Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: zIpknskX2RCzp8mbJdV7EJ0KwihqZHLz0KGqeeKsHw0=
Subject key identifier: 09:F8:63:35:FC:B4:54:98:C8:C5:EB:81:6A:69:07:62:8D:9B:F0:7B
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 0196470E45EAB155021A666FD66DF51DB9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 0D7B
Signing time: Fri 18 Apr 2025 04:00:39 +0000
Manifest this update: Fri 18 Apr 2025 04:00:39 +0000
Manifest next update: Sat 19 Apr 2025 04:00:39 +0000
Files and hashes: 1: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: oxgBAeCNefv2O4NZVfpzaXmIzhrFZUp9VU8eBBi7fsc=)
2: ZFMFiXOWwPj8k4IMO6NkGD3u9_Y.roa (hash: d308Fz0xAcOGQMBvbHe9umSC8kJ11mxoDxfXwvbWkEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:0e:45:ea:b1:55:02:1a:66:6f:d6:6d:f5:1d:b9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Apr 18 04:00:39 2025 GMT
Not After : Apr 19 04:00:39 2025 GMT
Subject: CN=09f86335fcb45498c8c5eb816a6907628d9bf07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:61:e2:1a:f2:09:a8:ee:b8:0a:ef:df:28:
64:80:60:6f:54:8a:83:46:9c:8f:90:c0:b7:27:22:
40:1f:40:f3:f3:a1:dc:24:f2:90:9a:7a:78:46:20:
ce:21:03:37:69:d7:7e:7f:de:62:ae:bc:f5:ea:74:
56:a8:50:52:81:ea:a4:ba:78:08:ff:f4:d9:d9:d0:
65:4a:e8:42:56:c8:23:61:e5:dd:e0:39:6b:0d:c8:
5d:b8:56:e6:98:17:eb:02:18:d7:7e:90:8f:62:df:
f5:31:a3:30:ea:f6:37:13:73:2e:6d:53:1e:24:ab:
92:c4:9c:6c:3d:2e:f6:0f:b4:17:12:2e:cd:c8:ac:
82:2a:bf:b0:fb:8a:8f:43:bd:86:ad:b5:28:01:77:
50:99:fc:6f:6d:ae:71:41:99:70:9c:3b:8f:3a:26:
bb:76:93:d1:8d:f2:e8:b8:71:35:85:c4:b9:d6:95:
12:f7:11:8e:d8:ef:40:61:52:69:13:0c:aa:10:89:
db:c6:a8:bd:79:aa:f7:08:95:05:84:ce:c4:c4:7a:
87:23:f2:57:b7:46:9d:fe:d2:eb:11:df:1b:df:1c:
2c:1b:e9:d4:44:bc:5c:e7:90:4c:dd:d0:09:ec:97:
e6:f7:a5:0e:d0:bb:ed:85:88:61:a8:b8:f6:30:c3:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F8:63:35:FC:B4:54:98:C8:C5:EB:81:6A:69:07:62:8D:9B:F0:7B
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3b:36:31:bd:24:ea:3d:bd:6a:48:c7:4f:2e:b0:9d:1f:a1:
a6:c7:e7:da:e5:17:19:c5:44:07:70:44:5b:d7:36:1b:2a:65:
73:97:f4:7c:c3:f3:2b:c0:dd:a4:bc:43:f8:b2:14:8d:7e:49:
df:be:2b:68:16:a6:16:eb:a3:fb:05:7c:21:55:4a:f1:58:9c:
f8:1d:d4:49:bb:ee:d8:e7:1d:92:f8:95:75:4c:87:f0:ea:0b:
a1:50:1c:ec:f6:d7:8f:58:3c:40:5d:f2:5f:fa:fe:85:9b:08:
b9:31:c5:d2:c7:99:4f:58:7f:53:c8:ee:de:95:12:9d:29:2f:
f5:2e:57:1b:59:ec:94:d1:71:98:31:cf:62:a3:32:e8:d4:4a:
1c:fe:9c:73:ee:43:17:58:33:c4:95:d2:1f:66:9a:fe:16:36:
d7:be:01:a3:55:bb:9a:e0:10:5c:4a:53:65:17:39:10:52:4f:
80:aa:3e:9e:c4:91:28:dd:99:45:5c:d4:bf:eb:51:7f:40:c5:
85:29:e5:0d:13:36:83:55:09:48:be:92:9f:ea:81:84:e3:77:
c2:34:77:50:56:fe:62:5b:95:4c:90:ae:98:e5:45:95:78:8b:
7d:e7:97:10:f3:96:f8:c4:69:37:1f:56:63:24:04:fa:67:84:
81:69:57:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:54:42 2025 by rpki-client