Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
File: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft (raw, json)
Hash identifier: RSJlHF0mFRUmeGl2tQANkW4hykdrV5NFWCGsrExklyM=
Subject key identifier: 0A:9B:18:3A:CD:63:36:9C:99:47:DA:4A:1E:64:7B:70:FB:6E:B9:65
Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
Certificate issuer: /CN=360c5935e51fe706c2447519d9b5f95ae363c186
Certificate serial: 0196523718444B6D253002850EA773449830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
Manifest number: 10A9
Signing time: Sun 20 Apr 2025 08:01:04 +0000
Manifest this update: Sun 20 Apr 2025 08:01:04 +0000
Manifest next update: Mon 21 Apr 2025 08:01:04 +0000
Files and hashes: 1: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl (hash: BkWGRFeBdHtZO9aJ6Zz0e+6wZ5U633DlTX0hU75ds6E=)
2: t502H2vMdpAeOhruVMNDr3Acpww.roa (hash: fOmBVqNdsH/gE4UkC59LOcZAoo+pjmsg19OUK4hM+ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:18:44:4b:6d:25:30:02:85:0e:a7:73:44:98:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186
Validity
Not Before: Apr 20 08:01:04 2025 GMT
Not After : Apr 21 08:01:04 2025 GMT
Subject: CN=0a9b183acd63369c9947da4a1e647b70fb6eb965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:a9:e4:6e:ba:c9:02:5a:30:45:01:d3:0f:
f8:6f:69:a1:20:e4:10:b8:7f:a5:f3:c2:14:fc:23:
4a:8a:03:d3:25:56:0e:d4:33:5e:d8:ec:70:4b:73:
65:19:14:54:90:e9:b0:f5:25:1e:2d:12:9c:fc:45:
45:c7:0b:ef:96:16:85:7f:d7:52:a6:65:41:78:57:
01:d3:4c:0d:56:3c:f4:c1:9a:00:18:3a:e2:37:b3:
cb:e7:bb:de:69:cb:cb:18:bb:b8:0c:bf:6b:8f:fc:
32:fb:5d:01:ae:78:59:94:2b:1c:5f:68:ab:c4:c1:
a5:d8:1f:34:44:5a:8d:b0:60:11:eb:0d:90:21:c3:
d2:61:7d:2e:f3:75:e0:1e:14:19:73:6c:7f:cc:25:
55:6f:bf:15:98:98:70:07:73:fd:1b:a8:c3:d6:46:
06:e7:c8:f2:4b:0a:c2:0d:36:41:59:8c:81:e3:c7:
7c:13:a0:80:02:f5:f9:93:49:32:16:ec:8d:3f:d7:
9d:bf:9e:3d:f7:61:77:e2:20:a7:0a:62:11:0f:f4:
d8:3b:4f:9f:e6:74:af:b2:67:75:11:01:6c:03:22:
a7:53:88:13:e1:8f:0a:e9:4c:f8:66:4d:eb:eb:71:
67:01:fe:8f:91:b9:07:31:c6:cc:5f:22:02:3b:5e:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9B:18:3A:CD:63:36:9C:99:47:DA:4A:1E:64:7B:70:FB:6E:B9:65
X509v3 Authority Key Identifier:
keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ba:61:77:4c:bc:92:1f:4c:26:eb:a8:4e:5d:7b:55:b9:f8:
76:eb:a8:55:c0:14:25:ea:e6:7c:1b:51:d3:62:6b:3b:2a:ac:
4b:56:f8:a1:68:2c:2c:f6:17:41:c9:0a:63:21:29:55:92:51:
d0:e9:07:33:9c:af:ca:9e:6b:86:a1:b2:9e:a4:83:80:c0:f3:
d4:2a:3e:e5:6f:98:43:87:91:13:74:bb:ab:7f:f5:27:4a:6f:
6b:5f:eb:5a:23:f8:19:ff:b2:bb:20:a6:46:a4:93:9f:54:40:
97:2c:c6:fd:60:4d:0c:83:20:8b:3f:02:25:af:7b:4f:d1:75:
96:92:c5:25:f0:79:35:65:40:08:14:59:16:25:e6:16:65:8e:
f3:ef:09:70:ae:0b:18:50:86:ba:3b:1c:06:c6:25:b5:c0:2a:
c9:78:79:05:07:54:70:23:c0:bd:90:d3:6e:66:bc:61:bf:b2:
5f:f0:61:25:da:21:96:36:84:ac:7c:5e:26:24:98:39:28:aa:
7c:21:37:b0:36:b3:23:23:e7:c5:f6:b4:fa:4d:0a:46:b5:39:
76:6b:a0:47:e4:9d:21:03:8a:c9:40:09:ee:2f:57:c3:c7:d6:
83:7b:43:7f:32:6b:2f:b6:75:02:e8:29:9a:f9:e1:7f:43:39:
08:bd:a4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:44 2025 by rpki-client