Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
File: NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json)
Hash identifier: t7Sk1I3/B4/stT8qotfUnh0ZQdo05xQrVk6qypfwvA8=
Subject key identifier: 26:DC:78:5C:DC:72:98:46:C2:EA:CD:19:0B:7A:AA:E9:DC:43:CE:18
Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Certificate issuer: /CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Certificate serial: 019651C8AE9FBECC6456CD4C5D270E82B4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
Manifest number: 1041
Signing time: Sun 20 Apr 2025 06:00:28 +0000
Manifest this update: Sun 20 Apr 2025 06:00:28 +0000
Manifest next update: Mon 21 Apr 2025 06:00:28 +0000
Files and hashes: 1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: mWAdW2yMDSTFwBucm54yfo3Ln1dOS9l6r98TnkbaqB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:ae:9f:be:cc:64:56:cd:4c:5d:27:0e:82:b4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Validity
Not Before: Apr 20 06:00:28 2025 GMT
Not After : Apr 21 06:00:28 2025 GMT
Subject: CN=26dc785cdc729846c2eacd190b7aaae9dc43ce18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:38:79:4d:34:f0:e1:f1:92:e4:78:56:5a:
bd:9c:f0:90:27:88:e1:c7:c6:23:bc:e3:6e:a6:9a:
25:ff:3a:72:18:64:5d:f1:a9:ae:ae:98:bc:0b:5d:
59:4f:3d:db:4c:ca:15:55:d1:ac:29:5a:55:b7:71:
63:eb:e2:7b:d1:61:9b:19:88:6b:0b:78:b2:cf:19:
25:e2:32:16:97:74:7d:3a:9e:db:71:8d:80:0c:20:
af:10:d2:e4:c5:f8:c0:66:2d:8c:ee:a3:34:69:28:
c5:8d:c5:d2:e4:be:7d:ce:ff:e0:c3:d9:f4:03:fd:
88:0e:78:6b:79:4b:c6:3f:a9:19:00:9a:78:d9:17:
f8:f6:e4:23:51:3a:12:c0:47:02:fc:41:fd:f5:d0:
58:c0:bb:52:8d:cc:79:e7:a2:a9:25:7e:3a:e6:a6:
2f:d9:bc:9e:ff:83:03:58:6d:50:b3:ab:64:bd:9c:
06:9b:5e:8b:cc:af:71:41:f6:88:54:b7:c1:7a:86:
40:38:82:f0:5a:ad:1f:93:77:f5:cd:69:0a:5b:70:
76:89:07:37:8d:04:11:ed:a5:4b:64:07:fe:3d:54:
72:d2:9c:a7:90:82:f1:2c:b2:e5:50:6f:4a:e9:00:
fe:51:89:2f:19:8f:97:b6:ff:d3:e8:2a:ec:71:3c:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DC:78:5C:DC:72:98:46:C2:EA:CD:19:0B:7A:AA:E9:DC:43:CE:18
X509v3 Authority Key Identifier:
keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f8:4c:f2:20:93:42:ca:8b:ef:ed:bb:f2:a0:98:cb:b2:6e:
30:65:0a:78:10:ff:da:49:99:48:ec:3a:90:45:ca:21:d4:94:
93:a0:94:3a:e9:c9:bd:65:4a:e1:53:95:e3:1a:b9:fd:08:a5:
6d:ee:49:f4:9e:d7:8a:b1:15:91:86:fd:4a:fa:4b:aa:d5:44:
da:61:3c:5a:3b:b7:73:62:81:49:03:31:63:d1:8f:d1:6f:4e:
b4:4e:9c:13:9b:81:4a:57:41:19:7d:e1:ef:08:ea:62:fe:57:
64:fe:76:a7:a5:de:5f:22:e1:89:7c:7c:91:1d:f7:06:8f:c7:
9a:e4:63:7d:ab:87:fc:02:5e:57:79:77:3a:f6:df:38:02:c7:
ff:2b:ae:d5:62:c2:69:8a:96:b6:95:81:44:2c:02:6a:f2:ed:
61:c7:d4:28:5f:3c:c0:f2:aa:a8:87:c4:d4:d5:65:ec:80:c7:
78:67:89:53:35:de:59:3c:23:da:4a:98:ab:98:d2:6a:ab:e2:
22:59:b3:e7:70:62:60:77:98:71:f0:90:0d:5c:7a:a8:be:d9:
12:c3:00:e0:76:b1:3a:a1:18:72:3d:64:50:70:ea:be:5b:86:
5d:1e:6d:3c:08:ec:0c:49:ae:39:7e:04:b5:4c:68:ba:ae:85:
da:71:37:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:53:53 2025 by rpki-client