Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: lZviY+6n835UEY7gxAJfY7o0m4BZNp700He+tpV9PUM=
Subject key identifier: D0:5B:3A:CE:5F:88:46:38:09:1F:9B:62:51:9D:2E:92:CF:49:C3:45
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 019653B7977B86C0817B8AC0B1487A30790F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 1490
Signing time: Sun 20 Apr 2025 15:01:02 +0000
Manifest this update: Sun 20 Apr 2025 15:01:02 +0000
Manifest next update: Mon 21 Apr 2025 15:01:02 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: PNZv+1so/LoojX/ZcFgo9OridpmnJLJAoasaXUpyHKA=)
2: sO-QyC1vz5w60dvkaCQsXtLi8YA.roa (hash: wtWXsxxZV53+P/qICncBE0LIXN7QWpyRCdTXr4pbwmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:97:7b:86:c0:81:7b:8a:c0:b1:48:7a:30:79:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Apr 20 15:01:02 2025 GMT
Not After : Apr 21 15:01:02 2025 GMT
Subject: CN=d05b3ace5f884638091f9b62519d2e92cf49c345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:ac:73:b1:5e:cb:f0:96:c8:dd:2f:b3:67:
7e:75:bd:cf:40:53:92:b5:7f:81:33:e7:b3:14:3b:
b0:04:2d:58:a2:43:80:8e:0c:b3:26:39:3d:70:11:
a1:73:f9:79:80:6c:4b:be:98:2d:44:2a:d4:53:1d:
ed:16:2e:1e:85:d3:7f:96:a8:26:ee:95:f7:bf:a6:
f3:99:c4:db:d7:eb:d7:a7:4b:b8:68:a2:85:7a:63:
9b:77:d3:fc:b4:20:66:a7:ef:f8:42:81:ec:a9:8f:
da:d7:71:95:27:46:f8:66:85:e0:21:d1:2a:0b:c7:
da:e1:ef:f5:86:67:7a:79:13:81:56:48:c4:6c:4f:
b0:57:c0:55:02:65:dd:a3:b4:d7:e6:e9:cf:b5:08:
bb:cf:42:d3:ac:3d:05:b6:c4:d1:67:e6:00:f9:cc:
a8:97:a6:b0:8c:90:c7:d3:8a:e1:d8:08:ab:26:8f:
cc:49:ef:4b:88:bb:06:92:30:c6:6b:9e:3c:df:d7:
c3:00:04:40:f5:ef:d0:27:03:b5:c0:2a:6c:7e:59:
33:ac:ee:af:5e:8d:be:6c:da:55:e8:5a:3c:53:65:
d0:fc:2e:cf:96:17:98:29:61:75:26:eb:bb:ab:dd:
f0:3e:f8:5a:f1:2c:31:39:d5:2b:cb:03:74:f6:bb:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5B:3A:CE:5F:88:46:38:09:1F:9B:62:51:9D:2E:92:CF:49:C3:45
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:91:0b:4b:3d:c0:53:02:c7:60:60:a7:c1:aa:e4:6f:05:3d:
7c:d3:3b:59:91:7a:79:23:80:f1:97:18:ad:a9:4b:a6:16:88:
d2:40:ea:0a:bd:c9:2c:e9:50:c7:a2:00:de:61:6d:3e:19:67:
40:07:97:7b:42:12:79:d9:12:b3:49:0d:47:72:06:6e:1e:9e:
a3:f8:c1:07:3f:b7:7f:77:9d:8f:a5:b6:6d:74:64:6e:3c:84:
dd:05:d0:1b:bd:b8:b5:23:f8:77:86:eb:fa:91:dc:da:5e:98:
c0:49:fb:8d:ef:48:0a:db:af:c6:04:6e:da:0a:f8:55:e9:f4:
6e:10:45:5e:5b:21:82:9d:be:eb:8e:5b:6a:4e:d2:0d:9c:24:
89:88:0f:35:b7:ef:4e:d2:6b:a5:36:49:4a:5f:ea:a3:46:78:
10:ab:ce:1d:f9:9b:e4:df:33:d0:00:2c:ad:75:6f:ba:75:58:
2d:ab:3e:c5:66:09:b1:5f:74:88:7e:73:2c:40:85:00:91:96:
bc:e3:13:09:a6:ac:ca:05:69:e5:70:e4:b3:f9:35:7a:bf:0f:
23:12:0d:2c:3f:28:83:3b:4e:97:39:b7:43:3b:b7:46:9e:a7:
b2:02:e0:03:e3:1c:e4:5f:a6:d6:6f:92:fa:d0:75:fd:77:91:
77:fb:57:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:30:55 2025 by rpki-client