Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: 0lsEjpyY3qJmPjIpB56l1PT0Ycq841wj6l3re3aDNOU=
Subject key identifier: 65:13:30:9C:92:6B:EC:9A:2B:4A:42:EF:9C:65:03:D8:84:3F:0A:F5
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019638409B3ADC29186E3A6A3EF7F8C47485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 150C
Signing time: Tue 15 Apr 2025 07:01:20 +0000
Manifest this update: Tue 15 Apr 2025 07:01:20 +0000
Manifest next update: Wed 16 Apr 2025 07:01:20 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: oBv8/noB2ASRQ9H74oV2obQEjiA0JF+5WU5Vc9K1CJM=)
6: WX7sPJ6RhH3U5xnN-el0l4C0log.roa (hash: zkMfoRomzAgbM+6nX6pmWw/o4OyOrZ/9refp1cS1ytA=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:40:9b:3a:dc:29:18:6e:3a:6a:3e:f7:f8:c4:74:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Apr 15 07:01:20 2025 GMT
Not After : Apr 16 07:01:20 2025 GMT
Subject: CN=6513309c926bec9a2b4a42ef9c6503d8843f0af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:e6:d7:50:cc:81:99:c1:57:c2:ec:19:ca:
b4:f3:48:55:61:ac:be:f7:b1:53:2d:20:e7:83:f3:
56:55:12:80:62:c3:d1:76:63:37:fb:71:42:d9:43:
07:c9:4e:08:cc:b5:04:31:85:e1:57:e4:64:24:f2:
50:f4:a6:c4:a3:a3:1d:e7:06:21:d3:06:be:57:14:
fd:04:b0:f2:13:32:7d:8c:d6:bc:0e:ea:3f:65:9c:
bc:f2:a0:f6:7f:c2:cf:3e:57:cb:2b:4c:a6:82:90:
3d:94:c7:6c:1e:bf:cc:7a:94:df:a2:15:1d:b8:20:
37:4a:ba:9d:d6:25:51:28:61:60:e5:35:ad:ec:48:
99:ef:b5:3c:2f:b0:3e:57:44:90:cd:13:51:25:8a:
77:d9:f3:57:dd:90:7a:5f:df:b5:76:d8:90:72:35:
4a:85:46:9d:dd:6f:7c:39:a8:b5:55:b6:87:17:35:
c8:78:0b:03:a9:5b:6e:9f:db:f8:5e:18:bb:99:d8:
dc:18:e0:9f:ee:f4:29:52:a6:7a:a3:93:ed:7e:0f:
a8:0d:d4:0f:5f:97:71:c2:4c:3b:15:24:3a:7e:0b:
05:08:2f:74:5b:8f:bc:23:14:dc:5d:5e:ec:a6:6c:
1a:1c:ee:41:ae:1e:65:14:82:a6:2d:3b:f0:bc:07:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:13:30:9C:92:6B:EC:9A:2B:4A:42:EF:9C:65:03:D8:84:3F:0A:F5
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:62:07:58:fb:b8:ee:77:3a:e4:eb:ed:1d:30:0a:4e:e4:46:
11:15:a6:e0:1e:00:6f:2f:85:f8:07:c5:3a:bc:4e:30:c9:2b:
93:bc:1e:33:91:87:df:56:c3:3b:f1:d0:3e:69:57:7b:12:da:
68:82:22:17:05:53:c1:1d:aa:33:5c:e6:86:a6:a7:dd:d3:ed:
fc:ad:4f:4b:24:2b:38:cb:b0:d9:7a:94:33:0a:29:e9:dc:99:
67:36:6b:1e:d0:a0:e1:a0:39:55:87:25:b7:86:19:65:2c:24:
c4:e8:01:6d:a6:9f:f9:d9:65:5f:f3:1d:1e:1a:c5:9e:94:0f:
99:f6:38:3c:02:de:16:75:49:1b:98:25:9a:ae:d3:96:02:7f:
fb:fe:3e:9b:4c:75:99:89:cc:bf:e8:df:63:7c:97:6b:bc:f0:
20:fc:8a:bf:68:95:f6:83:06:79:cf:9d:1f:da:21:37:16:99:
31:00:d5:7c:0a:59:12:c1:50:f2:88:56:65:54:ff:b2:a3:fc:
d8:8f:70:59:bd:12:0b:71:d5:5a:e2:f5:7c:ba:e3:88:f2:f1:
c5:ea:38:0e:5e:c1:a8:8a:89:eb:6b:25:b4:89:dc:bc:15:1b:
6a:a4:dc:da:a9:77:ba:27:84:2e:02:d3:9b:63:30:8f:ea:73:
13:95:4f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:38:43 2025 by rpki-client