Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
File: NgqdJtuz6l36roO2GQit2Pxt028.mft (raw, json)
Hash identifier: bJbChdc3Zwo7zHKXgLFqOPc0782LFkyT5SyTezX9FUg=
Subject key identifier: 77:9C:2E:E0:CB:54:48:16:A9:61:BA:F6:F3:57:3C:1F:88:4F:BF:29
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial: 0196488E9E8FAF7A4B6167B68D6E400E5467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
Manifest number: 14FA
Signing time: Fri 18 Apr 2025 11:00:28 +0000
Manifest this update: Fri 18 Apr 2025 11:00:28 +0000
Manifest next update: Sat 19 Apr 2025 11:00:28 +0000
Files and hashes: 1: 8O6-gKb80MguFWMDjHISxDIUjOY.roa (hash: 3o+8tVrWRw5md2p0yBC1m89E5Wym1EPSdJ/KhkZ5Zfw=)
2: NgqdJtuz6l36roO2GQit2Pxt028.crl (hash: Xih1xbnvN2MLoa2T+U4g7XOAE8ZwGvrhEumBHY61aYM=)
3: Zi0j7h9kKDeUNaeEMFA--W7qxgc.roa (hash: X3ti0Mbq81jS2GwcXcG3SUj5PuFqGydxb+zfC6HvRS8=)
4: ng125dUOqVaBw3danc1rOaXrcqk.roa (hash: E63qId+nBBFGXNOzGBHEt5a6wlCWGVhiMwoeA9BRjGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:9e:8f:af:7a:4b:61:67:b6:8d:6e:40:0e:54:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Validity
Not Before: Apr 18 11:00:28 2025 GMT
Not After : Apr 19 11:00:28 2025 GMT
Subject: CN=779c2ee0cb544816a961baf6f3573c1f884fbf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0b:87:66:09:fa:66:27:a8:c2:17:a0:3f:83:
16:46:6f:47:3d:3e:e7:c0:78:c7:19:cb:6e:87:61:
b5:9b:cc:25:20:22:ec:e9:ae:25:db:ae:27:12:ff:
ef:f6:0e:98:c0:18:56:40:d5:f0:ca:d8:66:db:2b:
b2:d6:ec:7d:cb:65:20:1a:cb:df:32:62:16:d5:c9:
a8:84:c1:c7:8e:f6:ee:2f:91:71:7e:ab:ae:1a:cb:
fd:76:5f:05:b9:37:33:2c:3b:cd:fc:22:1a:45:9e:
5a:93:ec:b7:fb:d6:c5:4a:82:85:fe:a3:eb:88:01:
41:6a:ad:cb:df:ec:17:cb:9e:e5:b0:78:a8:e5:25:
0b:ea:6d:45:93:6b:3e:8e:d2:d5:ad:7d:b3:f9:19:
55:58:76:aa:ec:c5:fd:63:c2:f7:d4:6e:73:27:f9:
17:0c:7b:17:79:f2:ef:cb:ee:62:1a:db:1c:0a:46:
ae:d2:9e:4b:76:d6:1d:9e:86:aa:2e:a3:c2:09:b7:
3c:ee:68:85:69:23:a3:38:e3:0d:6a:86:f6:05:66:
b7:07:37:f4:da:ec:4a:9b:44:8c:87:ad:44:7b:2a:
17:fa:ec:76:51:84:15:4b:30:84:6a:d8:3d:0a:6d:
7a:b7:4d:04:0e:9f:13:f9:4d:62:84:19:42:2e:89:
52:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9C:2E:E0:CB:54:48:16:A9:61:BA:F6:F3:57:3C:1F:88:4F:BF:29
X509v3 Authority Key Identifier:
keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:28:b8:e4:89:8c:5a:7f:b3:24:61:1e:b7:06:06:8d:6c:91:
b9:1b:b5:8a:3a:9c:42:0d:24:6f:e2:f2:48:69:46:31:c8:d1:
fa:ba:22:28:d7:b5:5a:eb:a5:83:60:51:64:ad:a2:db:00:25:
81:91:4f:5d:30:7c:03:2d:a0:98:35:09:f7:a6:31:07:1a:90:
9e:da:f7:64:76:e7:25:4b:6a:63:8b:52:74:d6:0d:07:1f:8c:
ed:6e:e3:68:c1:b4:a0:0d:23:16:92:62:63:df:81:80:61:ad:
00:ed:c6:a5:e5:a3:75:02:3b:74:01:8a:7e:47:55:36:6e:85:
9a:1b:89:64:53:35:1c:c4:a7:3b:88:2d:11:03:50:25:66:42:
83:89:07:9e:bc:4d:63:1a:ce:9a:ca:10:fe:54:f6:5f:07:b2:
07:94:c0:c2:e4:77:02:43:65:ad:34:6b:3d:32:89:a3:e9:66:
40:73:79:4e:c4:03:9d:ca:af:3d:a8:d8:89:bc:e7:c7:c3:8f:
97:ce:55:c8:c6:66:06:28:cf:ac:8a:17:33:c8:01:f5:aa:92:
45:92:4c:40:02:57:4a:2c:f7:ec:55:03:0c:3f:b2:c1:1b:52:
ec:55:e5:85:b0:20:13:bc:31:a0:2e:33:4b:be:e6:f7:3d:7f:
d3:b4:80:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:18:14 2025 by rpki-client