Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: WHYUrmENRQL7uZPxg2eeaf7/VFW4UgJfSJMtXBDOM2I=
Subject key identifier: D6:C9:4B:0F:14:25:11:EF:D3:54:1B:8C:5C:DC:EF:6E:7B:A3:23:F3
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 019619C7AE84E158343902C22B6D4EA7F289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 14E5
Signing time: Wed 09 Apr 2025 09:00:38 +0000
Manifest this update: Wed 09 Apr 2025 09:00:38 +0000
Manifest next update: Thu 10 Apr 2025 09:00:38 +0000
Files and hashes: 1: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: +cC3QBt4/JbcoGtO0kPE8L5AjLXjm/VRnSdBk4IvNPA=)
2: O3Kl40jGDsPRJGH1EFnf65-hUj4.roa (hash: aMzq4HH1WAeogtvzS32mERsBxOMZNMYLSy3wIuq38+8=)
3: fCTecUt77UHhtXHXll1piF7Zd6c.roa (hash: q3pUeUA6qW+DpXb5gimft6PsFNA4pETS9zhmS0g+5v0=)
4: hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa (hash: pY371ydI1VeBW+n9ngZnpHGBKKkDLyF2vNs37egLERQ=)
5: pFZVBmgqiU0csf9W43g6FIWRCTM.roa (hash: eUwZvrYwb50UrEhmGEwgTxwUKEPb4F3y0cFhI/MdzLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:c7:ae:84:e1:58:34:39:02:c2:2b:6d:4e:a7:f2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Apr 9 09:00:38 2025 GMT
Not After : Apr 10 09:00:38 2025 GMT
Subject: CN=d6c94b0f142511efd3541b8c5cdcef6e7ba323f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b0:fe:35:82:c6:ad:1f:95:7e:4b:b0:d8:61:
c3:81:ea:2a:e7:4b:cb:ef:cc:9e:e3:9b:3e:25:5c:
ce:81:06:61:d9:b7:4c:7d:f0:aa:70:b7:b4:2b:74:
a8:73:22:d8:9b:e9:28:ee:34:4a:bd:db:e3:ac:95:
1a:e4:0a:65:c1:58:49:2b:e6:eb:eb:2b:22:3c:20:
d6:90:5a:3e:ad:dd:f0:d6:91:e4:8c:0f:1c:2c:b2:
85:97:80:d6:ce:02:54:8f:25:f5:af:1d:b9:b6:e7:
68:c0:ff:a0:d0:c6:4e:22:1a:49:72:73:33:16:fd:
63:af:d0:fb:31:91:6c:0e:be:f6:66:4b:3a:7b:ea:
bc:37:67:3b:92:b1:eb:1a:c7:8c:d8:78:fa:37:d0:
70:6b:d6:ba:92:cd:46:09:97:0f:be:92:50:63:9e:
80:3b:f4:89:3c:37:d3:ad:f7:12:41:07:39:52:20:
5c:50:5f:e7:cf:07:06:22:ef:90:83:d3:0d:b2:c6:
e5:46:46:3e:32:01:43:c4:d7:ff:8a:de:b8:5c:ac:
9b:93:dc:65:fe:57:3a:e8:4f:ca:2a:84:4f:e1:1b:
f2:dc:a2:8c:f6:1b:6c:1d:66:74:3a:dc:78:6a:d7:
41:bd:4a:22:f1:55:d3:e5:72:cd:1a:06:66:5e:a5:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C9:4B:0F:14:25:11:EF:D3:54:1B:8C:5C:DC:EF:6E:7B:A3:23:F3
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:22:c8:b1:89:0d:4b:55:aa:39:b2:b8:ad:80:a8:d0:83:ce:
69:66:2d:bf:c0:35:31:b8:2c:1d:30:d3:cc:93:04:5c:2e:78:
61:15:0a:f8:9a:5d:ea:93:02:3f:ff:63:40:3f:c9:23:0c:56:
f6:ef:9b:16:cb:34:eb:a0:13:5c:19:ad:31:28:5f:3f:f3:60:
56:df:d8:fa:91:d0:b5:ce:29:6f:92:9a:4c:ef:12:8b:10:8c:
a4:81:31:a6:90:20:cc:eb:24:39:1c:8f:00:b8:9d:a2:b0:1a:
04:38:02:c5:e0:d5:7f:f1:d8:58:58:bc:f9:62:02:89:0d:09:
26:a3:c9:19:b7:21:6c:48:b6:6f:7e:6f:e5:4d:0b:5d:95:8a:
c5:9a:7c:d9:8d:93:75:88:b7:30:e9:be:5f:50:6f:06:47:96:
d1:71:05:f3:08:af:c9:65:d9:bb:cb:9f:f5:2e:bd:67:dd:9d:
0a:92:86:d6:b0:61:1d:69:e9:14:81:55:b8:75:18:6a:51:72:
67:5b:d2:70:84:99:5c:7c:30:d6:85:15:e0:2a:ca:d9:12:ca:
58:41:66:be:6e:16:9d:5a:1d:a6:69:8f:39:22:a5:1b:f5:49:
e3:84:60:e2:f7:58:40:c6:ff:8d:23:10:67:9a:9b:8c:ad:b2:
a0:08:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:10:50 2025 by rpki-client