Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File: Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier: mN6dNvi3behXa+Z7r3OjIf29893bPykHKWoRSWhRPhU=
Subject key identifier: 31:12:2E:F1:43:9E:1E:3C:38:21:78:1F:F3:C2:E1:3A:81:22:37:C5
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 01964CD8FEFE9662863E68AF2995D305FCEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 07:00:11 +0000
Manifest this update: Sat 19 Apr 2025 07:00:11 +0000
Manifest next update: Sun 20 Apr 2025 07:00:11 +0000
Files and hashes: 1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: ttoZW3i3yIqWeX/x0m7OlTO/xp+9YeXIDWmKHUwXGt0=)
2: SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa (hash: 790cASmrwFRWvIHgSFvW34RkdQVbe9565zpCVGOf6tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d8:fe:fe:96:62:86:3e:68:af:29:95:d3:05:fc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: Apr 19 07:00:11 2025 GMT
Not After : Apr 20 07:00:11 2025 GMT
Subject: CN=31122ef1439e1e3c3821781ff3c2e13a812237c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:62:cb:bf:f1:3c:de:8e:ae:2a:cd:2a:62:
38:ae:fc:99:93:55:ae:98:4e:91:29:26:43:65:a3:
37:48:57:50:3d:67:b4:b4:fe:e3:68:ae:66:26:5a:
a6:7f:9d:0f:c0:8b:b6:43:60:3f:76:6c:14:e8:7c:
d6:37:0b:a2:9c:bd:2d:ee:24:32:6c:70:91:20:03:
2d:33:41:72:dd:d2:bd:c3:68:be:75:27:a8:d3:f2:
a7:52:2d:72:3b:ce:9a:98:58:d4:5d:dc:40:15:26:
10:10:33:09:c3:b0:c0:c5:15:72:25:63:1d:0a:16:
34:c2:a3:35:d8:3a:10:89:09:c7:ef:96:a1:30:94:
4b:2e:92:a3:5f:ed:5e:4c:7b:b9:94:ab:99:d7:b1:
b5:91:be:32:dc:48:36:90:22:55:fe:d6:c0:31:f4:
97:67:58:9d:30:eb:8c:21:74:59:68:bb:01:53:ec:
26:99:eb:31:af:64:aa:4a:7c:95:6d:71:64:a3:84:
b4:be:29:d8:c1:ff:b6:22:a6:c4:7f:c0:fe:33:73:
5b:ab:5e:be:ad:61:e2:23:98:83:21:a7:77:bc:13:
97:17:0a:75:5a:88:da:5a:14:9e:b7:c3:53:c7:f1:
b4:2e:98:3d:d3:8e:d2:8f:c2:04:e7:5d:81:50:94:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:12:2E:F1:43:9E:1E:3C:38:21:78:1F:F3:C2:E1:3A:81:22:37:C5
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:d5:48:65:2d:c8:6e:09:31:e7:9d:e2:1b:84:6e:bb:1f:0c:
5e:cb:20:d8:e9:b7:f7:36:73:29:20:be:0b:e4:42:ce:c6:3d:
64:65:ac:39:b7:98:a3:eb:93:b3:60:ee:07:85:e5:38:dc:b9:
3c:66:9d:c4:d8:2a:ac:dc:38:dd:a1:66:53:62:18:99:04:d3:
08:15:aa:86:92:35:4a:65:c8:e5:05:b5:87:4a:11:7f:39:12:
0a:e7:6d:25:b5:61:49:64:e4:1d:35:dc:73:51:46:2c:5e:94:
2d:e3:0f:13:9f:90:3b:21:cd:2a:22:49:fa:29:f4:7e:d1:ff:
32:00:cd:cb:d8:76:47:6d:e9:f5:16:39:93:43:da:65:93:28:
13:c8:f8:8b:38:fd:f1:9a:29:6a:46:dc:a6:21:39:2b:e9:5a:
d1:92:14:03:6e:68:96:86:59:bc:14:a6:ec:f4:24:50:71:0f:
45:15:18:27:74:c4:fe:a0:6f:9a:26:36:5f:3e:87:28:a9:a4:
ed:ed:df:37:7c:cb:23:53:23:a3:8f:86:04:d7:d6:b7:7e:f0:
f1:18:cc:c2:18:b2:61:38:62:e2:31:5c:05:75:b2:78:ac:c3:
a1:66:52:a1:d2:9e:6f:e5:7a:31:30:22:47:92:37:82:97:12:
d2:9d:34:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:31:36 2025 by rpki-client