Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
File: npWhGdnBpdbj8-Ifb6hj2HouSw0.mft (raw, json)
Hash identifier: gG4SPHIK3mCs3MofnE77OejNG4V3gN3+zRxRhQCA6LE=
Subject key identifier: 44:28:12:69:35:A7:F9:1B:5B:28:0C:21:2F:04:11:9C:4A:DE:CA:F8
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 019590AB3A268354CE73FAC500765F8526C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
Manifest number: 1099
Signing time: Thu 13 Mar 2025 18:01:35 +0000
Manifest this update: Thu 13 Mar 2025 18:01:35 +0000
Manifest next update: Fri 14 Mar 2025 18:01:35 +0000
Files and hashes: 1: NZjfqu9x3wDiLJo6GWe02XnKyKc.roa (hash: qGIOcPlEtKKS51xxkiaAUzuK860Uixd+cejLEfWAaRA=)
2: npWhGdnBpdbj8-Ifb6hj2HouSw0.crl (hash: N8KwdvANEAOC0xRf+AN9Sk98I2b2IgEs/sGj8BS8cCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:ab:3a:26:83:54:ce:73:fa:c5:00:76:5f:85:26:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Mar 13 18:01:35 2025 GMT
Not After : Mar 14 18:01:35 2025 GMT
Subject: CN=4428126935a7f91b5b280c212f04119c4adecaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:d0:63:5b:02:51:ec:2f:6f:ac:d3:8f:bb:
9f:ea:bf:27:27:e3:42:ab:cb:5d:7f:9a:00:40:e7:
91:7e:55:4d:12:7f:9f:c6:52:ab:7a:dd:bf:78:fe:
53:a8:64:fc:49:9a:6f:7a:83:93:2f:8c:5d:ea:48:
36:56:28:1e:e6:c9:21:68:8a:99:f1:d6:4b:87:94:
cf:8d:a3:48:0e:e4:04:ba:c7:51:78:48:65:e0:50:
0d:eb:5d:79:5c:22:7d:79:60:34:83:8e:11:27:24:
70:68:4a:98:30:52:a7:54:b7:a5:6f:73:19:0d:7b:
9d:2f:94:26:1f:4c:c0:8a:e4:b9:61:3a:70:f9:53:
3b:24:28:8f:92:9d:12:b2:8f:38:e9:db:51:f1:fb:
3f:78:62:be:7a:b1:5a:38:a2:f2:51:e7:4f:94:f7:
90:31:d0:90:18:95:ca:0a:49:e9:fc:09:71:cf:0c:
4e:0f:5b:45:54:75:b5:4b:1e:39:25:b7:3b:a9:07:
78:c6:ba:7a:96:5d:98:4b:76:6b:ec:fa:e3:3a:c9:
0e:23:b2:84:7d:2f:2a:2d:5b:b4:29:68:28:23:33:
74:1b:c5:91:e2:92:db:21:03:21:0f:4d:14:70:bf:
6a:16:94:8b:49:63:88:65:de:be:f2:de:59:12:97:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:28:12:69:35:A7:F9:1B:5B:28:0C:21:2F:04:11:9C:4A:DE:CA:F8
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fa:ac:0f:6e:be:0e:cb:f4:e5:1d:01:ba:58:2d:da:bf:a5:
09:fa:a1:06:eb:1d:d6:8f:aa:2a:d5:ec:1e:4c:ca:24:90:4e:
11:ce:27:c1:9c:83:46:1e:d0:27:44:00:01:08:77:05:3c:ff:
dc:6c:37:22:06:4c:e8:9d:ea:e9:15:43:5d:19:ec:4d:09:3f:
ff:33:0b:5b:4a:a6:90:fa:47:21:2f:45:c6:87:eb:33:3a:f7:
35:0c:47:37:fb:e7:f5:66:4f:18:47:e4:e8:53:3d:23:dd:cf:
af:0b:8f:60:86:fe:dc:3c:65:86:7f:7b:08:cd:fe:90:15:46:
61:f3:a3:cf:d6:bc:87:54:a7:a7:2a:0c:d6:b7:22:0b:8f:ff:
d1:a4:c3:60:01:4b:0c:4f:01:2d:3a:c3:e3:47:f1:0f:78:b7:
67:0b:8b:34:02:b0:88:af:23:70:68:26:27:c9:5a:1b:28:4a:
b6:0e:b5:07:e8:8d:3d:6a:6e:27:66:6f:06:b5:be:58:cb:b0:
41:e8:e2:0f:5c:46:f5:aa:06:e2:e9:a1:35:41:30:af:03:e1:
43:96:b1:24:dd:fa:86:a8:92:40:9e:8a:37:95:9d:ed:9c:8a:
42:98:39:b0:ea:c4:ba:af:84:9b:6a:4d:da:84:29:aa:c5:f0:
16:6c:f4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:58 2025 by rpki-client