Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: RN3F2agOuTEN1N92D9tyqGjtTf+PpvoL7wrWscl7FsY=
Subject key identifier: F3:45:4F:91:62:CA:C5:51:90:53:8A:BF:08:D1:49:AC:3B:7F:B0:59
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 019659B9B1E9308EDDBB107BF37079582F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 14D5
Signing time: Mon 21 Apr 2025 19:01:03 +0000
Manifest this update: Mon 21 Apr 2025 19:01:03 +0000
Manifest next update: Tue 22 Apr 2025 19:01:03 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: rZkv2c8MrZ8NwWMKS192jDbsthkJ+WqIwUrXuoNm62I=)
2: OwN_u8-wXQUeHGlWNCeV2-9Zw1E.roa (hash: GL8HC8nKjSwa4mRugn3DqDIjF1e/NuFqUhL9j08TswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:b1:e9:30:8e:dd:bb:10:7b:f3:70:79:58:2f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: Apr 21 19:01:03 2025 GMT
Not After : Apr 22 19:01:03 2025 GMT
Subject: CN=f3454f9162cac55190538abf08d149ac3b7fb059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:39:ba:f3:fa:1f:a1:fe:6f:1b:1f:b7:ec:
fa:dd:05:b9:67:dc:1e:6f:98:d1:f7:d1:46:70:2e:
fa:58:fb:57:74:8a:4b:58:b3:7c:22:41:8e:4f:7e:
a6:24:61:1f:c4:2a:98:5b:9a:1a:9a:ed:8e:a6:dd:
59:42:0c:d3:b5:25:73:ff:a9:17:6a:f9:46:f2:80:
2e:85:e7:e3:e0:d1:ab:42:8d:93:42:c8:d6:96:77:
41:cc:a5:3b:07:cc:88:27:54:e0:f3:92:6a:eb:5d:
f1:61:8e:29:f8:58:22:41:0a:5e:ee:20:7f:46:8e:
3e:34:5c:e4:0d:2e:4d:a5:ac:ac:ae:96:d9:74:c6:
bb:0d:55:c6:7f:cc:e8:28:18:7b:46:37:57:ed:d7:
2a:f1:8c:69:d1:fe:42:5a:7f:f1:a5:91:d5:94:2c:
23:d8:ec:92:8f:13:2f:95:ef:70:1e:a1:d8:3b:71:
a5:00:21:63:01:5a:41:3b:a2:f1:4a:11:f8:ae:6e:
8c:95:18:83:db:df:c8:80:84:26:7e:e3:48:d3:a9:
05:8f:93:3a:8e:4b:42:44:9e:63:04:c0:b6:c8:1e:
e5:dd:aa:6d:c4:39:64:23:29:8b:e4:3e:cd:7e:7e:
77:62:83:12:ea:83:57:e5:ae:45:d5:49:df:b0:27:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:45:4F:91:62:CA:C5:51:90:53:8A:BF:08:D1:49:AC:3B:7F:B0:59
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:46:3f:c9:e5:c3:6d:d7:29:48:e9:95:85:6a:64:57:4f:c2:
7c:3b:ae:75:cd:7c:d7:2e:eb:45:73:d9:92:df:58:7d:a8:63:
25:39:de:98:a1:b7:9e:23:fd:96:e1:8f:aa:19:40:b1:d5:a3:
80:5d:d1:bf:9b:9a:4b:2d:ac:0b:95:77:28:36:0a:57:55:e8:
60:7a:a8:3c:86:11:2d:a6:6a:66:b3:f8:a3:2a:79:91:f3:2e:
74:2f:74:21:d7:20:cd:34:a5:9e:78:b3:c4:e7:31:b2:ff:79:
ae:9c:6c:cd:56:f9:fb:cd:f9:40:80:52:96:a1:d7:da:b8:10:
16:d9:7f:1f:a8:cb:fc:66:d3:b8:d3:d8:64:32:00:7b:1d:7e:
ef:71:7e:95:71:12:e7:db:34:ac:b2:f3:d6:a0:8e:55:a3:87:
5b:50:7b:12:ce:dc:67:ea:f6:24:82:f7:ae:40:a1:b8:75:d2:
c0:29:97:4f:ab:29:78:4e:be:c0:81:18:ba:44:13:4b:d2:ff:
02:74:a3:81:65:46:fe:1d:6e:97:98:8b:5f:8f:fa:8f:a2:40:
af:e4:ba:ce:c7:92:32:23:f2:0a:fa:09:a5:a3:12:9e:0b:69:
95:6e:26:e0:77:cb:b8:b3:32:42:83:f6:58:4f:e5:a8:5d:25:
bf:e3:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:54:02 2025 by rpki-client