af:54:e9:4c:92:0f:89:16:7f:dc:a2:3f:
52:b8:d9:50:15:7b:8f:77:2a:71:d9:f1:a7:4e:db:
c3:c4:95:35:8e:2f:12:08:d5:14:f5:b4:39:28:cd:
4a:d1:fe:e1:40:c4:67:fc:09:61:98:44:f4:85:d4:
f2:fa:f4:71:13:e6:29:47:f1:39:38:1c:6e:dd:71:
ed:fe:61:19:32:0f:27:3c:d7:90:86:72:12:c9:cd:
fa:9e:1c:bf:df:e3:b8:d0:69:64:a2:07:fe:72:c0:
f4:57:92:f9:52:5d:c6:d9:91:5c:1a:c9:7d:b5:d7:
7a:8b:99:a6:6f:79:95:ad:df:e6:17:ab:c7:76:ca:
0f:7e:71:52:02:06:ec:3d:f6:ac:8d:88:9c:5a:4c:
c4:24:a9:ff:86:51:81:4f:54:d0:32:29:a5:e9:e8:
17:4d:34:60:34:17:2a:05:d9:6d:0d:fa:e3:50:fb:
fc:56:3f:5f:3f:49:65:d3:4a:41:d3:40:4d:9b:ab:
7d:82:a4:e7:a8:4f:7c:b2:95:82:d3:c7:47:24:89:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:09:C0:B1:64:BA:7A:CD:29:A2:8A:BC:A4:89:1A:85:82:10:49:41
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f1:0f:58:bf:a6:d9:55:5f:7a:3c:90:48:bf:4f:20:69:76:
82:4a:61:9b:ca:c8:7f:57:c5:91:d6:d1:01:fd:00:03:20:c9:
41:0d:36:1d:26:60:0a:9a:38:a7:fd:5a:5f:51:3d:e0:1e:37:
30:c2:6a:5c:89:8d:a1:ca:8d:50:ad:e9:23:61:10:2f:ae:1f:
2d:38:9a:10:dd:e0:f4:93:81:40:e3:3d:0d:59:3f:52:6a:ea:
ba:f5:67:d0:65:7c:2c:8a:da:7e:e3:32:83:a1:e5:f6:7c:41:
0a:e6:ac:d9:d0:f5:91:a5:cd:bf:b2:a5:57:17:2b:22:65:4c:
6c:a2:1d:a1:b6:94:9f:ec:ce:fa:6c:1b:5a:8a:b6:61:eb:f3:
5d:a7:1b:85:0f:84:1c:6d:84:41:35:0e:bd:c7:b9:6e:28:96:
99:b5:60:2b:a1:26:d4:1d:db:72:6d:63:37:ab:f2:54:c7:76:
72:f2:5e:69:4d:4f:88:74:b4:17:86:54:80:40:f0:08:4e:01:
c3:72:dd:cc:71:c9:bb:fd:44:e6:ea:48:98:ff:1b:74:7d:1c:
40:e6:d2:85:59:94:79:d9:67:dd:31:cd:16:5f:ff:7a:13:25:
65:82:67:55:2e:70:65:38:cb:3c:c4:c1:86:21:94:68:28:01:
3c:6d:c7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:29:13 2025 by rpki-client