Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: hhrEBahxjosXrXKi9CBGTyk5X+G0BUrLpel8CARqsS8=
Subject key identifier: 86:9A:C4:19:5C:28:03:21:66:99:A0:FC:4F:04:0F:5E:90:39:FE:1D
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 01965191B7BF4A1724726BA57D7B59E23C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 037C
Signing time: Sun 20 Apr 2025 05:00:26 +0000
Manifest this update: Sun 20 Apr 2025 05:00:26 +0000
Manifest next update: Mon 21 Apr 2025 05:00:26 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: mBL4xtHpstC6gcdj09Lxq3rT9oOcDFhoZio7CCzjdXQ=)
2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:b7:bf:4a:17:24:72:6b:a5:7d:7b:59:e2:3c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Apr 20 05:00:26 2025 GMT
Not After : Apr 21 05:00:26 2025 GMT
Subject: CN=869ac4195c2803216699a0fc4f040f5e9039fe1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:b5:47:72:17:88:a8:ba:5f:43:38:47:a9:
20:90:c0:76:81:c1:a7:21:e8:38:49:d0:aa:b1:a0:
14:86:a7:e0:2c:0d:51:37:6f:a5:80:cb:fc:24:73:
c4:3c:b9:65:b2:b3:46:5a:f0:ef:00:79:bc:d7:e4:
9a:40:e3:3e:ed:f1:8d:dc:31:a4:87:ce:80:93:84:
16:76:be:e3:73:cc:1f:aa:c6:1a:3c:93:4d:9b:8f:
94:1a:f3:9a:39:02:ec:99:8d:27:e5:9c:78:93:cd:
a7:58:85:9e:4f:48:68:f8:a9:77:e5:a6:d1:32:94:
dd:48:3c:55:09:f9:a7:b0:42:97:b2:d2:b6:f6:ec:
f6:e8:78:db:da:33:9b:e9:de:93:8d:73:0f:ed:b5:
ca:bf:00:8d:9f:f7:19:14:b0:98:58:2f:74:a3:39:
c7:68:2f:8d:c5:e6:72:6e:f2:cb:2f:5c:05:77:a8:
b7:06:6d:83:bc:f4:76:87:66:b2:1c:f5:79:1b:a7:
e9:2b:af:57:f0:5e:1e:dd:e0:18:d6:5f:45:59:0c:
5a:b5:40:24:bb:62:0b:7c:e7:be:00:b9:f6:f3:1a:
33:c9:be:2c:c5:f2:d4:4b:1a:f1:59:3a:41:96:ca:
7a:df:2b:f2:ac:54:20:dc:c2:87:a0:33:92:ec:46:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9A:C4:19:5C:28:03:21:66:99:A0:FC:4F:04:0F:5E:90:39:FE:1D
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:23:3e:47:d7:a6:d7:84:ba:6b:67:d0:98:d3:8e:f8:7a:04:
66:22:8b:9a:b4:3e:dc:a6:17:dd:1c:3a:8d:3f:4c:3a:73:48:
f9:a4:a0:36:c8:e2:db:30:c0:5a:77:d6:24:ed:8e:4a:4c:8d:
3c:5b:1a:8e:8f:19:b2:d9:21:31:b4:64:52:2c:6e:6f:38:5c:
14:f9:0a:b0:bb:b7:6e:53:03:55:3e:66:36:3b:f1:6d:15:2d:
37:48:6c:c7:29:7b:7b:bc:be:90:52:64:73:24:96:95:ca:b4:
72:e2:64:4c:4b:33:40:cd:b3:de:89:49:57:86:bc:bc:b9:48:
c0:d2:55:8b:80:76:ea:c9:97:f8:e8:dd:26:5e:7d:fb:fb:75:
08:31:fd:c7:39:98:e2:68:11:f5:e6:62:45:d7:d4:92:5f:bd:
93:f7:79:cd:eb:33:fe:32:d2:4e:b6:27:cc:b5:aa:65:00:75:
69:26:7c:0c:b1:88:61:2d:01:34:e0:28:69:ea:64:fc:aa:d6:
d2:2e:5e:58:78:91:22:90:22:4a:c8:5b:df:02:19:91:23:04:
26:71:fe:3b:50:d9:0a:0c:da:a6:24:3a:90:95:a4:37:bb:e8:
d7:4d:13:3e:a1:5b:1b:13:6c:d7:e4:76:41:65:74:40:5b:8b:
18:e5:67:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:31 2025 by rpki-client