Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: 9R65adiTB2D8fRJEEvkWouJYIjpBzS/7ogNDhnjskvw=
Subject key identifier: CE:E5:09:91:79:FB:9B:9F:1A:7A:80:7F:A2:3C:98:B8:23:04:39:31
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 019629A949044CB73C408BE176C1991DD57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 41
Signing time: Sat 12 Apr 2025 11:01:21 +0000
Manifest this update: Sat 12 Apr 2025 11:01:21 +0000
Manifest next update: Sun 13 Apr 2025 11:01:21 +0000
Files and hashes: 1: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: /qxcbxn5ua88wWpVmVRth/wJVMPiki06pwrP/wFdzw8=)
2: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (hash: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=)
3: xuTySrtO69FPOcG6SUnZEPsSQ9o.roa (hash: luyQlxdtnhbzwgU08jLpwvc2YYpUGSiEGEb8snEjI6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:a9:49:04:4c:b7:3c:40:8b:e1:76:c1:99:1d:d5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Apr 12 11:01:21 2025 GMT
Not After : Apr 13 11:01:21 2025 GMT
Subject: CN=cee5099179fb9b9f1a7a807fa23c98b823043931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:fb:94:12:82:aa:7e:f8:92:fd:a0:fc:4e:
bd:66:03:16:4b:05:20:5d:1a:92:a4:d7:f6:64:0d:
6e:67:52:89:c7:48:94:92:6d:b4:03:e3:90:92:ac:
f0:1c:a4:42:54:f7:15:55:53:6a:96:41:fb:d3:1c:
86:3b:93:7d:b6:ad:78:f1:ee:3a:82:ee:7d:2a:d9:
31:97:d2:4c:60:96:cc:a7:d6:4a:b9:2b:a2:ad:90:
48:29:5d:47:cb:f7:52:7c:e0:12:7e:92:ca:dc:ca:
01:b3:43:9f:cc:0b:94:38:52:35:11:04:6e:aa:12:
c5:b4:e8:da:73:bf:bd:c8:22:7c:10:b1:eb:50:73:
6b:60:cb:fa:be:b2:b9:28:72:9a:e2:ff:71:b1:1e:
9c:68:5b:6a:40:3b:ef:29:ad:60:98:63:80:08:12:
d9:e2:08:c4:e8:b8:03:20:f4:aa:3c:bb:16:df:1b:
bb:8b:d9:9e:75:da:86:c9:ff:c6:78:92:af:99:4c:
17:11:c3:c0:ed:00:3a:71:f1:d4:73:76:65:68:c8:
60:84:98:44:3f:0b:f3:20:97:66:ec:b7:61:31:78:
00:22:be:37:8e:e0:b2:64:63:f2:fd:a3:69:e9:98:
d8:03:ba:fd:34:2e:f8:fe:c4:27:7d:fa:1f:1b:7c:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E5:09:91:79:FB:9B:9F:1A:7A:80:7F:A2:3C:98:B8:23:04:39:31
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2f:66:30:a4:80:60:6b:77:d0:0a:d1:c3:c9:66:fe:fa:6a:
d0:5e:c1:13:be:88:be:78:45:a9:e7:72:cd:32:30:af:5e:90:
54:d5:f4:df:31:30:ae:dc:b9:b1:94:29:ee:bf:c9:7c:34:56:
46:3f:b0:d2:ff:bd:05:b4:ca:5c:3a:49:4a:da:02:99:9a:97:
c6:17:74:fd:2e:62:1b:82:9f:57:1f:0c:c9:8c:a2:ea:b4:05:
d5:3d:75:07:5d:02:41:26:c9:3f:df:26:6a:1e:a8:83:b6:da:
90:ec:11:f9:38:af:13:71:b1:49:87:8c:70:84:4b:3e:a0:b3:
31:40:03:76:84:ec:51:54:cc:2d:9d:a7:de:98:5d:9c:02:14:
20:0f:6c:cf:6b:11:c4:57:64:0c:ea:e8:f1:45:ee:af:97:fa:
d2:61:81:3a:ba:7b:87:96:d0:7b:a8:4f:08:37:c7:dc:9b:d4:
8a:87:cc:00:cf:fd:b5:68:ec:38:d9:34:8f:4b:aa:ea:d4:02:
4e:bd:47:96:48:cc:7c:52:39:e0:a8:57:6d:57:c8:d9:ec:63:
d2:10:6a:cb:f1:de:94:ce:d6:37:bf:1c:86:b8:aa:74:76:3e:
39:fe:44:1e:a3:39:e6:8e:e6:c0:8f:43:d1:7c:85:ff:1f:7f:
ab:e6:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:55:31 2025 by rpki-client