Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier: s/teAYo8hA3RgOI3X8QYGQ1uYxHhPQhcSVfp/aeyTuw=
Subject key identifier: 28:DF:6B:A1:37:A3:1E:76:33:51:79:A6:9B:86:77:94:95:90:44:FE
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 0196439F4772185E1128B908D724D687A3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number: 11F9
Signing time: Thu 17 Apr 2025 12:00:34 +0000
Manifest this update: Thu 17 Apr 2025 12:00:34 +0000
Manifest next update: Fri 18 Apr 2025 12:00:34 +0000
Files and hashes: 1: GHI5fKOLnVPTORGJ-8HvgMn5I8g.roa (hash: tTyvweQSG7PSV/1T7+CqEyju3wttfhrfn44tpkM7ENI=)
2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: He9IL/xcDL9sgPsdMuUaFbAP15oOSeTlUFkGULebOno=)
3: xHwvN6-vM3aYD0WFb7ooENGYbZk.roa (hash: iMOiUeIxNdKNrUiqdP5pHSRFVDIEoaVwDT8Frv9xIdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:47:72:18:5e:11:28:b9:08:d7:24:d6:87:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Apr 17 12:00:34 2025 GMT
Not After : Apr 18 12:00:34 2025 GMT
Subject: CN=28df6ba137a31e76335179a69b867794959044fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:9f:1a:66:a1:e9:fd:97:6a:ca:ee:6e:2c:
2e:0a:e3:f3:c6:05:dc:0c:c2:ad:6e:6e:e7:62:33:
d0:25:3d:1d:7a:a7:67:71:ff:da:7b:ab:98:33:1b:
1e:64:72:0e:e6:1b:28:07:ae:b1:90:2b:15:af:0b:
ed:72:25:75:66:bd:f2:37:62:5a:3c:da:dc:f4:8a:
8a:3e:97:49:83:b3:5d:13:6e:5a:53:17:e7:be:11:
cb:e9:76:7b:fa:03:6e:96:23:d6:e2:78:74:6b:d3:
b0:63:4f:dc:f4:5d:6a:d7:1a:94:9b:c5:0b:0c:02:
7c:bf:bd:26:92:8c:88:68:be:58:9e:e5:14:0b:16:
1b:7d:7b:70:bd:c9:94:2b:f1:e0:1c:83:24:af:c5:
43:43:93:4d:48:a5:1a:9d:fc:92:77:f6:97:fd:ad:
fe:70:0b:f2:8d:97:fd:dd:16:46:85:fd:32:41:d1:
10:f8:f1:b9:3f:d4:1b:34:a5:25:44:f2:19:f6:12:
b2:1a:88:eb:b9:a4:9a:fc:b7:e6:a6:b4:7d:d7:49:
97:1a:83:09:bb:ee:72:db:9a:4a:7f:82:2c:ef:cd:
f2:91:ec:2b:1d:9f:ed:c5:2d:b7:8d:79:55:b1:85:
f8:1e:e1:21:8a:17:f6:61:00:99:24:91:c9:27:a9:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DF:6B:A1:37:A3:1E:76:33:51:79:A6:9B:86:77:94:95:90:44:FE
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dd:a6:15:12:b7:f7:a8:45:21:eb:22:56:b6:50:37:69:bb:
a2:9f:90:05:c4:48:b5:ce:b4:cb:0c:5c:86:f9:8d:97:a4:10:
9a:6e:c7:ea:52:bb:a3:25:c1:20:7c:eb:44:99:76:73:f4:8e:
fa:3f:b1:e3:84:6c:ce:0e:4b:8c:b0:88:a9:9a:93:b7:5a:04:
d6:91:2d:79:39:28:48:1a:7e:89:cc:a2:34:68:5f:fc:ec:e4:
1d:1e:b5:d2:64:09:c6:d8:dd:21:7c:f2:04:6b:78:92:5d:c8:
c6:64:0d:b4:15:d5:0c:8b:be:84:e3:31:b9:25:b8:82:3e:80:
21:e4:a1:ef:fe:f4:8b:42:d5:0d:45:51:17:a1:54:3f:77:9e:
5a:62:95:0f:10:c1:33:a1:7f:f4:7b:8d:f3:82:e5:ac:7a:e1:
47:06:1f:c4:50:6a:15:30:62:c6:8f:16:29:dd:0b:02:29:c0:
c1:d8:2f:d2:c2:c1:cc:b1:ee:c5:a9:dd:48:6f:1a:34:f5:05:
a1:e7:08:08:25:cc:cd:01:de:77:4f:fa:8a:40:82:ac:84:b3:
49:21:14:e6:4d:bf:68:44:fe:17:4e:4c:6c:9f:90:b0:f0:a3:
d4:7e:49:b0:29:a2:e5:00:07:bc:8f:c1:e6:86:34:84:d0:d2:
7c:44:9d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:59:09 2025 by rpki-client