Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
File: NnBwsWnRGpYpEATjAA-bBNThEtM.mft (raw, json)
Hash identifier: 8b/K+qLn4ikQyDbN2JD3eVwO1gV7CKICziYMyqUbRhc=
Subject key identifier: 48:FF:67:36:D8:ED:59:A2:B8:5C:0C:22:A7:CC:F4:6A:5A:95:7F:33
Authority key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
Certificate issuer: /CN=367070b169d11a96291004e3000f9b04d4e112d3
Certificate serial: 01964D7EB3B5C8DAFABDE323060A071D9893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
Manifest number: 05DF
Signing time: Sat 19 Apr 2025 10:01:11 +0000
Manifest this update: Sat 19 Apr 2025 10:01:11 +0000
Manifest next update: Sun 20 Apr 2025 10:01:11 +0000
Files and hashes: 1: NnBwsWnRGpYpEATjAA-bBNThEtM.crl (hash: SODWzAXuspZZybNGqY0jqpbL2iHi1mO05CLTqIDIHLU=)
2: dVmeU4wC0TgcJ1mLjCj6WUgRoKU.roa (hash: Tr7wmryEwMRa1UVn0iohUCcmRld2nTxoTKpz/4davog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:b3:b5:c8:da:fa:bd:e3:23:06:0a:07:1d:98:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367070b169d11a96291004e3000f9b04d4e112d3
Validity
Not Before: Apr 19 10:01:11 2025 GMT
Not After : Apr 20 10:01:11 2025 GMT
Subject: CN=48ff6736d8ed59a2b85c0c22a7ccf46a5a957f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:5b:48:8a:13:45:9c:36:2c:4b:12:6e:77:
7d:68:ef:ab:26:97:15:bf:dd:ce:54:44:d2:6e:d8:
10:26:42:ed:54:d7:8e:e4:9c:17:15:cd:37:79:9b:
4e:2e:1e:ae:ea:b5:3c:4e:b6:65:af:b8:13:24:d0:
5f:43:51:64:ac:2e:71:14:89:3e:8a:3a:19:fd:b2:
63:8b:5d:01:1c:3c:47:ca:11:27:8a:ec:2f:d7:39:
97:55:b8:4a:50:89:45:3b:4d:cd:ec:a0:8e:d1:0f:
db:b8:3e:d3:0c:b5:7f:ab:8a:1b:f0:55:d4:7c:2a:
0d:ba:b8:77:b2:ef:32:48:eb:e9:43:88:02:13:28:
65:71:0b:c6:ab:ae:45:ba:da:b8:b3:db:54:7c:93:
0f:26:7c:8c:98:70:18:88:b1:b2:1c:64:3b:f7:ff:
ec:34:aa:da:3f:dc:c8:6d:08:a3:c5:a5:91:7e:d5:
1c:fb:a2:4d:f1:93:59:89:51:9d:55:96:92:62:89:
d0:b9:e2:f9:41:27:03:7a:4d:44:cd:7f:47:68:27:
ca:5b:7e:64:b1:f6:0d:ec:45:a9:ae:4f:32:a0:e1:
43:25:53:59:fc:2a:dd:9f:38:93:87:f9:16:2a:fb:
ff:6b:d4:3c:47:62:69:00:b0:a5:57:c2:3e:51:cf:
e8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:67:36:D8:ED:59:A2:B8:5C:0C:22:A7:CC:F4:6A:5A:95:7F:33
X509v3 Authority Key Identifier:
keyid:36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:35:88:11:a3:d6:b4:ba:b4:93:ef:39:c6:74:3c:b1:9f:fb:
db:4e:66:7a:3c:17:f6:27:e2:36:ba:54:8a:20:23:11:a7:92:
d8:c1:e7:13:4e:0d:c4:e2:c6:ff:31:2f:55:d6:9f:f6:a7:02:
88:53:58:e4:c0:89:ec:af:2e:6f:07:b0:38:85:4e:ab:a5:b9:
4c:ee:9d:51:33:a6:5a:cc:d2:fb:b4:f0:5e:30:fc:1c:36:35:
9c:b7:25:47:cc:a5:dc:ea:25:21:ba:39:8b:c2:06:4a:eb:34:
36:66:a5:8f:bd:09:f1:54:fb:14:9d:ce:88:aa:dd:70:c7:65:
ca:ff:d8:fb:74:d6:78:13:fc:ca:fb:98:bf:20:0a:9b:42:9e:
4d:b7:d2:53:87:6e:f6:0a:93:bb:41:18:24:0d:bd:ed:fb:a8:
13:40:01:6d:75:29:d4:5c:15:86:59:5e:10:73:ce:10:18:73:
09:5e:83:4f:83:31:1d:b8:70:e3:90:b8:2a:4f:0d:95:e1:0e:
2f:27:b0:75:a5:9d:8f:8e:c2:73:44:e1:8e:8d:d9:5e:4b:f8:
64:0c:76:22:cc:5a:11:7b:a0:d2:c1:2f:be:87:19:1c:9c:84:
18:53:44:72:37:a4:52:54:df:68:31:18:90:be:68:c6:ef:02:
10:1d:bf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:27 2025 by rpki-client