Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: inNO8EECGHFs7J0vGplBf+ILfAUEydWejuxff9xonZg=
Subject key identifier: 05:BB:5F:AF:D9:BD:9E:89:28:62:AD:39:C7:45:78:DB:F6:5A:FB:0B
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 01964F6C76B5AEED16AE833C6508594C6F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 0EF6
Signing time: Sat 19 Apr 2025 19:00:30 +0000
Manifest this update: Sat 19 Apr 2025 19:00:30 +0000
Manifest next update: Sun 20 Apr 2025 19:00:30 +0000
Files and hashes: 1: BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa (hash: t+OljMW5uOHxrHIlucZj5mZPbb09wnIuaUx+FWzOywc=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: n81z+9a4kDn1kqT60dezxlOZIJTN0c1hMpfIgKSkOGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:76:b5:ae:ed:16:ae:83:3c:65:08:59:4c:6f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Apr 19 19:00:30 2025 GMT
Not After : Apr 20 19:00:30 2025 GMT
Subject: CN=05bb5fafd9bd9e892862ad39c74578dbf65afb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:14:25:ce:35:3d:b8:0f:d1:38:48:a0:91:
1e:13:1d:cd:f7:6d:c3:da:6d:b8:8c:4e:89:6b:dd:
02:51:63:a1:43:0f:c9:5f:f2:28:1e:cf:8f:62:c5:
a4:ba:5e:9d:b0:53:24:5a:9f:b2:df:6c:0f:df:89:
8c:d3:18:87:5a:09:26:83:cc:07:09:91:84:92:cf:
5c:11:81:d2:a6:74:bb:17:a5:31:9e:67:83:c4:80:
22:17:c4:ef:83:18:b9:c8:f0:71:6a:e2:a4:fd:59:
12:c4:05:8f:83:73:79:29:05:83:4a:79:3f:76:b1:
c6:bf:40:86:04:66:3e:d1:19:34:6a:ee:e5:26:52:
f2:e4:0c:2b:e6:8e:85:04:fc:a6:17:e1:2b:19:e5:
e8:32:11:86:ad:56:ba:e5:22:9d:91:c9:d5:fd:ff:
7d:d4:f6:fb:e5:d0:2a:5a:5e:5c:ce:c2:1d:bd:04:
35:6a:15:3a:5a:49:19:6a:b5:0d:47:11:e7:34:bb:
1f:3e:ae:24:67:44:4e:0a:76:3b:09:8e:24:b5:e6:
72:e9:83:de:b1:71:7e:d6:5f:6b:89:45:57:68:45:
df:76:1f:d1:ef:56:b8:26:83:99:94:64:1d:eb:9b:
cd:90:ba:a4:f2:19:34:a1:52:a8:19:5e:2c:9e:28:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BB:5F:AF:D9:BD:9E:89:28:62:AD:39:C7:45:78:DB:F6:5A:FB:0B
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ff:be:bb:23:4e:53:d6:b2:24:a6:6a:c4:59:8e:4e:a3:b4:
88:25:16:05:91:29:90:24:7f:55:f9:0f:cc:c1:69:3a:09:c8:
10:f4:b8:60:d5:e9:e7:72:1c:94:fc:67:a9:a5:ae:46:d7:e8:
6b:fd:08:15:9a:9d:a7:7f:9a:46:38:8f:e3:75:34:6a:16:0b:
fd:f3:65:bb:55:99:87:7b:d6:f3:4d:e9:a5:b3:6b:b5:ec:9c:
41:4b:c5:1d:29:49:d9:f7:b8:25:49:78:fa:b7:dd:d0:4f:a6:
e6:5e:7e:f0:8d:85:cb:2c:bf:f9:d9:97:85:71:27:60:b8:68:
cc:5a:75:32:eb:27:bf:b8:da:35:16:79:ee:94:bd:0a:8c:90:
58:b7:08:71:f8:2d:5c:77:66:64:6d:de:7c:20:3b:f8:6d:09:
3e:01:27:55:96:96:44:c0:a3:b4:bc:1b:6d:49:87:8b:78:cf:
33:20:d5:1b:a7:3c:d0:1d:8d:41:29:13:4c:08:18:fb:32:52:
88:92:90:07:2a:89:1e:8a:ad:e9:db:e8:c3:65:5f:85:f6:f8:
be:83:a4:89:dc:55:7b:6f:54:c9:b5:5b:23:ef:74:21:eb:cf:
a7:8d:a0:28:c0:14:fb:9c:94:40:80:c1:5e:e6:82:db:31:51:
cf:31:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:20:51 2025 by rpki-client