Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
File: NNDsesTDkeTsup0KN0kZGxjr-TQ.mft (raw, json)
Hash identifier: 1VvEYIzahqqq5/xZKuWhZnm6H3pbhdauvNZNF0j30WM=
Subject key identifier: 57:E4:0E:EC:70:4D:58:4A:E4:7B:87:83:D6:73:81:B4:E4:DD:B0:4C
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 01964FDAF7CA2C7EE45CCEF29885FE4AA969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
Manifest number: 0D7D
Signing time: Sat 19 Apr 2025 21:01:12 +0000
Manifest this update: Sat 19 Apr 2025 21:01:12 +0000
Manifest next update: Sun 20 Apr 2025 21:01:12 +0000
Files and hashes: 1: HFSm_Vu9AzQD1E8IenTIb8aGN8w.roa (hash: 4fQxNDw+xzPlf4g6ZgL9x8rYG7oQVJVTPEy0p3xv3ck=)
2: NNDsesTDkeTsup0KN0kZGxjr-TQ.crl (hash: QSlQ3xzjE+phbB00px9n0NuNOUZTQDxqiUnk0DJw+c0=)
3: Yzl-TsBruLbp6clu7Q2IexOaQIA.roa (hash: h8cj0MpyodNclAF4X/OllC8+HNKuBQ3B2EFgEqM9+5A=)
4: Z_1dKKg5j_ZVIIzCoIHjWYwlm20.roa (hash: jvis9yjIVYHSkVBmx62d0kYrYZu0QAElVmLUpHW0GZM=)
5: fSqRfFQj3Q__dsTUhVMBI1HPSHg.roa (hash: Y+WWgHfgxkTIhIEndSO+xaSkFkDz1wgH6w0m5aWvWfU=)
6: pI3W8C1ZxuPusTptKHP1u0YPtbM.roa (hash: CThv60vq5lrTC7BFI5QFq4GFsEIpVjwpFNsuFKoLpYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:f7:ca:2c:7e:e4:5c:ce:f2:98:85:fe:4a:a9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Apr 19 21:01:12 2025 GMT
Not After : Apr 20 21:01:12 2025 GMT
Subject: CN=57e40eec704d584ae47b8783d67381b4e4ddb04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:d0:3b:08:0f:24:da:e9:72:83:b9:28:c6:
12:08:c9:13:a4:2e:de:86:7b:4e:1b:82:de:ee:15:
97:9b:07:8d:3b:d9:3d:c0:9b:1f:22:f1:de:b6:3c:
4b:fb:ba:94:78:42:0f:8c:cd:1b:37:dd:56:a0:5b:
82:b4:23:64:41:fa:be:3a:29:4d:28:dc:67:77:1c:
76:d7:96:a4:d1:06:26:9d:5c:0c:db:24:2c:95:b6:
6b:5e:c2:52:64:c5:7d:b9:a6:76:c4:bb:4b:9a:f5:
fb:e6:55:25:eb:53:8c:90:a1:83:a1:ce:82:3e:0f:
28:f8:03:0a:b8:dc:9e:7a:bd:23:59:04:80:af:ae:
89:f8:91:f3:40:8b:e9:6c:3c:22:bd:02:69:6d:11:
fd:d4:91:6f:54:06:a6:58:d3:a3:55:4b:a9:5d:a4:
af:02:fc:bb:d0:6e:7f:a7:03:ce:50:08:74:a8:57:
85:26:a6:6c:83:93:23:ab:5d:6b:c4:f0:93:a3:25:
da:97:26:fb:4f:a9:81:b6:2a:65:b3:3d:b3:da:05:
d1:70:5d:1d:10:89:97:1e:19:e3:41:91:92:41:f8:
d6:5c:6e:81:88:c9:c7:b9:c7:82:d6:d0:3e:87:39:
c4:eb:84:a2:f2:aa:c8:f2:14:72:4f:21:b8:a6:3f:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E4:0E:EC:70:4D:58:4A:E4:7B:87:83:D6:73:81:B4:E4:DD:B0:4C
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:61:13:41:31:ae:90:ee:69:77:a5:e2:d7:d4:be:04:88:96:
8e:2c:ae:39:a5:fe:d8:ee:6e:f6:f4:55:ef:2d:07:72:bb:58:
49:03:93:6a:22:96:10:df:c5:ae:4c:4d:32:82:90:75:91:c7:
28:e4:ba:49:fb:2d:99:0b:7b:73:b8:0c:be:2f:cb:12:3a:9e:
73:f5:00:54:c7:03:74:e8:d4:90:98:f9:82:e8:31:c6:ed:38:
56:e1:6c:29:92:74:f5:6b:58:0b:ae:f7:d8:21:ee:23:a6:5f:
7b:bd:ac:a0:4a:19:33:d0:59:0b:59:8e:db:89:08:5c:63:05:
ad:9a:8a:e0:25:3d:a9:a6:6e:2c:bb:c1:67:c3:a4:4c:94:0e:
59:1b:22:6a:91:1a:20:56:ef:2a:3e:59:a6:38:78:eb:79:5c:
48:61:ca:3b:c4:b0:2a:24:2e:35:77:bd:7a:06:9c:62:4e:48:
9c:56:16:cd:62:71:30:4f:db:46:7b:1a:3b:af:9b:26:6b:72:
70:ca:23:e4:00:43:9c:0e:75:ea:aa:fd:e0:fc:42:8f:da:ea:
4a:06:10:c8:b8:80:b1:18:ca:41:f9:73:1f:23:21:96:de:1e:
02:08:05:96:c0:08:d3:2e:4e:df:e5:28:fa:70:53:23:82:a1:
80:ad:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:27 2025 by rpki-client