Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier: PXgGMf+rppM8H124P/b8VtrdgkTy8w11ozzDpC0lnKI=
Subject key identifier: 86:72:6F:CF:CE:B1:F2:E4:58:65:87:06:3F:B9:E1:68:14:18:D4:7C
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 01960C43E7BE619FA3A921947B9E3E5BAA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number: 1242
Signing time: Sun 06 Apr 2025 18:01:38 +0000
Manifest this update: Sun 06 Apr 2025 18:01:38 +0000
Manifest next update: Mon 07 Apr 2025 18:01:38 +0000
Files and hashes: 1: HXMlv9NxuKboyUtKNMBCZQbSjW0.roa (hash: mL85Iwg8ADnZv62S9C7eQgo7c8UTYuO4j6CsY6zppGQ=)
2: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: hHBhVhrg0tlzAOIKDwP4lcqTUVbsJnO8oEINQ0HgYh0=)
3: eJTJ2xXloI9cYA2PdEb7QzgzZMI.roa (hash: pJvyPt1aoxPTKu/5G35raZf6vtLPUO+Laz/ssfLJWrA=)
4: nyGwWtmUUenCuiNvi2rme3JvAnM.roa (hash: mv2iRNCUpphbjEmFj2ZluXSrRNCmkDp7k1nJS6ve48g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 18:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:43:e7:be:61:9f:a3:a9:21:94:7b:9e:3e:5b:aa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Apr 6 18:01:38 2025 GMT
Not After : Apr 7 18:01:38 2025 GMT
Subject: CN=86726fcfceb1f2e4586587063fb9e1681418d47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:72:b6:83:b7:52:5b:19:0b:62:42:5a:5f:6b:
e1:19:62:c7:ed:0a:e3:96:33:d1:86:eb:61:fc:a5:
68:1b:25:6b:b0:21:45:4b:80:c5:f9:ba:0c:92:23:
0c:27:ed:13:f2:ae:11:d1:dd:b6:7d:c6:aa:6d:3f:
26:c2:a0:f0:89:8f:48:85:15:b0:2f:a7:2a:61:66:
78:24:43:26:58:bd:c7:41:c6:5b:61:bf:a7:0b:65:
5e:4f:34:d8:ee:a6:85:ce:ca:dc:dc:f5:da:af:e3:
0f:47:86:cd:e0:25:90:7a:12:b1:bb:b0:24:63:c4:
40:46:14:c5:6f:83:87:91:37:41:27:4b:36:70:04:
7c:ba:2a:f6:79:6d:cc:cd:65:f6:1c:14:fb:11:e0:
bb:e3:2c:74:e5:0c:1b:ff:ee:ca:09:19:3c:39:36:
48:34:9f:27:62:ae:67:56:8d:43:9b:b7:d5:53:97:
62:5c:17:14:5d:eb:87:21:81:d2:c1:ad:ed:85:96:
5d:13:49:b2:fb:0c:19:b8:0d:7e:c8:d3:75:e4:76:
67:c7:04:1f:a8:cf:da:68:b3:29:61:82:c9:44:0b:
c9:c1:a6:21:4d:5e:d8:98:31:06:9e:5a:12:31:d3:
b2:75:78:67:11:39:5d:37:83:88:59:77:bd:18:3f:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:72:6F:CF:CE:B1:F2:E4:58:65:87:06:3F:B9:E1:68:14:18:D4:7C
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1a:4e:f7:0c:cc:00:59:57:f1:72:5f:62:cd:09:e6:0e:da:
48:2a:5a:2a:54:23:b4:4a:a9:06:03:d8:d2:0c:d1:1e:8c:16:
f3:e9:8a:46:fc:50:0f:6a:e1:fa:1a:b9:60:13:b5:2a:b9:e8:
57:bd:1f:c2:31:6d:32:dc:0e:5f:3a:e0:75:97:31:27:81:db:
a3:bc:ac:ca:27:13:1d:bd:7d:dd:93:36:21:67:24:84:f3:53:
68:0d:d0:ba:d6:48:a3:45:eb:b5:6b:5e:5a:7c:8a:bd:24:e2:
cf:4f:df:81:91:b6:4c:ba:2f:9e:c2:91:31:79:23:ff:35:d3:
42:97:fb:63:56:79:7d:68:79:be:33:e4:5e:87:63:b9:7e:8e:
bc:1e:9e:64:70:2f:a7:0c:e7:53:3c:d1:7b:f4:4e:14:51:71:
46:ca:f8:a4:f7:ff:dc:12:56:76:d8:87:20:78:cc:26:46:a8:
e3:c2:14:d6:6a:68:68:45:75:d1:e3:a1:68:b6:f8:a7:08:96:
ed:49:f0:37:a7:2f:0d:d4:dc:47:a9:bc:1b:a1:41:1f:17:8b:
11:43:56:a9:3e:80:45:83:ec:ec:d5:ac:bf:47:f6:20:ac:c9:
8e:ec:61:65:cc:48:59:f8:3c:4e:f1:69:19:df:71:c7:2a:77:
81:3c:f8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:25:12 2025 by rpki-client