Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
File: NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft (raw, json)
Hash identifier: 988juSy8fsmkfnQmaK81xVjSpI6FU4dg8aAlWDRMwSc=
Subject key identifier: F6:62:E1:73:9F:F9:E9:81:45:63:11:32:2A:46:72:BD:5E:57:71:91
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Certificate issuer: /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial: 01965725E78134862179250692F9BE859590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 07:00:23 +0000
Manifest this update: Mon 21 Apr 2025 07:00:23 +0000
Manifest next update: Tue 22 Apr 2025 07:00:23 +0000
Files and hashes: 1: Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa (hash: +iXd1M4+bcqd1pD4b5qHzxAyt89KMtB2DGWb5orKRYY=)
2: NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl (hash: CsPz3MQ1ipwB/DwpJQFVSCOeX6Q0yDmOyw2pezFhxKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:e7:81:34:86:21:79:25:06:92:f9:be:85:95:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
Validity
Not Before: Apr 21 07:00:23 2025 GMT
Not After : Apr 22 07:00:23 2025 GMT
Subject: CN=f662e1739ff9e981456311322a4672bd5e577191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:18:b0:fb:59:26:cf:ee:9f:60:ba:0f:6d:
e2:62:d7:6d:a5:09:bb:33:12:f8:de:e7:29:5a:70:
e5:61:7e:7d:47:66:f0:52:77:1b:e7:65:91:e8:9a:
78:4f:b8:24:df:67:65:26:a2:fb:85:25:4e:72:00:
db:6d:00:ec:bc:bc:03:96:bc:ed:ae:14:69:1f:59:
74:0c:d4:5c:50:9a:ad:18:6f:0c:11:52:b7:98:6c:
f7:70:83:47:c5:9b:3f:2e:a5:75:76:19:06:95:8f:
e0:42:f9:07:64:0f:c3:27:93:88:a3:ae:da:28:19:
be:9c:0d:73:72:c1:9f:f0:6c:91:c8:0b:85:01:79:
30:32:b2:d3:ec:0b:87:c8:95:fc:e9:ba:eb:85:6f:
cd:56:ed:98:14:05:b5:ab:86:2c:82:b5:ea:1f:3c:
fd:89:f7:5f:ef:9d:93:37:ee:aa:3c:21:f9:06:3c:
99:e6:fc:07:9b:e6:69:b5:ea:14:22:42:89:e9:14:
68:3d:f4:93:65:1e:b3:c9:4b:f8:c0:f0:4a:9d:50:
17:2f:e0:c6:95:51:f0:b1:2d:48:b5:5f:5d:8b:e6:
e7:66:82:5e:6b:32:ff:19:29:3f:83:81:94:ac:68:
63:ea:4b:9a:40:fc:06:8a:7e:c7:4a:81:32:ca:be:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:62:E1:73:9F:F9:E9:81:45:63:11:32:2A:46:72:BD:5E:57:71:91
X509v3 Authority Key Identifier:
keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:17:f2:e3:89:99:92:48:98:5d:9f:0b:8d:18:53:6b:a6:d5:
54:39:8c:0c:40:9f:1e:58:4f:03:6b:0f:0a:79:83:83:6b:04:
e0:8e:7e:4b:c4:5a:f1:d2:ac:11:23:2b:50:32:cf:f4:18:9c:
e6:44:cb:ae:6c:fe:88:61:49:57:8c:e3:e0:74:df:16:cc:96:
b3:36:8d:26:12:07:5c:87:c1:47:34:15:b5:4e:6c:2a:24:c6:
dd:72:78:93:22:43:4e:23:0c:fe:11:68:eb:3b:7d:a6:0f:68:
4f:1f:1d:10:78:9a:f7:d4:e8:ea:44:b4:28:51:4d:1a:9a:b6:
d0:e3:b1:ce:9b:de:14:99:d4:f0:52:20:57:f5:80:d0:4d:9c:
46:28:d1:ef:04:57:dc:58:ef:01:72:3d:50:c1:68:1c:dc:10:
7c:c9:df:c0:a5:38:ea:65:97:89:5f:60:5c:29:d1:38:39:af:
41:51:af:66:1f:73:e6:8a:ab:ea:1b:a8:dc:21:a3:de:07:fd:
d2:d1:bb:3b:2b:28:20:fd:9b:ae:42:25:4c:5f:81:cb:f0:13:
a5:e0:75:2f:3a:eb:c5:2d:ac:96:81:7e:6a:86:78:6e:1b:bf:
f6:de:be:44:ff:44:80:eb:2c:7e:11:c5:3a:cf:61:c2:bf:a6:
4e:ac:60:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:11:48 2025 by rpki-client