Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File: 0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier: 67ghY5Zlc6TcMZsSbQCTlcCFHEJXm5XKQfOpxNxVAcE=
Subject key identifier: B7:70:9F:A0:6A:85:6D:19:76:16:8C:EC:7B:CB:72:40:44:FB:6F:46
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer: /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial: 01961357F15F0A4E4A379AA11F50080A9A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number: 14DD
Signing time: Tue 08 Apr 2025 03:00:52 +0000
Manifest this update: Tue 08 Apr 2025 03:00:52 +0000
Manifest next update: Wed 09 Apr 2025 03:00:52 +0000
Files and hashes: 1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: X8zpnDQTQ6jtOoklbKaSGR9PlJdSkY+njS5iQIwBipE=)
2: YlrLpRr6jHVjZjhSp57OuuJNoDA.roa (hash: 3sLpE4GcZV46VhUEypK4IVzC6Mp0SDmiK7VScSwFOfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:57:f1:5f:0a:4e:4a:37:9a:a1:1f:50:08:0a:9a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Validity
Not Before: Apr 8 03:00:52 2025 GMT
Not After : Apr 9 03:00:52 2025 GMT
Subject: CN=b7709fa06a856d1976168cec7bcb724044fb6f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:80:69:74:3b:79:76:91:c9:13:e2:33:58:
9c:8c:a2:51:06:bd:a6:a8:76:f8:95:2c:64:78:00:
65:95:fe:7c:d2:5d:b1:60:c8:7b:fa:47:24:5c:a5:
ad:22:fa:77:f6:56:4e:a8:97:ff:e7:7b:c7:61:9b:
de:55:8d:b8:7f:09:8f:7a:d7:db:7f:07:f6:63:e8:
af:25:6d:3d:f2:a4:f7:5a:a4:4e:9b:70:6a:5c:cb:
c3:c7:88:fe:af:59:80:2e:7a:03:ef:e0:2b:ec:2d:
e4:b6:3b:8d:d7:01:82:61:be:8f:d6:a6:3f:ff:f4:
2e:49:70:a3:8b:8a:b7:a1:b8:8b:0a:e7:76:2f:15:
63:89:d0:93:1e:ea:88:ac:c3:c7:47:c6:a8:4a:2c:
6a:f2:16:26:8f:0f:bc:f1:f3:d0:3d:cf:c2:a7:47:
cf:12:20:6a:90:85:4c:75:0a:29:d7:f7:22:1e:8a:
7d:91:25:4e:63:c8:82:f6:27:c6:62:18:af:5b:d5:
ec:76:e8:71:5c:a2:03:1d:25:d3:38:28:c6:94:1e:
c4:02:ab:8d:c6:99:d9:c0:3e:3b:8b:f9:b8:f9:97:
06:92:b5:4d:e8:92:8a:12:ca:aa:b1:45:f0:48:19:
c7:fd:dd:8f:05:72:55:24:d3:37:c1:83:6f:d5:a2:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:70:9F:A0:6A:85:6D:19:76:16:8C:EC:7B:CB:72:40:44:FB:6F:46
X509v3 Authority Key Identifier:
keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6d:03:a9:8b:68:f6:c2:e8:c3:c3:b2:c8:3e:06:94:e7:09:
5a:eb:a3:d7:1a:5d:cf:be:39:67:fc:51:57:43:55:08:59:d1:
b2:52:ee:89:ed:fd:9d:fd:b9:85:18:38:f2:b1:95:d5:3b:0a:
a8:d5:60:e8:59:a8:25:12:3b:4c:ad:7d:65:8e:14:46:14:16:
b7:6d:23:94:e4:36:55:61:ef:ec:d4:7b:85:d5:ab:a8:04:86:
f6:6b:3a:de:65:d7:29:78:ed:90:69:85:f9:39:8b:b1:d5:38:
ca:9a:07:b8:82:ed:90:81:d3:70:a5:15:8e:ac:80:cf:4c:e8:
15:01:86:16:6a:14:ab:70:8a:01:62:1f:f9:eb:86:3a:d7:75:
83:99:b9:a3:62:1f:11:e6:74:e1:9c:6b:cb:0f:30:57:63:71:
12:6e:e6:e6:5d:74:c0:5d:69:a2:a0:1b:8e:2e:f0:a2:7c:a0:
24:34:08:e3:3f:a1:62:d2:3c:39:49:24:43:ca:55:37:97:02:
7e:a3:62:3a:d0:19:88:3f:6b:73:2b:73:6d:bb:43:21:c7:d7:
c6:a9:f7:fa:61:d2:52:d7:4a:88:40:27:02:e6:0c:09:65:8a:
e1:f7:fd:10:27:5f:a1:0a:19:97:59:b2:aa:7f:80:8f:83:2e:
ec:3f:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:06:26 2025 by rpki-client