Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File: neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier: 8pU4Q84vpSthA9KoKeeuAcmkMzGIgVS/blolsxtT6Xo=
Subject key identifier: B0:D9:71:66:66:97:18:FF:76:99:FE:DD:91:97:81:CA:5B:3D:1B:3B
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer: /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial: 019606784FF42C308B9E6BE95CC3B9CBCBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number: 0499
Signing time: Sat 05 Apr 2025 15:01:10 +0000
Manifest this update: Sat 05 Apr 2025 15:01:10 +0000
Manifest next update: Sun 06 Apr 2025 15:01:10 +0000
Files and hashes: 1: ZsqRMpcA5rVpeghbKlpto90ibM8.roa (hash: nVYdBvobjkBIWWz9Jd+uPsYyriFcHyHbwpsRZ8kZ4Ek=)
2: gM98BY1lyRIDiMmnpeavUnwI1rY.roa (hash: ve1xDMahiOfYFvEODore+1Lgn1TnHWQyebyINSLaR/8=)
3: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: NvRf54Ajy15cY6tf0JDW67/9O6zN45v1ib7gMc7WrBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:78:4f:f4:2c:30:8b:9e:6b:e9:5c:c3:b9:cb:cb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
Validity
Not Before: Apr 5 15:01:10 2025 GMT
Not After : Apr 6 15:01:10 2025 GMT
Subject: CN=b0d97166669718ff7699fedd919781ca5b3d1b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:3e:b6:a2:3c:ea:ef:26:05:6c:a6:02:39:
50:a8:0e:e3:6f:7d:4c:a6:ba:77:9a:1f:3e:9b:cb:
bf:95:4b:1d:0a:68:2d:f7:97:88:2b:36:18:6c:4f:
f4:f0:b9:97:3e:10:2a:4e:fd:ee:90:e7:62:e7:e1:
76:4c:a5:b1:da:d9:3a:9a:19:8f:4f:c4:98:b5:29:
62:10:f8:32:e0:63:3b:b3:b9:ae:0f:c5:a3:d3:9e:
95:ae:7a:a9:a5:2b:bf:48:ab:61:a7:39:6b:05:84:
3e:9d:8c:9b:16:4f:ae:52:fb:50:8e:20:ce:7a:4c:
dd:cd:70:54:ed:6f:b5:f3:6a:34:ab:91:91:49:b6:
7d:75:27:30:27:ca:19:68:97:4f:cd:4f:01:3e:5c:
0b:be:ae:9c:a2:16:6a:81:24:78:46:73:c6:1e:3f:
57:7c:2d:bb:3b:2f:1c:e9:2a:6a:cc:ce:f4:0b:6d:
44:36:fc:33:13:24:9e:87:49:b6:20:6d:c2:7e:61:
6a:83:1b:09:69:85:f6:92:79:79:e6:33:15:de:e1:
ec:f4:19:dd:70:c7:10:5a:77:2b:e9:9d:5a:bd:5d:
8a:ad:e7:18:ab:05:ad:e9:d6:69:3b:15:ae:82:1b:
f1:cb:c2:36:fc:83:5b:a8:60:37:d7:f9:4c:1a:88:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D9:71:66:66:97:18:FF:76:99:FE:DD:91:97:81:CA:5B:3D:1B:3B
X509v3 Authority Key Identifier:
keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:87:87:b2:e0:f6:b1:30:e4:f9:4b:8e:21:34:d2:3b:b4:86:
7d:f9:6a:3e:41:eb:02:58:88:43:76:9c:c9:49:95:8f:c5:99:
8b:3d:d8:60:8e:fd:12:c7:c8:f5:48:e7:88:4a:63:6c:b2:92:
1e:24:48:78:3f:91:c1:c5:fe:d6:4c:0e:64:99:ba:e0:1c:de:
c7:00:55:8a:bf:28:7c:7e:f3:21:92:fa:ba:42:a5:c7:df:0e:
22:2a:44:23:dd:31:2a:e9:0a:c8:1c:3c:25:6f:d4:3b:47:1a:
b8:83:a2:ca:54:59:dc:56:b1:69:3f:0d:03:6f:37:40:b2:d1:
5d:73:a1:5b:54:d3:54:00:48:95:d6:65:54:44:43:aa:e1:17:
88:f0:31:e8:18:c4:fb:9c:1b:e1:46:c8:fd:25:9f:f4:57:3f:
2c:12:75:8a:99:8b:96:6c:67:86:4f:74:54:00:25:d6:dd:ca:
5f:57:4e:a5:73:f5:97:5d:05:76:9a:d8:0d:7e:43:e0:37:90:
03:ca:df:0d:9c:22:2c:68:0b:e5:51:1e:5d:71:04:df:2c:44:
03:ee:45:f5:32:b3:0c:17:81:37:3c:76:ef:15:8d:31:72:b1:
97:e5:3a:87:bf:ec:9d:14:10:ec:ac:2c:30:03:25:a2:b1:2f:
f6:8a:2c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:30 2025 by rpki-client