Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: ctEc2oYihFKS1reHsDUpSx0iu2Osgpc8OPmaze7Pbak=
Subject key identifier: CF:3C:8F:49:D4:5F:6D:7F:AE:DA:C1:56:B1:BA:A4:65:3D:A4:52:E8
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019641E8C66246FCA9188FDEDE7D909228EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 04:01:36 +0000
Manifest this update: Thu 17 Apr 2025 04:01:36 +0000
Manifest next update: Fri 18 Apr 2025 04:01:36 +0000
Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=)
2: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=)
3: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=)
4: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: dHQBd87cSyojxIGBf85ezx79DOiw0b0S0dzaxKzHAC8=)
5: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=)
6: n6tTr6zCJWcy243UaHGcvc68Cuo.roa (hash: 0ym6kX5GeiUQfUcNj5Jvc+XuXgOTW8J6SoBaRmr08MM=)
7: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=)
8: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:e8:c6:62:46:fc:a9:18:8f:de:de:7d:90:92:28:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Apr 17 04:01:36 2025 GMT
Not After : Apr 18 04:01:36 2025 GMT
Subject: CN=cf3c8f49d45f6d7faedac156b1baa4653da452e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:9b:91:e6:f4:d3:58:4c:d1:2c:b1:ed:3e:
37:0e:ae:e0:90:ab:0c:5d:c8:3f:5a:f6:ef:8f:32:
d6:1e:66:a8:7b:78:d4:09:67:d4:86:ab:df:7b:0c:
84:c5:19:07:b5:24:0a:8c:47:b6:16:3a:42:c2:d6:
98:17:df:77:7e:eb:46:ac:21:6a:17:ab:4d:b2:bd:
b9:1c:45:fe:d6:fe:f1:9d:8a:e8:db:2f:23:bf:55:
2a:a1:67:66:00:e6:30:54:7e:7b:20:64:26:f7:fc:
5f:af:50:b9:86:67:0b:9c:3a:e7:33:44:44:d1:ed:
bb:26:6d:f0:d8:d0:15:5e:1a:66:e1:ad:b8:41:b8:
f2:91:71:c8:f2:40:70:cb:2d:9e:62:14:95:e0:71:
ab:79:e0:39:70:b9:73:c3:fa:43:86:51:c0:43:06:
0e:4d:80:44:76:b2:4c:1f:7a:ce:71:8e:cd:c8:47:
ee:d5:6b:d8:b1:48:c0:76:6e:89:a5:fe:ca:d7:aa:
97:2c:0d:af:4c:0a:cb:14:5f:4d:22:2c:65:90:e7:
28:21:5d:4d:6d:2d:54:52:b3:b4:e0:f4:a5:76:e1:
15:98:e8:16:60:56:67:0a:95:88:ff:7c:2d:35:db:
21:54:d0:88:aa:44:39:45:00:10:68:bf:57:ee:05:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3C:8F:49:D4:5F:6D:7F:AE:DA:C1:56:B1:BA:A4:65:3D:A4:52:E8
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e7:18:64:cd:f3:61:ff:7e:cc:20:07:3e:12:4f:7a:5d:2e:
f5:07:47:28:40:df:b8:32:fe:3a:93:84:a9:db:4b:af:bd:f0:
69:83:68:74:95:30:93:d9:21:d3:ef:c0:6f:34:76:1d:d4:f3:
7c:63:65:0a:a9:a1:4f:6d:12:2e:66:fe:88:e7:38:f8:53:f5:
46:30:ef:51:32:83:02:6b:81:a8:ca:b3:95:7d:ab:89:28:54:
48:bf:b4:cd:44:b9:ab:c4:c9:14:7a:f5:9b:85:17:02:af:67:
67:0f:69:4e:3c:cb:d7:2c:3b:26:62:f3:b4:ff:6d:f2:f0:c6:
59:90:6a:4a:e3:47:da:c8:ff:de:c5:9e:ad:83:38:d0:12:24:
5f:6b:ec:4b:9f:88:a2:a9:09:a5:86:f2:67:d4:52:28:f9:a8:
6a:5e:d1:b0:66:5a:09:27:69:61:18:ce:49:16:3d:e7:af:b1:
87:5f:73:4f:36:9c:34:45:63:88:40:5f:4f:76:1c:4c:c9:e0:
02:32:ed:5e:80:0d:a5:ab:93:20:0d:e7:90:19:2c:08:b1:85:
69:5a:21:a9:0f:20:f9:6a:0c:0c:83:6c:7d:bc:73:91:b2:db:
46:18:68:13:b1:1d:c8:04:e8:81:33:17:3c:33:47:91:04:f0:
e4:d3:c7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:11:18 2025 by rpki-client