Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: mIJy52Dqox7r3YCGgmwsQvjf7j8RT2eYy25/lNFSoC0=
Subject key identifier: 40:3C:CA:69:C2:58:7B:C5:02:FC:E7:DA:09:26:C9:EF:C7:10:B1:90
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 01964669D2455994F3D955A126CC18E018CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 14FA
Signing time: Fri 18 Apr 2025 01:01:02 +0000
Manifest this update: Fri 18 Apr 2025 01:01:02 +0000
Manifest next update: Sat 19 Apr 2025 01:01:02 +0000
Files and hashes: 1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: DeL+eTCuQsA+fD+LdPMIuF0TwE5YFpI74oU/A5Hph3U=)
3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=)
4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:d2:45:59:94:f3:d9:55:a1:26:cc:18:e0:18:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Apr 18 01:01:02 2025 GMT
Not After : Apr 19 01:01:02 2025 GMT
Subject: CN=403cca69c2587bc502fce7da0926c9efc710b190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:7f:1a:0a:8f:fe:fb:8c:0b:47:06:4c:65:
d0:43:d4:ae:d9:8a:b1:1a:4c:24:3e:01:00:0d:f4:
6b:01:98:27:a5:ad:8b:fd:85:99:83:9d:36:36:66:
90:2d:6c:37:79:c6:48:ee:70:13:1e:13:5b:99:53:
99:d9:b5:ab:e3:ea:eb:11:b8:64:a3:93:37:b7:88:
71:f2:a6:3b:17:0c:e7:01:94:4f:12:13:7b:66:91:
52:6b:d8:5c:77:0f:89:48:15:4f:41:2f:3f:5a:4d:
c1:5a:c0:66:aa:11:dd:86:1a:29:65:bf:98:16:ab:
25:d7:ff:fb:1c:b2:5b:10:9b:67:c5:fb:ea:46:06:
dd:9b:16:df:1c:5e:84:a3:85:31:29:34:80:ba:06:
93:bf:1f:1f:4d:3b:66:be:c8:4e:8b:5f:29:c7:22:
a9:51:5f:f4:74:c0:2b:fe:0d:77:05:ce:ff:25:49:
02:03:ed:04:fe:a2:ee:88:53:51:98:9f:bf:95:fb:
27:1c:91:50:01:dd:56:6d:00:d9:09:27:e8:cf:3a:
93:e8:46:b8:cd:05:bc:0b:0d:b6:5d:1f:1e:fd:0c:
d9:7c:2a:12:df:5d:34:af:50:8a:bd:8a:23:8c:b7:
31:91:9a:83:45:67:0f:01:31:90:64:1b:3a:a9:a9:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3C:CA:69:C2:58:7B:C5:02:FC:E7:DA:09:26:C9:EF:C7:10:B1:90
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4e:73:41:87:5c:4e:83:0e:e2:52:8d:fc:47:66:0b:7f:97:
11:3c:ec:59:16:de:62:39:fe:9d:07:26:9e:af:89:a4:21:f8:
ff:4a:05:26:68:8d:eb:27:97:2f:bc:36:7d:39:13:3e:15:6f:
c3:38:ea:1e:f2:80:19:cf:6f:e3:db:16:36:ce:6d:c6:ca:90:
9f:70:f4:b8:a8:11:52:62:6b:a0:7d:f8:26:6d:a1:25:d5:0d:
0b:d1:3a:3f:3d:99:b3:11:2e:fc:f3:5f:be:a3:60:43:fc:d8:
57:03:91:c4:f8:9a:10:2f:90:e4:d3:17:02:77:f7:cd:19:53:
49:5b:69:a0:26:5b:7d:18:3d:6f:58:ed:f2:b3:38:84:a6:78:
2b:c7:94:90:a6:90:d6:64:92:dc:6c:51:65:bc:2e:d7:c8:ab:
37:0e:cc:55:0a:80:4a:12:0c:67:cb:04:e9:3d:8c:76:d6:c3:
da:98:04:b3:c6:b8:ea:a5:07:ca:6f:78:95:a5:d3:0e:29:3c:
69:2b:fa:4e:8a:3c:2f:a8:cf:c0:c3:1a:ec:93:80:9b:d4:dd:
7f:50:99:ee:d5:92:5a:65:cf:d3:c8:f0:4b:1c:d3:4d:0d:75:
10:7d:8d:8d:b2:2e:5e:c9:5b:ca:0a:d0:e3:f8:61:f3:8c:5b:
ff:53:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:45:39 2025 by rpki-client