Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json)
Hash identifier: +PqeEk5Rm5SGFquncQImO9pvZnI+0SCR7zRa+iF8GdI=
Subject key identifier: C0:58:B9:58:37:48:ED:7C:9A:3E:10:FE:3E:BD:D8:EF:A4:0E:1F:2A
Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Certificate serial: 019659828B626F2D4B2E9ECE21860CE8FCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
Manifest number: 01E0
Signing time: Mon 21 Apr 2025 18:00:49 +0000
Manifest this update: Mon 21 Apr 2025 18:00:49 +0000
Manifest next update: Tue 22 Apr 2025 18:00:49 +0000
Files and hashes: 1: MxQVcAiuW0p4EDIiEm7q3BWYvP8.roa (hash: JVFsJWGBLPgzxt9uY5l+yySS0Ei3Tn04Hx81eXPjKe4=)
2: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: s0ez7JCZWVOVSTkZkQ8Nxp8NnlEkvRignw5oCK5g7ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:8b:62:6f:2d:4b:2e:9e:ce:21:86:0c:e8:fc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Validity
Not Before: Apr 21 18:00:49 2025 GMT
Not After : Apr 22 18:00:49 2025 GMT
Subject: CN=c058b9583748ed7c9a3e10fe3ebdd8efa40e1f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:fd:d6:6e:c1:72:8d:45:40:22:84:c8:0f:
1d:3d:34:10:6d:f0:75:5d:33:93:4d:72:9c:72:07:
e9:95:ad:df:62:6b:c0:eb:bb:17:24:9e:63:dc:fc:
1b:86:a6:0f:e6:d4:d8:d0:cc:ed:8b:d6:d6:39:ad:
e1:18:40:01:4a:5f:2f:03:d6:05:90:e5:64:33:00:
68:74:cd:23:66:aa:64:67:73:ae:a1:c0:ff:fc:bc:
a8:ea:d3:41:e7:7f:17:8f:21:ee:cb:c3:21:e9:0c:
95:11:ec:62:37:9f:4b:4d:e0:35:a5:8c:10:91:2c:
51:6f:00:2a:5d:6f:c9:cd:2e:aa:2f:2e:24:a6:07:
a3:94:87:c1:ac:64:c0:e5:bd:99:3f:10:34:0f:c3:
33:a6:b4:c9:59:32:6f:8c:57:93:31:44:3c:80:e5:
af:74:55:bf:78:dc:39:d9:a5:ad:f8:c1:10:0a:d4:
a9:94:58:67:7f:39:61:61:31:62:2b:d9:d7:03:0a:
29:c6:ac:76:65:d3:a5:93:01:9c:57:f2:db:6a:96:
12:15:57:d2:a8:fb:5c:f6:d4:fc:f3:cb:3b:6b:37:
b9:4a:69:99:79:2a:d5:20:5b:17:d2:cd:3f:ed:19:
20:53:32:ec:6e:ec:67:c8:fe:e8:5f:ed:ab:14:e8:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:58:B9:58:37:48:ED:7C:9A:3E:10:FE:3E:BD:D8:EF:A4:0E:1F:2A
X509v3 Authority Key Identifier:
keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:88:af:d1:99:98:31:5d:3d:4c:ba:58:1f:51:ad:68:96:d4:
5d:7a:e2:be:51:11:24:84:a5:cb:c0:47:b2:2a:00:6d:3d:2b:
4c:fa:9d:36:64:25:4c:e1:9c:66:1a:d9:24:3e:34:c3:03:7a:
30:98:23:b1:f3:fc:9d:c1:82:3e:4c:57:97:ac:f1:f3:6c:94:
46:ec:c8:4f:26:15:30:04:2f:62:83:01:4c:4f:3a:9a:fc:a4:
f2:17:e5:44:bb:2b:91:40:f7:03:b6:42:f3:1f:9c:e9:b2:05:
d1:3b:d9:ca:2a:a6:d7:25:2d:76:d5:5d:51:71:29:18:13:83:
3a:b6:58:6f:ba:09:a6:5d:48:ce:bd:43:35:6c:4e:8c:ac:a5:
3c:0e:7c:62:15:77:89:b8:26:38:39:a8:ae:2c:46:77:4a:de:
d7:20:12:17:1e:01:07:97:e3:fb:19:dc:e8:86:f3:14:4b:38:
45:68:11:65:91:58:ad:40:02:06:9e:5c:69:f9:c9:8b:df:e6:
94:70:67:05:4e:1e:9a:56:ec:fc:22:f4:20:b5:01:60:42:3a:
b5:5a:56:8b:e7:19:32:ef:b1:0d:76:ba:fb:72:78:68:eb:b6:
32:2a:d5:14:f6:17:f8:99:4d:fc:69:2b:55:79:3a:77:55:b5:
4b:2a:2e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:09:29 2025 by rpki-client