Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
File: NFuHElrLAlH6z9jAqVtIvCJSIUY.mft (raw, json)
Hash identifier: ANjnEIsf2jsy8d9I5uRjdt7uyiOGKTgA6eeMHOWbSQY=
Subject key identifier: BA:A6:64:38:63:9A:19:21:B4:7E:23:95:C7:D6:BC:B9:32:5F:B6:2E
Authority key identifier: 34:5B:87:12:5A:CB:02:51:FA:CF:D8:C0:A9:5B:48:BC:22:52:21:46
Certificate issuer: /CN=345b87125acb0251facfd8c0a95b48bc22522146
Certificate serial: 0196586F6A2818D5BB7CFD1853C239E44758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFuHElrLAlH6z9jAqVtIvCJSIUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
Manifest number: 097A
Signing time: Mon 21 Apr 2025 13:00:18 +0000
Manifest this update: Mon 21 Apr 2025 13:00:18 +0000
Manifest next update: Tue 22 Apr 2025 13:00:18 +0000
Files and hashes: 1: CBXANdTAH6lHnoZ5K2StzbAV7NQ.roa (hash: PznuBPAbTWwdWPU+SDJg6l9STDdceLsRjWJ3izhl9/o=)
2: NFuHElrLAlH6z9jAqVtIvCJSIUY.crl (hash: Re2jc3iQaCJBa8nlNG4+ryUn5YSr1jZEelyr5NpciPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFuHElrLAlH6z9jAqVtIvCJSIUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:6a:28:18:d5:bb:7c:fd:18:53:c2:39:e4:47:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b87125acb0251facfd8c0a95b48bc22522146
Validity
Not Before: Apr 21 13:00:18 2025 GMT
Not After : Apr 22 13:00:18 2025 GMT
Subject: CN=baa66438639a1921b47e2395c7d6bcb9325fb62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:af:ff:d7:0c:73:f4:35:c7:aa:da:39:32:c8:
9e:0e:1f:ae:6b:82:c6:6d:a0:78:e5:79:f7:bf:38:
af:f9:cc:29:23:98:e2:39:1c:90:e8:46:fb:79:7d:
3d:86:6a:d0:57:16:0c:e9:9d:27:58:da:9e:e9:97:
b4:2a:bf:fe:93:d7:2d:47:f6:62:dd:30:ab:bd:45:
2a:9d:10:36:ca:6e:91:85:81:b5:fb:e7:d2:54:17:
f2:a8:fe:ec:fb:29:e7:c4:6f:34:d2:93:31:ec:fe:
8c:59:63:7e:7e:c2:1a:7a:99:85:6a:60:86:2f:c7:
87:0a:6f:4c:c9:34:6b:f5:62:a8:0f:39:14:a0:b1:
b6:86:c0:be:d6:ce:39:ce:e3:fb:24:b5:b5:fa:6c:
55:82:15:88:6a:1a:bd:a8:8a:d9:6d:cc:6c:79:e4:
27:f4:a8:f2:47:f3:cc:52:b5:c7:f8:81:ab:62:20:
4d:9c:c3:f8:03:b1:cd:ff:40:7f:88:e9:a3:5e:c8:
3e:25:41:4a:e0:cd:bc:e9:70:30:f4:23:e7:86:6b:
7c:b1:ae:2b:8f:2c:5e:d8:90:f7:8f:3a:5c:cf:e4:
76:57:3f:61:83:21:7c:3d:7b:c0:63:19:7b:d6:d4:
fc:0f:7c:cf:96:a1:60:1b:fa:8d:1f:e1:b8:9d:73:
94:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:64:38:63:9A:19:21:B4:7E:23:95:C7:D6:BC:B9:32:5F:B6:2E
X509v3 Authority Key Identifier:
keyid:34:5B:87:12:5A:CB:02:51:FA:CF:D8:C0:A9:5B:48:BC:22:52:21:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFuHElrLAlH6z9jAqVtIvCJSIUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:06:10:25:35:66:0b:53:28:d6:52:c5:20:65:39:2b:66:9b:
b4:d3:ef:e0:73:e3:84:33:42:ed:e8:2c:0d:d4:68:3d:d4:d4:
45:6c:7f:40:56:05:3c:64:47:4b:f9:93:20:da:25:2e:65:50:
17:03:c9:a4:ce:97:13:99:54:a9:ee:7f:f2:8f:01:53:e3:22:
44:f9:cf:ea:58:51:12:67:08:1f:6b:d8:61:9c:fd:6c:b4:93:
37:5a:d5:89:57:63:45:66:d8:35:50:93:70:ca:21:ed:8c:d5:
4e:0f:8a:63:cf:5a:cf:38:5f:92:db:24:4b:d3:74:0c:d8:17:
d5:81:8f:09:f7:12:d6:23:ad:11:1c:e3:c9:d8:df:62:8e:4e:
04:fd:ae:48:f4:0e:72:52:7a:be:95:8f:06:4b:e9:67:6b:1b:
b4:fc:c6:77:81:01:d2:c0:79:cc:51:83:be:58:b7:cf:ab:42:
35:73:89:dd:60:28:aa:4c:0b:34:fd:49:77:ab:6e:22:28:8a:
ef:60:4b:66:93:84:b9:a2:9a:9e:d4:c2:69:1d:cf:08:5b:09:
cb:b1:c5:04:32:8e:4e:3a:c4:bb:4a:d3:f0:3d:42:58:c8:3e:
0a:03:a7:b5:ee:99:29:46:b6:c6:cb:2a:26:89:92:9e:aa:d3:
ff:eb:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:16:08 2025 by rpki-client