Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: cwMohQU0uBiKRALthSHiawp57S3ztShYMy40ghjm3SM=
Subject key identifier: C7:40:A0:FF:9F:1B:35:0B:7F:89:4C:30:77:A9:5A:B5:09:97:44:5E
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 0196477C3A2FA693C456C4F5FC400A0F13D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 0640
Signing time: Fri 18 Apr 2025 06:00:45 +0000
Manifest this update: Fri 18 Apr 2025 06:00:45 +0000
Manifest next update: Sat 19 Apr 2025 06:00:45 +0000
Files and hashes: 1: N2qV5YQb5W1epd7drhbbYWeDzW0.roa (hash: s6taKOmCqNjm3LC9TGmDbV/25/St/aCUYh2vIUbEIS0=)
2: PLSWkynWBozVrtkmXuniU53IS9U.roa (hash: Lsv4VTZqkFzdhWhhIHv70pB07NRxNMMpNt1Lwv3O/w4=)
3: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: Vq5rmtcB2+D5tzvuOlQjNw0OTmWlRAxflLy1xt3jyik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:7c:3a:2f:a6:93:c4:56:c4:f5:fc:40:0a:0f:13:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Apr 18 06:00:45 2025 GMT
Not After : Apr 19 06:00:45 2025 GMT
Subject: CN=c740a0ff9f1b350b7f894c3077a95ab50997445e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:df:4d:55:07:81:7a:0d:35:b5:73:73:2f:
7d:e0:42:6a:7d:e0:5f:3e:74:1f:2e:e0:2d:c8:25:
e1:d1:72:17:e0:b9:ec:8c:1d:56:94:a2:b9:22:40:
28:4b:66:af:82:68:14:33:bb:99:37:bd:33:95:e0:
26:63:e8:c6:28:92:5d:8f:6c:74:f1:02:69:2e:9e:
d7:2b:ec:c4:6f:c7:9b:9a:5a:86:f2:85:15:24:23:
4d:cd:4d:51:42:fd:8d:05:0f:79:fe:1c:a7:6a:da:
89:21:12:79:72:d1:cf:b2:2a:aa:cf:3c:d7:fb:13:
11:93:75:f9:fd:01:5b:eb:a9:55:e6:52:7a:d8:e3:
d4:13:b5:f8:ae:cc:eb:b5:90:bd:63:13:33:f8:b8:
46:2c:f9:85:7d:f8:61:b5:af:d3:2b:46:2a:c2:2e:
e6:50:4f:2f:ff:40:ad:3c:b0:b0:af:1f:41:28:51:
30:0b:e2:5b:57:00:a0:63:f7:02:7e:03:fd:79:06:
50:bb:13:64:eb:ba:ed:69:6e:bc:92:b2:3d:e3:08:
16:ac:f4:f5:61:22:f2:f8:d1:54:51:b0:33:f3:8e:
a0:15:fe:51:90:2b:4c:31:8e:4c:89:02:45:c6:11:
02:a9:61:e7:6a:a7:4c:43:bc:d1:bb:6a:3c:44:75:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:40:A0:FF:9F:1B:35:0B:7F:89:4C:30:77:A9:5A:B5:09:97:44:5E
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ce:12:50:df:9d:87:14:6b:f9:d3:fd:6a:54:cb:b6:c3:1c:
02:80:dc:c3:6e:b4:47:cc:45:00:21:7c:35:ef:82:63:ad:fb:
9a:6d:f9:c0:b5:b7:d9:54:69:15:6e:87:ee:0d:74:02:8c:e2:
6f:5c:d5:26:b3:a6:e0:0f:f2:19:97:0c:f4:e0:80:19:ec:6a:
9c:84:60:8d:6e:6d:23:2b:d1:b2:bc:a6:98:13:24:9c:e4:db:
e8:00:47:c8:67:8c:9b:c5:d7:a6:2f:72:9b:b6:ab:63:7a:45:
6e:76:cf:28:ac:44:31:f4:28:ec:78:ba:a4:05:1c:d9:e7:6e:
c8:f0:a4:5e:d8:f4:1e:22:fa:50:16:a4:ae:c4:c2:78:9b:b5:
a0:0c:f2:b7:0d:f4:44:76:22:6a:4f:e1:67:21:04:05:b0:78:
6b:76:66:2f:9e:a8:5c:7a:a7:df:70:2b:ff:1b:12:92:7e:24:
d9:ad:58:8e:6b:e2:08:82:13:d2:40:56:c3:86:c9:27:2e:b6:
3c:99:83:ef:0d:04:47:b0:69:ea:5d:b8:c3:2f:5c:49:f1:b3:
d2:f7:88:e2:9a:cc:db:0f:2a:c3:29:44:8d:e0:eb:51:fe:8d:
93:d4:a0:6c:62:e1:a8:d3:bb:14:75:f5:c3:8d:9c:ba:f9:46:
d6:53:91:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:05:04 2025 by rpki-client