Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier: vgBtO+JGNZDddn1zsF0Wp/d5Ym0iDArV1fowqRzyo7I=
Subject key identifier: 6A:58:C2:5C:AC:9B:48:54:17:AC:68:7C:38:EC:72:19:D6:DB:16:80
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 019646D79FE566598E6EB1B508D47689A2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number: 04D7
Signing time: Fri 18 Apr 2025 03:00:58 +0000
Manifest this update: Fri 18 Apr 2025 03:00:58 +0000
Manifest next update: Sat 19 Apr 2025 03:00:58 +0000
Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: 52JsKXnrCskAbXcAsku4gEHgPWTWfCjWm6nPkQKso6E=)
2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=)
3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:9f:e5:66:59:8e:6e:b1:b5:08:d4:76:89:a2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: Apr 18 03:00:58 2025 GMT
Not After : Apr 19 03:00:58 2025 GMT
Subject: CN=6a58c25cac9b485417ac687c38ec7219d6db1680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:81:d2:e7:05:99:73:f2:5c:2c:ff:d3:a9:
1f:f7:30:11:2f:44:53:8e:da:b2:dc:05:5b:cc:a9:
fa:fb:13:26:9f:76:7a:48:5f:f9:17:81:6a:0e:8d:
61:d8:e5:d5:46:a4:21:81:c9:b2:71:60:0c:f0:fa:
62:f8:44:c0:93:25:d5:4b:77:0b:99:4b:b1:4f:2b:
ef:7b:bd:49:8e:8b:59:4b:9a:fb:ce:51:11:96:0b:
bf:c1:92:7e:61:d7:f8:4f:df:ed:a9:e7:d9:0c:48:
5b:eb:92:9f:70:6b:84:b9:62:ce:c1:e1:71:52:66:
52:74:ca:4a:bf:2a:8a:11:c7:17:4a:f7:bd:03:44:
74:b2:c3:ab:39:b1:df:64:0c:9b:8e:52:08:8e:79:
76:ea:43:bb:69:b4:f5:fb:62:b5:b8:40:cb:4b:4e:
0d:cc:b0:17:4d:a1:50:a9:ff:ea:5e:59:8c:24:57:
6b:ef:a7:ce:af:03:d9:9c:27:2d:e2:f6:cb:66:5f:
f1:30:24:1e:8c:97:84:fc:24:f6:6f:a0:06:46:27:
2c:03:e7:55:5a:25:30:86:1b:89:f7:94:10:32:13:
7d:4a:15:81:3f:e9:0b:fb:68:15:06:76:4c:43:bf:
6a:cd:b3:3e:d5:cb:00:96:9d:2d:b2:09:31:12:5e:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:58:C2:5C:AC:9B:48:54:17:AC:68:7C:38:EC:72:19:D6:DB:16:80
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6d:29:cb:1b:2b:8c:de:3c:29:78:c7:44:86:2e:bb:aa:f6:
e1:af:7b:ea:95:32:ed:19:c9:bc:6c:cb:77:32:6d:0f:c6:16:
eb:d7:13:49:53:91:00:93:ee:a9:84:f6:a3:c5:14:78:ba:42:
55:c7:83:4f:57:d8:84:e7:7f:8d:cb:34:b0:e0:b7:0b:c3:4a:
d4:9c:16:e0:66:58:56:9f:fa:6a:35:88:96:c6:5e:2b:b0:ca:
31:33:c1:b6:23:1a:6c:b3:12:f6:2c:cc:f2:77:55:f6:ca:92:
2e:ed:de:ee:5f:82:c4:f3:9d:5f:82:b5:29:f7:ee:1b:21:de:
b3:6b:bd:d7:05:8e:83:fa:ad:63:2c:7d:93:88:e9:a9:f0:e3:
d3:27:94:f2:e9:56:b8:0b:52:71:67:28:a5:09:3d:ff:27:62:
a3:d0:75:ed:89:e6:ec:61:b5:ba:85:26:da:51:f7:e9:5e:c9:
30:65:40:24:db:dd:1c:60:04:a3:43:33:32:fc:70:8d:3a:7d:
79:5c:57:13:af:8d:84:54:83:9a:b5:6a:7c:e9:ce:08:f9:34:
e5:91:89:26:3f:eb:19:cb:04:69:7f:76:64:4f:26:42:f4:12:
91:af:8f:3d:2e:f9:bd:de:d5:52:73:27:fc:ec:69:d0:5e:31:
57:df:e7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:38:50 2025 by rpki-client