Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: QasreuGBOPbK6mpUwmFGA78Oo1Cc+WfyPfKGXYDKCyI=
Subject key identifier: EE:D0:F4:12:18:90:F9:B9:82:C5:AD:2F:31:F8:7A:6B:8E:EE:F7:6F
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 019645FBA07461B431B3D1DFD22032B96CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 23:00:40 +0000
Manifest this update: Thu 17 Apr 2025 23:00:40 +0000
Manifest next update: Fri 18 Apr 2025 23:00:40 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: VV+kY+WsMJvgeefOe7d3thq2Wl32dTJ/WJR1DB3L1gk=)
2: QIqKLnFZSvkIdztpTOrghmndfqs.roa (hash: wHBtvNsb06U7COg9JhFFEVNmIo0CSx+CQSOErCnUsO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:fb:a0:74:61:b4:31:b3:d1:df:d2:20:32:b9:6c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: Apr 17 23:00:40 2025 GMT
Not After : Apr 18 23:00:40 2025 GMT
Subject: CN=eed0f4121890f9b982c5ad2f31f87a6b8eeef76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:f5:45:f1:c4:ce:aa:bc:5c:6c:b2:74:3f:
94:bb:cd:8b:3d:dd:a1:c3:ab:0c:ba:08:92:4d:a1:
f7:2f:f1:43:5b:25:7a:ee:1b:59:5c:90:a9:cf:a8:
7b:ac:92:a9:a0:57:99:a0:35:e7:d2:eb:72:d2:18:
83:b8:2a:ff:45:18:ef:75:69:b5:bb:e4:86:59:3c:
ab:9e:38:ac:96:78:1a:d1:f3:40:5d:29:a6:d4:df:
9d:e4:55:e6:2e:5d:2b:a0:94:93:dd:0f:59:43:d4:
11:e0:e8:aa:ab:36:77:97:34:61:b8:78:40:2f:89:
62:a4:4b:ee:e4:1c:bb:9b:82:a7:1a:ec:80:21:f1:
a1:c8:74:7c:a2:68:b5:11:8c:ab:de:36:bc:c9:bc:
8f:41:1d:83:71:6f:0d:37:3e:9d:d1:2c:f4:50:93:
11:40:e9:90:a1:38:db:28:a9:5a:77:2d:c9:6a:94:
fe:aa:8a:cd:12:3e:e8:79:9f:e1:e7:d8:19:61:18:
71:7b:87:45:57:0b:70:7d:26:c8:ad:27:aa:cc:95:
a2:98:74:46:f7:64:ff:a5:56:fc:09:e1:45:69:49:
88:3f:5d:d0:1f:31:1c:78:36:b5:93:42:93:eb:76:
18:e4:9c:27:f8:14:23:48:46:6d:3a:e4:70:d0:af:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D0:F4:12:18:90:F9:B9:82:C5:AD:2F:31:F8:7A:6B:8E:EE:F7:6F
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:84:78:04:5c:49:ab:90:9e:a7:31:9f:da:21:fc:4a:fb:75:
ba:6b:f6:26:d4:ee:ce:8f:d3:65:ce:8b:20:50:c0:dd:11:11:
95:7a:34:7e:94:83:1f:21:c5:45:38:01:66:de:c9:f8:fb:e1:
b7:d1:44:94:18:3d:53:0b:a7:8c:c4:56:bf:07:aa:41:05:79:
0c:2f:8c:7b:b3:5e:f0:9c:fd:54:64:70:e1:c7:9a:0c:41:2f:
99:d3:ee:66:04:99:0e:0e:b4:b9:94:65:02:d5:d5:da:b2:19:
cc:5d:fd:da:35:ee:d8:14:ee:de:a3:5e:ca:c3:e0:45:b4:13:
c6:20:51:8a:70:e8:22:d0:78:69:09:60:bd:01:a6:57:ca:37:
f6:b5:4e:2e:06:7b:07:88:77:59:71:9c:3f:95:0a:b6:f2:f9:
05:15:32:9e:07:ed:62:87:80:c6:1e:aa:d0:e3:cd:07:38:0e:
8e:d2:5d:8e:a9:5c:e8:76:45:fc:38:c6:de:75:bb:8f:6e:f6:
8a:9a:3f:29:6c:e3:39:e9:c9:a5:5c:28:af:33:fe:19:9b:47:
62:88:18:9b:bc:4f:08:16:de:b4:f3:69:95:8f:94:62:1c:d4:
f1:1b:4c:ed:d7:95:6f:d2:ca:1d:02:f3:cd:88:72:d3:8b:c9:
07:59:ca:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:42:45 2025 by rpki-client