Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
File: neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json)
Hash identifier: +eDOodkhbo+e79xfypWfiGNx7JG29qLzPdc6Niv8/W8=
Subject key identifier: 4C:EE:D7:3F:04:1A:85:38:F0:68:60:73:D9:94:F8:56:05:D8:0B:51
Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
Certificate issuer: /CN=9de05733efb8b3764ca93ee340988869d96603aa
Certificate serial: 019657CB2043E92773BF9CBDB319259AF0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
Manifest number: 052F
Signing time: Mon 21 Apr 2025 10:00:51 +0000
Manifest this update: Mon 21 Apr 2025 10:00:51 +0000
Manifest next update: Tue 22 Apr 2025 10:00:51 +0000
Files and hashes: 1: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: tT2Tcevbf4+JF+jBUdNVjadMIYN9bYX5roRVto232vQ=)
2: sqmMGt0eDKyreQvWI_6aFaF0fMI.roa (hash: qdLfu3h3QsYojhl/lJoW5BgE1PTZ02X+GGEq14T1m/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:20:43:e9:27:73:bf:9c:bd:b3:19:25:9a:f0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa
Validity
Not Before: Apr 21 10:00:51 2025 GMT
Not After : Apr 22 10:00:51 2025 GMT
Subject: CN=4ceed73f041a8538f0686073d994f85605d80b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:c5:af:7c:df:89:7c:3b:d8:72:dc:73:45:
f4:84:d8:82:a1:d8:04:1f:9a:86:0a:11:95:e0:e0:
a2:18:09:0c:a3:11:b1:f5:a9:79:f2:da:4f:65:01:
58:f7:cd:18:62:2c:ae:ff:7f:31:9e:bc:f0:aa:54:
e3:70:37:0f:d3:64:55:cd:9d:ca:9a:58:c9:36:8a:
1b:4c:b5:14:20:6c:e9:7a:81:e6:c7:d2:3c:87:cf:
1e:c1:b4:88:ee:a8:95:07:86:c4:81:35:d2:62:79:
19:71:83:33:a2:64:5e:37:23:fe:85:e1:d2:21:6f:
e5:10:e2:05:10:96:4b:43:28:b2:a4:38:1e:24:89:
17:47:b3:0b:27:8d:b8:27:49:9a:f6:71:eb:3b:dc:
5f:29:c6:2e:ad:d1:b1:e2:ae:65:30:84:a6:4e:93:
c7:9b:40:ad:a3:1c:03:8c:7d:4c:9a:fc:31:19:93:
de:34:81:92:a4:02:4e:2b:4d:59:e3:70:fd:26:8e:
25:65:80:f7:d5:99:f3:b0:de:51:25:ec:2c:bc:88:
10:f8:61:3e:2c:12:25:16:d9:7b:57:bf:34:03:61:
a4:ef:0a:9c:74:38:1d:1b:c9:87:37:14:83:63:cd:
47:21:fc:92:7b:5b:cf:30:26:b0:1f:f6:2e:8a:3e:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EE:D7:3F:04:1A:85:38:F0:68:60:73:D9:94:F8:56:05:D8:0B:51
X509v3 Authority Key Identifier:
keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:97:71:16:2b:ef:2d:24:a7:c7:28:4f:d6:b4:88:02:ef:0c:
aa:c2:b8:d1:da:a0:00:9b:5b:bb:f4:fd:58:88:2c:59:8c:79:
40:be:cb:f5:b4:d6:01:af:da:60:fe:96:45:52:b2:c3:06:ea:
75:c9:85:53:a1:60:30:23:7b:98:49:f1:b1:80:4b:5f:6f:73:
21:ca:c6:16:3f:ed:32:61:b9:13:47:ff:bf:fd:c1:cf:9b:d5:
56:62:63:07:7c:ce:87:80:80:53:ee:24:3a:e2:bd:cc:2a:5a:
d7:97:6a:6a:1b:74:79:aa:c5:dd:cc:da:1a:80:25:67:2d:1b:
69:fe:8a:57:c3:3e:c7:06:33:f7:86:a7:a7:bd:93:38:e5:3f:
fc:fb:32:a2:53:8a:46:28:c2:90:7b:90:3d:98:c9:66:47:e9:
85:d5:b2:58:e3:01:d7:7d:48:31:8c:46:46:11:00:2a:18:7e:
ce:19:5f:cf:df:1a:74:d5:ab:ab:7e:5a:84:03:ee:f8:88:4f:
26:bc:dc:16:90:b1:52:e5:8c:67:e1:61:94:64:02:ae:fc:ba:
e9:90:aa:72:8e:7a:6f:83:79:af:ff:d0:30:dc:9a:aa:66:30:
ab:2f:63:3c:d4:42:10:32:31:02:ed:ff:ae:96:b9:0c:ba:ce:
a9:b7:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:22 2025 by rpki-client