Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json)
Hash identifier: euloOdJEtj5it6MSF0Fpt1UiiGxB8PBQ1h+Kot9m2f4=
Subject key identifier: 71:9A:6F:C4:15:77:F6:31:AA:21:09:AE:4B:99:93:9D:4A:C4:F4:50
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial: 0196545C10FE1143EB69A3F3786BBE006112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
Manifest number: 0A72
Signing time: Sun 20 Apr 2025 18:00:41 +0000
Manifest this update: Sun 20 Apr 2025 18:00:41 +0000
Manifest next update: Mon 21 Apr 2025 18:00:41 +0000
Files and hashes: 1: G2aa7vj-d_CA2HuKW-IASCzWaSQ.roa (hash: pv32os3ZPwMAxeQUj3RBQ+FwWykK77hFOgeqqDGQkeE=)
2: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: k65v+cZWN7dtIJFhkkjy2ponj2ICfWcC9frheBUI3xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:10:fe:11:43:eb:69:a3:f3:78:6b:be:00:61:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646213198899edfa8b42add473ada218748e104
Validity
Not Before: Apr 20 18:00:41 2025 GMT
Not After : Apr 21 18:00:41 2025 GMT
Subject: CN=719a6fc41577f631aa2109ae4b99939d4ac4f450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:c8:5a:72:9e:cc:51:59:24:39:f4:e8:b8:
6d:15:43:0e:af:7f:1a:67:c0:f0:ec:6a:24:01:98:
e1:8b:be:c8:0a:79:d0:e9:c1:75:3c:01:94:60:ea:
9f:47:ef:dd:4d:1e:1d:83:b0:02:da:ab:5b:63:11:
0f:22:33:0d:73:6b:36:88:10:bc:97:08:7d:ab:bc:
9b:d4:a2:38:60:90:69:38:4d:3d:aa:24:03:a6:ad:
b7:67:b9:f1:20:12:1c:ab:5a:72:84:03:d8:cd:97:
f4:39:d5:26:be:e5:5d:0e:57:df:ca:8e:be:26:3c:
b1:51:e3:77:68:16:ba:12:5a:df:72:eb:4f:df:5a:
df:70:0f:32:96:74:b3:1e:e0:12:ba:49:8a:25:43:
f1:df:74:97:6a:6a:c0:99:b3:5a:e2:bd:63:4a:d8:
51:f9:ba:fd:54:ce:a5:39:92:aa:34:d0:e3:67:a4:
7b:c3:29:56:df:3c:67:32:e5:f9:91:d8:9b:90:72:
aa:bf:df:8f:26:75:b6:05:0b:b5:39:d0:ed:71:b5:
81:cc:2c:81:23:0a:8a:24:5a:e1:96:09:7c:90:1a:
89:d5:75:ab:01:a2:33:2a:24:e0:79:73:95:ff:dd:
7e:10:0a:2c:21:a7:bf:c5:c5:c1:22:0f:97:e3:48:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:6F:C4:15:77:F6:31:AA:21:09:AE:4B:99:93:9D:4A:C4:F4:50
X509v3 Authority Key Identifier:
keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:43:32:d8:65:78:05:ef:bb:99:68:ae:75:83:9e:2d:cd:61:
c1:a2:1e:ac:4b:68:2c:b3:5a:ff:86:64:44:da:f1:d9:e1:64:
f9:f3:10:93:17:cc:28:4e:3a:e1:18:2b:23:73:e4:73:03:d3:
c8:13:30:d6:ae:88:22:c4:c6:8c:bb:d6:0c:ce:6e:80:b9:60:
6d:1a:3a:c3:7f:31:01:ac:1f:08:97:33:50:1f:8e:1b:7a:c1:
eb:97:9d:52:ab:f7:5c:25:d9:a2:fd:67:42:c7:22:00:3e:9f:
95:5e:33:b8:a8:f2:b7:c6:06:f4:38:e9:4b:e8:f4:8f:30:7b:
11:85:a5:b1:d7:51:ed:5a:90:d1:b1:a1:aa:ad:18:af:37:1c:
01:f7:dd:9e:3a:11:73:d3:cf:37:51:7d:0b:39:e5:e6:df:c6:
c1:21:46:a6:90:cc:8b:08:3d:c9:0c:1f:92:2f:8d:c8:a8:39:
14:2c:58:fd:3b:81:7c:e9:43:a4:cf:d2:a3:80:4e:03:8b:04:
46:f7:41:cd:c9:6e:32:9e:3c:6f:fd:cf:1a:2b:9e:65:21:5b:
70:31:d6:8f:be:57:e5:f8:b3:88:25:f8:f3:be:06:95:70:cd:
d6:a3:53:b8:45:d1:8c:4a:0e:11:e2:7d:08:60:11:a3:67:52:
b0:fb:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:15 2025 by rpki-client