Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: 0SLkD3llh5OPlwZeuongZ+PS+a6dWUu71dF+oHp3lEY=
Subject key identifier: C7:99:4A:DE:1C:EC:81:A8:20:04:EB:46:E2:95:CB:0A:63:43:16:D6
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 01963E79304207C49BBFBD4010134FFEF60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 14FA
Signing time: Wed 16 Apr 2025 12:00:51 +0000
Manifest this update: Wed 16 Apr 2025 12:00:51 +0000
Manifest next update: Thu 17 Apr 2025 12:00:51 +0000
Files and hashes: 1: 1bcuYr7QKJ5bW0bfcIYHS53yG6g.roa (hash: qd4P1coRqTY7B32E2jEnjJekCI9CLXdo/5/4fRHSsDk=)
2: 2yd3628VmNb462n9Ht_mrHJwpz4.roa (hash: jjvaAqc3q0c+UVUm7qyigUPHQ2zsUspQsTjOZ4ZjQ5E=)
3: 77kR0uenLneOf0_otMBTrdwkJ5I.roa (hash: kFgic4lpP8Yb+Wik/VcFSyZzSPM0vnTo7v0lGbnx3eU=)
4: An_xJWf4RJw4Ylw59J21Md85Jws.roa (hash: gk/epjcVW86jJdWfxESndHuaQolg8wlmkWBhHhLsN3Y=)
5: MMs4HnHsbdNr8Ew965SH5DIpvi4.roa (hash: Ku/6dybZerpifq4qXee8mDRjz4eG7rI5ajzOtuGjP0c=)
6: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: Biir+iisoxh+CTjKH6nFUgtbAr6a77QLGm3hIZcK4RA=)
7: byk_uVbEcBcJ5E54PZILxzilXqs.roa (hash: JCkW4yYVwvgxvyj62HKMLWieGutHlsi8Ja6vFazZOyk=)
8: s_AA60Ddfygbd8EKAGEg6mSlXwc.roa (hash: ENuKCW/gynViV0FOCDZJgVAAEXvbRuvjapJ167NV/i4=)
9: zbORAgVCBGdwMFpkpNpVU4F-JYE.roa (hash: bnmHuORo7L7E/r6zgTIFCwfAOxo5IKx9z46OH+yKYpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:79:30:42:07:c4:9b:bf:bd:40:10:13:4f:fe:f6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Apr 16 12:00:51 2025 GMT
Not After : Apr 17 12:00:51 2025 GMT
Subject: CN=c7994ade1cec81a82004eb46e295cb0a634316d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:df:d9:b7:b2:51:b2:f9:6a:e5:2e:59:4b:
3e:1a:c8:11:3a:41:22:8e:9b:17:57:55:6b:b4:77:
8b:e6:3c:53:55:01:ad:ab:6d:64:33:a6:10:e8:c3:
d6:8c:8f:9b:7d:b8:b5:b2:cd:c4:92:48:e7:8b:a0:
ff:36:38:ba:ca:a7:96:c1:49:76:c3:29:3e:57:6d:
4c:ee:87:0a:d7:50:bb:1b:61:87:53:33:8f:a1:88:
52:69:63:a3:45:74:b8:1c:d9:a0:44:c7:40:43:64:
d8:e7:98:fe:91:ee:5f:1b:89:2b:fd:30:21:50:f9:
36:e5:3a:bf:f2:ed:05:7e:de:a1:e6:c6:e9:05:91:
93:eb:57:4a:3b:36:19:e6:3e:3e:49:aa:fa:75:3f:
be:ab:90:29:8a:55:c5:eb:37:c1:fe:e0:64:8e:f0:
da:45:f3:8f:4c:84:47:41:e1:75:bb:ea:15:d9:bd:
1b:cb:7e:44:75:52:46:d1:cd:bd:29:cf:c6:b0:6d:
7b:fc:e6:b6:b7:c0:22:89:78:a9:c0:1b:15:18:36:
51:0e:23:30:7a:e3:ed:ea:1e:c8:38:99:77:18:a0:
96:cb:44:07:e9:7d:d3:bd:43:8a:48:43:b0:0b:34:
62:59:ae:a7:67:49:f8:02:00:90:f0:85:1f:40:4f:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:99:4A:DE:1C:EC:81:A8:20:04:EB:46:E2:95:CB:0A:63:43:16:D6
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ba:8a:e7:1d:41:4d:96:5b:13:14:ed:29:54:c0:ff:57:a8:
97:49:be:37:fd:27:93:86:96:72:04:58:13:54:a9:1d:7a:f0:
c2:7d:ad:fa:c4:04:1e:1b:e6:f1:78:0f:81:18:ee:f3:81:a6:
42:ef:f7:d7:af:fb:12:ef:1b:b5:d3:f3:7f:d4:d6:aa:a6:e9:
d8:96:a5:59:d5:e4:86:3b:74:ee:31:c7:23:9a:cf:e2:02:15:
a7:c2:78:80:77:c9:64:db:c5:42:ae:6d:f8:4d:88:ab:18:9c:
d0:e6:de:87:8b:a5:45:54:70:2d:01:25:ef:c6:f1:f7:c6:4b:
1a:b6:3d:a3:ce:ea:c9:7b:3d:b8:5c:4e:8f:4c:bb:97:35:fc:
2d:25:2f:b8:6c:be:c6:76:48:69:9c:84:87:0e:ab:8f:ba:7b:
b1:1c:00:b1:3b:29:f4:cd:e1:9a:bd:17:3e:4f:9e:b6:d3:69:
ee:17:22:22:c2:c0:07:f2:66:59:f7:dd:87:65:10:b3:c6:05:
7e:3f:6a:e6:74:59:19:be:f0:d6:e2:37:e2:a0:e4:c9:bd:e2:
64:e1:b6:eb:93:b9:58:fb:4a:aa:0d:e6:3b:54:8a:c5:54:96:
e6:88:8b:6f:59:20:8e:a4:53:d0:15:f9:f0:ca:25:45:c1:66:
3e:01:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:00:36 2025 by rpki-client