Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
File: NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json)
Hash identifier: IhQYG2mcHLp64z1ni7J20rKjS0sGiXFZ1ZLWyFtqcg4=
Subject key identifier: 61:4C:8D:C9:A6:6A:46:58:87:1A:00:7F:70:F7:A1:7A:98:70:CF:B2
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Certificate issuer: /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial: 019657948B9E185BD3D1FBA1E54F3BF41FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 09:01:14 +0000
Manifest this update: Mon 21 Apr 2025 09:01:14 +0000
Manifest next update: Tue 22 Apr 2025 09:01:14 +0000
Files and hashes: 1: 1-gyxFvtsdFvYTZX0Y9fbT2PSGFM.roa (hash: EABdk5cioKlboVX+5roxKxOS78qf+VdGIdGNtobQ0pE=)
2: KArVYyPO9fBEhTTRJ1tDthlJCOw.roa (hash: a0gp1BPnbKmQpx9TqJhgPqer5KuegL1mEbSjNdCn0ek=)
3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: pLnobRjfl4dRoLCaSRugBZ3KZPFzzvdBxoMZbYEQaGw=)
4: SErRHgSbJegvTKQp5_vKPuL-I0M.roa (hash: 5izdqURGD+Gcq0q1le3LSPtQmkAtZ+szcc8AfWWlrxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:8b:9e:18:5b:d3:d1:fb:a1:e5:4f:3b:f4:1f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
Validity
Not Before: Apr 21 09:01:14 2025 GMT
Not After : Apr 22 09:01:14 2025 GMT
Subject: CN=614c8dc9a66a4658871a007f70f7a17a9870cfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b5:44:ab:5c:d3:51:c8:ee:94:7d:fd:41:7e:
8f:a4:a1:35:67:9c:e1:fc:c8:bc:19:69:64:2d:00:
7e:96:2c:39:33:67:82:43:76:46:f4:6d:3e:7b:e0:
e2:49:a6:b9:ff:9f:f3:4e:ef:74:65:2f:8f:2d:32:
a7:cb:f3:3d:67:26:2b:94:d6:80:01:5f:b5:9b:b3:
21:df:66:27:ba:8c:03:f1:70:1e:86:e9:fc:d4:22:
73:29:25:14:31:c7:26:16:23:4d:f6:38:8b:a3:be:
b9:de:bc:61:04:e4:f7:4f:e9:58:0c:5d:65:10:f1:
4c:5e:a5:0b:a3:f5:e4:70:a2:59:e8:42:4b:46:a4:
6a:d4:d0:d7:f3:04:7c:7d:5f:c5:1d:c6:d1:ae:e8:
ae:3c:00:8c:b8:ba:83:df:9a:ef:15:d3:69:c5:ac:
53:a2:5c:bb:39:a0:4a:39:28:2a:7a:6b:37:fc:74:
12:3f:9c:81:0d:55:86:9f:37:1b:f5:94:eb:49:f7:
13:f3:dd:e5:b7:43:fe:ee:69:e8:47:1b:57:8e:38:
34:ab:16:5c:13:23:68:7a:db:eb:4e:c7:a6:b6:65:
ee:76:0c:46:7e:2f:27:8e:ac:70:02:bf:4e:1b:a4:
4a:19:4d:8f:f7:00:5f:bb:17:74:2d:76:4a:95:fe:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4C:8D:C9:A6:6A:46:58:87:1A:00:7F:70:F7:A1:7A:98:70:CF:B2
X509v3 Authority Key Identifier:
keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cc:9d:c4:d9:4c:36:95:1a:72:41:5e:aa:77:ad:83:04:34:
2a:aa:4b:da:5d:a7:54:00:3d:3a:e0:9b:22:bb:fc:63:15:99:
e8:08:b9:c0:86:e4:4f:a9:e9:fd:6f:0c:31:1b:78:20:8b:ec:
78:0e:e9:f6:40:d7:9d:44:75:55:7a:d0:f7:24:d1:e9:af:71:
e0:05:8b:d1:80:98:6c:d9:42:5a:13:9f:cc:d7:88:71:d4:7a:
03:84:51:0c:2b:6c:76:9a:17:4b:da:08:c5:71:c0:8c:97:e4:
a8:ed:bb:59:a9:4c:e1:44:20:55:c7:24:b0:94:8c:13:3c:75:
80:55:85:fa:2c:99:b4:fe:52:2d:dc:ac:14:f9:1d:61:49:7b:
83:7d:e3:d1:b0:85:f2:a1:5d:db:10:b6:fb:52:2d:fe:36:8b:
6d:29:6a:0a:bc:71:70:1c:67:93:f1:b8:34:f2:84:be:b3:ac:
bb:0e:a3:4b:ec:f5:a7:bc:ed:9f:d9:ed:9d:5f:8e:f3:e8:af:
ce:ba:92:d6:25:46:cb:11:a4:e1:61:90:4a:9d:32:8c:1b:d6:
65:54:8f:54:5c:c9:55:59:79:a0:d3:8c:0d:10:14:13:79:38:
dc:97:be:fc:dc:69:d1:17:0d:5f:ab:0e:f6:c9:31:bc:48:b0:
ec:1b:55:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:25:26 2025 by rpki-client