Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier: 1ByDapURW3VXWfbk+akXHvwUkckLPqvQ2nZ3r62txYk=
Subject key identifier: 3B:11:62:A4:AC:69:67:A5:D5:78:73:75:70:DC:13:B8:58:39:F9:5F
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 01964DEBFB763FD9916DFD73C38637EC0D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number: 095E
Signing time: Sat 19 Apr 2025 12:00:32 +0000
Manifest this update: Sat 19 Apr 2025 12:00:32 +0000
Manifest next update: Sun 20 Apr 2025 12:00:32 +0000
Files and hashes: 1: 7HgZFirs9to5YNlgGjCrLE4fFdw.roa (hash: gvtNC6tdiAxQLr0n4eBnmWFLLNsQSfj98rKVj8SvSuA=)
2: GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa (hash: rZYvabv/j2AaljGdwS148ssayLuXys6DbuYJ6bJxVGw=)
3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: U1JfvyGJmN5vd5aEPHTplFKDYWtYcSpHY0otNuz+JFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:fb:76:3f:d9:91:6d:fd:73:c3:86:37:ec:0d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Apr 19 12:00:32 2025 GMT
Not After : Apr 20 12:00:32 2025 GMT
Subject: CN=3b1162a4ac6967a5d578737570dc13b85839f95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:db:f1:30:ed:47:2b:c4:db:49:56:f0:6b:
bf:21:4b:3d:b0:05:8e:f1:63:40:75:64:d5:ce:d5:
74:97:52:32:87:40:ef:83:2a:52:f3:7c:20:80:ea:
09:7f:af:92:f2:24:c4:c2:83:85:6e:d6:3f:e5:59:
72:5e:23:36:94:46:cb:47:8f:71:1c:a3:35:2c:e6:
76:e9:0c:01:2a:97:47:25:d0:45:a3:76:30:9d:58:
1e:22:d7:34:d2:15:b0:93:6b:4a:db:33:c9:07:d7:
75:28:5d:fc:c1:5f:1e:c9:a5:aa:a0:5e:c8:d2:d1:
16:3a:f6:bc:94:29:d7:fa:73:88:09:74:82:81:01:
b4:77:5e:3e:06:00:48:ee:aa:cc:2d:ec:8c:bc:42:
a3:29:66:15:e3:88:18:18:26:40:90:7e:3e:48:ee:
cb:3e:99:80:e9:93:2a:fb:cd:75:9f:87:e0:b3:ad:
c7:eb:77:c0:e9:fd:27:58:68:93:e5:86:7a:c2:d6:
8f:65:75:a2:28:e3:41:0d:65:80:cb:1a:30:69:d4:
61:23:18:5f:f5:81:f9:11:a9:c0:d0:cc:1a:44:e7:
a6:a3:27:81:fc:f2:8d:af:ad:fc:85:78:3f:5b:f4:
4e:e9:a9:a6:0d:7a:f9:05:c1:1d:e3:f9:ff:3f:ca:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:11:62:A4:AC:69:67:A5:D5:78:73:75:70:DC:13:B8:58:39:F9:5F
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bd:64:98:bd:f2:d4:72:84:f5:4f:06:aa:a7:63:0e:be:3d:
31:fe:52:0c:71:e6:65:58:b7:51:7d:92:49:d2:c1:9a:5e:85:
c7:ce:30:1a:4b:c4:0a:b8:5c:32:87:7e:0b:c2:e0:81:89:53:
49:44:e3:48:93:ee:11:73:e4:38:df:c9:02:47:7c:39:9b:71:
0c:74:89:e9:9f:b7:8c:d2:12:f5:87:ee:33:b7:95:89:7c:de:
6d:b2:52:bf:5c:bd:76:8e:16:46:9a:b7:e2:d3:76:ed:1c:9c:
d6:45:94:5a:94:45:85:8f:f8:e5:79:92:79:e1:c0:08:73:3f:
de:c8:5f:a9:1b:f9:ca:73:f7:0b:50:cc:0c:ad:18:fa:03:d1:
ef:57:f5:8e:89:ff:15:1a:5b:bc:83:77:ac:56:60:b5:e7:74:
6c:03:5a:b0:c4:7e:1d:15:bf:b4:a7:96:15:fd:7a:26:45:c7:
5d:3e:68:36:37:36:18:72:3d:87:02:a1:32:b5:29:bf:76:8b:
e3:89:65:4a:81:a6:5f:a6:02:01:5f:ea:1b:54:4d:61:b9:27:
7e:47:86:bd:61:41:84:ec:11:87:7f:3e:d9:53:b3:a3:af:da:
e9:61:78:f3:52:ac:a1:0d:21:cb:24:39:a3:59:1c:ff:a8:7b:
a8:7a:2f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:52:12 2025 by rpki-client