Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: MEjGPiqgXlenyL+P/Ex4V3KIu+folH/Ky7Xs3iwkz2A=
Subject key identifier: 76:48:3D:60:79:A8:0E:AF:89:C8:0E:79:4A:57:50:75:31:EA:93:B5
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 019650B660A34E26CF85ACB48C1CBC76869C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 08D1
Signing time: Sun 20 Apr 2025 01:00:51 +0000
Manifest this update: Sun 20 Apr 2025 01:00:51 +0000
Manifest next update: Mon 21 Apr 2025 01:00:51 +0000
Files and hashes: 1: DTF9ONSmCnj34QSV3oz7U0spqDo.roa (hash: Kw2YkPP6grSzeM7Vvpfj0GyDu4r4ER5vZalMBblwx+c=)
2: E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa (hash: hTQ5VP+ecunyC7viVfskT54aK8ITC6qcoUrC0ZEyNns=)
3: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: 1k1aiQ0Bnda9BFyypDAu9HfqD/yQNrzBc5BX1Q950tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:60:a3:4e:26:cf:85:ac:b4:8c:1c:bc:76:86:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Apr 20 01:00:51 2025 GMT
Not After : Apr 21 01:00:51 2025 GMT
Subject: CN=76483d6079a80eaf89c80e794a57507531ea93b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d7:c2:34:83:fa:8c:e8:ff:78:97:81:a9:ba:
ce:70:94:f7:bc:ea:a4:91:ed:1d:ff:42:5f:9a:64:
6b:bf:87:3a:57:d2:67:fe:41:34:a8:1e:ad:f9:f9:
e1:06:1e:a4:b8:ec:4a:33:f9:87:1e:1a:0f:65:54:
6f:21:ea:91:4b:9b:d3:8f:c9:6c:98:97:99:42:32:
51:8c:74:d1:db:58:55:40:7e:d8:49:0b:50:9b:33:
d4:b4:49:eb:d1:6b:6d:de:48:74:20:3e:74:a7:f1:
1d:0f:51:2e:33:6e:4e:53:df:c1:dc:b9:d3:b5:67:
48:5d:5b:d7:39:31:a6:69:f6:bb:39:38:46:9d:76:
48:81:b1:6b:bd:5b:a0:33:bc:cd:c9:78:5d:a8:ce:
2d:a3:00:34:ab:a1:ef:30:09:a1:32:27:9f:c2:4d:
72:94:68:bf:3c:94:44:f8:63:48:f0:23:0d:ce:de:
94:38:81:d7:83:21:7d:15:8f:e3:be:a1:41:44:3f:
ff:29:19:a2:61:be:1b:a7:59:42:b5:b6:e6:93:5f:
65:69:e8:d6:bb:bd:fb:1f:24:18:14:e8:8d:ae:67:
b3:a4:c3:a9:24:f6:04:69:e3:6c:28:38:bf:d9:c9:
bf:e4:ae:48:b7:50:23:c8:b5:6c:81:21:f4:11:05:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:48:3D:60:79:A8:0E:AF:89:C8:0E:79:4A:57:50:75:31:EA:93:B5
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:13:89:45:3e:27:0f:a2:b4:4a:cc:f8:04:13:21:70:51:8d:
97:95:5d:b5:d3:ea:b6:00:5e:2a:32:a9:1e:e0:5c:67:fa:f6:
e4:91:28:57:9e:39:a0:e6:b3:ce:70:3a:75:b6:09:67:2c:83:
e3:7d:e8:cf:61:cc:2c:68:a7:57:31:92:c2:79:7f:6a:35:b7:
28:ca:52:18:ee:2e:0d:54:de:c3:7d:24:50:46:09:ee:3f:3a:
b5:5f:b2:b9:cc:ee:65:72:73:44:1f:86:23:76:c6:25:e1:f4:
49:50:78:9e:a5:6f:e6:c7:e4:92:c0:d3:e0:0f:31:52:48:31:
1d:31:a2:b1:e2:1d:ab:84:64:fa:8a:ce:d0:8c:24:24:7c:30:
b8:d5:4b:e0:b9:4f:54:8e:3b:6a:95:3c:de:46:87:b9:ff:f6:
ec:5f:1b:41:8f:72:f4:dc:e8:c1:6a:92:21:ea:2c:4a:b2:1d:
b8:c8:2b:89:f7:cd:5b:db:fe:e1:b8:15:99:16:88:af:10:62:
42:d4:ff:8f:bb:15:b3:3f:df:4c:66:bb:8d:f6:27:18:a8:28:
98:20:6b:c7:da:a3:88:f5:1f:6a:49:d6:f9:64:a5:18:1a:77:
eb:b9:3e:a5:36:cc:27:d8:43:a5:9e:d0:02:2d:4f:84:4d:fd:
cd:d8:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:53 2025 by rpki-client