Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File: NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier: CAjb1u0CQsEHuYX14wYze1LBm+nq7kay1LXGYJUucuI=
Subject key identifier: E3:4E:02:16:B6:C1:71:52:58:44:35:8E:E6:B4:10:4A:6F:F1:5B:F0
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 01960A8C5A9A2C23ACD37A25CB10F38D6BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number: 14D9
Signing time: Sun 06 Apr 2025 10:01:32 +0000
Manifest this update: Sun 06 Apr 2025 10:01:32 +0000
Manifest next update: Mon 07 Apr 2025 10:01:32 +0000
Files and hashes: 1: KwzLAJFh9AChcSwdy64vpYAmPMw.roa (hash: gKP8z3trUWmnbUH4Fi3xjFDbQv59f3+z5G16CBeShsM=)
2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: Znt5D5wgzJcoPwBsZiT0SkEV4CfZC7Zgjr/hRIH0jig=)
3: xgRFqxuYECy3s3qxM6WfghCOWpk.roa (hash: C6vhgdbkPh06biK8G7xaWybwcmLZK2bGK2ryBwYlob0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:8c:5a:9a:2c:23:ac:d3:7a:25:cb:10:f3:8d:6b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: Apr 6 10:01:32 2025 GMT
Not After : Apr 7 10:01:32 2025 GMT
Subject: CN=e34e0216b6c171525844358ee6b4104a6ff15bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:83:42:87:e2:28:c1:67:12:9d:a4:3f:aa:
4e:ed:aa:ce:4d:0b:e3:59:44:2b:1c:ac:ef:9d:80:
32:41:3a:0e:6d:b4:53:f6:93:47:ff:cc:91:d6:95:
18:77:95:92:5f:aa:96:cb:63:fa:69:ce:98:52:8f:
70:a8:4d:29:1c:53:64:44:68:35:b2:e0:64:09:75:
18:93:81:5f:4b:69:f0:79:47:d2:3a:c0:1f:83:5a:
91:2b:8d:f2:4d:3b:4f:b0:1d:c7:da:41:8d:74:37:
98:a6:69:b8:4e:19:8b:95:0f:c4:88:bf:69:db:cd:
e5:88:ed:5c:da:6f:fa:c4:6f:86:20:77:58:30:fa:
38:78:da:b2:c7:0a:fc:be:61:98:9a:65:ed:dc:fe:
bc:d4:6f:ba:1a:a5:4c:8c:6d:77:63:7b:18:c0:61:
06:0f:20:8a:18:f3:1c:91:30:aa:ce:87:fc:79:0e:
80:02:17:43:26:8b:7f:af:7b:64:f2:40:63:30:97:
06:38:98:78:1f:f1:11:c1:45:5f:61:d7:7b:7c:bd:
2b:fa:4f:86:25:9f:a0:47:f0:f6:93:15:a1:72:18:
73:ec:fe:d1:db:20:77:82:93:96:63:8a:12:53:b7:
38:82:da:e4:ba:b2:f4:a6:89:9e:9c:9c:9f:26:4f:
e4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4E:02:16:B6:C1:71:52:58:44:35:8E:E6:B4:10:4A:6F:F1:5B:F0
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e3:36:58:e4:2e:05:8d:68:e3:91:ef:9e:69:3f:2d:c5:c9:
bf:e5:b4:08:61:5d:c7:c2:f7:c2:47:8f:9f:f9:47:0e:0b:9f:
8b:df:a6:ef:97:47:8e:ad:87:8b:b5:20:a3:38:83:cc:0f:88:
8e:74:54:94:08:07:95:8d:f7:6c:bc:9c:e9:69:e6:fa:c3:17:
f0:ee:6b:75:f8:93:15:48:36:07:7f:26:b1:08:a7:79:ec:a8:
49:1f:1a:17:74:e8:a7:42:bf:97:63:49:c4:70:fe:9e:79:5b:
b8:8c:ab:9f:af:3e:52:9c:7f:69:a7:0b:67:a0:9b:83:1f:25:
b7:f2:12:b0:d3:b7:c8:1e:ab:a8:97:b2:78:d1:9f:5b:89:76:
2d:64:22:a9:8d:4f:36:64:f0:38:a1:ec:a6:14:2c:20:95:7f:
9d:55:06:f5:4d:25:30:52:f5:c8:9e:d8:1e:34:9c:70:2a:66:
3c:67:ba:04:b0:14:80:30:00:9b:c5:50:b5:3d:b1:2c:a8:55:
c5:03:d0:a7:78:26:31:b3:8d:30:20:1e:7c:eb:0d:1b:76:39:
50:d6:d8:4d:7e:d4:63:cb:e5:44:f8:9f:59:66:79:82:8b:b9:
ff:13:3d:8d:a6:b5:3e:77:0f:35:73:b3:a4:b2:eb:b8:9f:c4:
80:c9:b8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:08:00 2025 by rpki-client