Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
File: NkUaLqQK8XFeYxMWlGiZaspxu4o.mft (raw, json)
Hash identifier: uT3PnxKpOY49VuAtj0Q5UTtGyNdPnViJBpPrexdC1T0=
Subject key identifier: D3:0A:5D:9C:E7:82:58:40:C3:86:CE:67:DC:83:08:94:0F:33:66:5D
Authority key identifier: 36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
Certificate issuer: /CN=36451a2ea40af1715e6313169468996aca71bb8a
Certificate serial: 019653B740DAB2B7CD3508E1B56D212D8C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
Manifest number: 0A42
Signing time: Sun 20 Apr 2025 15:00:40 +0000
Manifest this update: Sun 20 Apr 2025 15:00:40 +0000
Manifest next update: Mon 21 Apr 2025 15:00:40 +0000
Files and hashes: 1: NkUaLqQK8XFeYxMWlGiZaspxu4o.crl (hash: aBkx4/Y10sAACVuTS4Pi9oeYEJzXhYrXLSmh65YVlbw=)
2: O0F84RWu36-icdnEP0gqMSZmFC0.roa (hash: VjIGx/MTrmEnOtVvtOZHwU506/ftw5kzWXyYKquguXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:40:da:b2:b7:cd:35:08:e1:b5:6d:21:2d:8c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36451a2ea40af1715e6313169468996aca71bb8a
Validity
Not Before: Apr 20 15:00:40 2025 GMT
Not After : Apr 21 15:00:40 2025 GMT
Subject: CN=d30a5d9ce7825840c386ce67dc8308940f33665d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:31:ed:0e:af:70:82:91:42:85:08:d5:3c:
a2:3f:7a:0c:35:31:f6:c8:69:59:e5:a7:57:33:b6:
f5:11:25:d6:b6:f2:4b:b5:50:91:3e:f7:c5:c3:2b:
42:9e:60:fc:95:4e:3b:28:e3:37:c2:bf:de:ed:6e:
76:47:a4:c4:6e:87:3e:9e:7b:5b:84:f8:cb:82:b2:
13:e1:90:50:2f:40:e9:88:86:a6:6e:e7:a7:45:35:
3e:f8:fe:df:fc:ff:bd:18:ab:6e:84:a1:a5:3d:98:
ea:fb:49:56:57:83:79:96:14:58:58:ee:ee:ce:3b:
e9:f1:2e:58:b7:5f:8d:f0:80:db:78:0e:ee:52:ed:
26:df:e3:ee:e1:ed:cd:fb:27:88:63:0c:68:4e:2e:
95:8b:13:01:ab:0d:c3:f9:f5:11:7e:ce:70:df:0d:
38:49:2b:00:64:d0:a6:44:23:fd:34:0d:6e:9b:97:
b0:29:fd:3a:4e:75:be:05:bb:5e:1c:2a:77:61:8d:
2f:8d:0b:25:69:20:d8:20:31:20:f1:c4:e3:64:40:
f0:f8:18:89:dc:66:d7:12:f4:e3:e6:f1:4b:83:43:
86:7e:a9:b8:8c:58:5a:81:6b:88:73:79:cd:9e:e7:
a5:8e:ed:fd:6b:14:42:5e:95:96:f9:b5:73:f1:ca:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0A:5D:9C:E7:82:58:40:C3:86:CE:67:DC:83:08:94:0F:33:66:5D
X509v3 Authority Key Identifier:
keyid:36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:94:f4:a4:53:f9:22:af:59:1f:99:c2:92:9b:de:84:08:57:
8d:9a:91:c8:da:ac:78:ac:e8:22:5a:c3:e0:2f:df:7f:14:23:
5e:f7:14:c4:ed:ab:26:45:5a:e4:ce:80:ef:17:3a:1e:a1:d4:
2d:b3:79:7e:93:5a:8f:4b:44:32:ae:14:d2:d6:bc:51:53:34:
07:9f:df:d8:92:4c:4c:bd:20:5f:99:ef:c2:32:4a:e2:08:ca:
91:d1:35:6a:46:98:6d:e0:a8:b3:1a:cf:78:15:fa:95:2f:46:
fa:1d:8c:94:3f:97:09:45:5f:6c:8b:74:a0:97:20:27:cf:df:
c3:db:75:d0:64:34:e6:bf:07:a5:25:58:fd:04:24:d7:1b:de:
08:d5:2b:8b:fc:a2:f5:b5:06:70:b4:9f:69:c5:59:9d:a0:15:
44:7f:b3:78:59:81:15:f0:5f:ae:c4:da:87:94:76:6b:17:83:
5e:61:db:9d:17:ab:9a:8f:40:42:f6:ec:8b:9a:03:cd:07:9b:
90:3c:b2:85:b0:d8:86:87:07:17:a2:2e:e4:01:e1:ed:bf:be:
09:df:66:02:0e:e2:0f:7d:1b:02:2d:0a:b6:a2:51:0f:7b:59:
51:20:b4:c8:3c:7b:5e:f0:fd:0c:67:52:b1:a9:4a:10:00:ae:
e5:9f:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:58:06 2025 by rpki-client