Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: /gIOENRBUAwrDrc0NywsMMx1EKwiqJ4eWlkv8k35/VI=
Subject key identifier: 92:9E:D3:A0:77:97:02:CE:1A:53:94:12:9C:D5:FC:6F:E1:73:15:26
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 01964EC7F82E1F246B2D73DA0DAF6E812900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 0DBC
Signing time: Sat 19 Apr 2025 16:00:50 +0000
Manifest this update: Sat 19 Apr 2025 16:00:50 +0000
Manifest next update: Sun 20 Apr 2025 16:00:50 +0000
Files and hashes: 1: 1VjnRsjH9J2pm4uVe978n-iNrLc.roa (hash: WbD1CWbWE7mMQBvGdpMQAUMcAbXTa0wFyWWbYENUrVA=)
2: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: FPloFSmxXLIk0GFdPY8oW+ittHGRmD+Db9SMJ4fWB/Q=)
3: snr-oR1drnGUDE12am2Oc1SmmAE.roa (hash: ypW1nfFwE2qpQdtfuVLzUTdrQHGTdbKiKTowycflNh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:f8:2e:1f:24:6b:2d:73:da:0d:af:6e:81:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Apr 19 16:00:50 2025 GMT
Not After : Apr 20 16:00:50 2025 GMT
Subject: CN=929ed3a0779702ce1a5394129cd5fc6fe1731526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:41:2a:5f:c5:15:26:38:53:52:23:d3:3c:
00:be:76:9a:95:a6:02:77:9c:5b:47:f6:f4:5d:04:
0d:70:72:75:a4:9f:0f:d6:63:1a:1d:c2:6b:fb:31:
c4:f3:4e:74:00:0b:86:58:a9:98:ba:4f:87:cc:bd:
51:3a:30:33:2c:eb:e3:ef:91:1e:7c:21:c8:c0:07:
5c:25:0d:e5:10:a3:f2:ef:86:4c:ce:e2:c6:f5:6f:
e1:87:8c:e5:f4:5f:ec:0d:5a:e7:08:f7:a1:ab:7b:
24:76:20:63:6a:80:b8:dd:5f:9a:1f:2b:53:f9:ee:
80:2d:3b:5d:01:5a:eb:fd:2a:33:ee:87:12:7e:13:
cb:da:7f:67:8f:e6:ae:31:90:aa:53:c8:c3:25:82:
04:98:6f:0a:4b:01:b6:d1:16:b5:42:83:e5:78:27:
6b:c9:d9:96:66:c8:21:54:ea:7e:87:2d:29:59:74:
41:da:51:4d:7b:86:25:af:c6:3e:e7:17:ee:7f:cb:
f1:e5:e8:d9:7a:ff:96:3e:d3:9f:b6:8c:2b:09:23:
7e:d3:b1:50:5e:e1:38:87:99:a0:e3:b3:de:bf:69:
61:12:f8:d7:bb:7a:fb:80:ed:bc:0e:f8:f8:46:c2:
df:96:88:16:3b:37:5a:a6:8c:bd:99:0e:80:f7:d1:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9E:D3:A0:77:97:02:CE:1A:53:94:12:9C:D5:FC:6F:E1:73:15:26
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3a:43:d9:57:29:96:39:29:19:2a:3c:7e:7c:37:fc:c8:a4:
6e:f0:6a:9e:d2:07:03:51:55:c5:5f:1f:f7:c9:88:a2:8a:3c:
41:76:f3:5a:4f:ac:ea:c8:c8:90:f0:a5:7f:d9:13:f6:4a:30:
92:2b:03:ae:f8:b0:f6:64:cc:50:a5:54:06:6b:f7:64:cc:14:
a0:35:3b:b3:d3:96:8e:9a:c5:d8:5f:a7:10:9d:64:17:c7:3e:
02:24:0e:03:55:ff:2b:46:d7:fb:8e:7c:0c:b9:9d:36:ee:7a:
1f:23:6d:4d:80:1f:00:d5:cd:bb:85:57:4a:d1:a1:de:26:6d:
75:68:07:a9:2e:ac:d5:24:1c:9e:cd:42:dd:3f:c5:9b:bd:87:
e1:dd:0f:86:ab:18:7e:58:4c:ba:c7:ee:fe:ed:dc:0a:8c:87:
a1:6b:b6:5f:d4:41:1f:91:ef:6b:c2:6b:6f:bb:da:0c:29:f3:
b3:a9:f6:e4:11:23:20:0d:49:2d:94:c2:f4:f1:6c:06:67:7a:
c4:ad:f8:80:0f:84:9f:84:35:65:ae:d6:6e:33:37:85:fb:83:
6b:f9:8f:46:f4:c4:3b:3c:cb:1e:10:bf:6a:02:2e:56:c4:4b:
31:24:ab:27:ba:83:3d:be:f2:23:79:9e:44:9e:e9:9c:ac:be:
b9:ae:59:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:50 2025 by rpki-client