Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: VbVyZjC9GSqddQ/On1UBw5Bwjo/I9jvNiV7X77DwYBk=
Subject key identifier: C6:6A:11:B5:45:63:88:9D:A8:06:5A:6E:69:11:46:2D:B5:9B:DD:21
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 01958B4D73A80452B4AD54A60F3155D39B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 04B6
Signing time: Wed 12 Mar 2025 17:01:03 +0000
Manifest this update: Wed 12 Mar 2025 17:01:03 +0000
Manifest next update: Thu 13 Mar 2025 17:01:03 +0000
Files and hashes: 1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: JU7+TBq+9v77yx3c/nZI3Jk0VxY49cw54t4VKu+r8o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:73:a8:04:52:b4:ad:54:a6:0f:31:55:d3:9b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Mar 12 17:01:03 2025 GMT
Not After : Mar 13 17:01:03 2025 GMT
Subject: CN=c66a11b54563889da8065a6e6911462db59bdd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e1:3c:59:07:17:0c:0e:a9:9e:68:2b:2c:54:
d6:74:99:a9:3d:ff:2c:31:ff:06:a7:b8:44:fb:66:
37:02:16:55:92:f7:4a:fc:41:64:af:a5:13:af:10:
c9:8f:3f:5b:d8:43:8b:13:32:34:2a:cb:d7:0b:20:
14:ec:4e:53:94:d5:95:23:32:69:73:c1:8b:2d:91:
02:94:e3:03:62:f9:82:72:c1:89:e7:18:d0:41:a2:
1d:e1:6f:54:e2:0e:75:c8:b9:ea:f5:36:82:23:45:
8c:6c:f3:d8:bf:b6:08:59:51:2f:8f:c2:c8:18:fe:
36:81:27:de:96:6a:6c:ae:7a:c8:a4:e9:17:90:37:
8c:8a:50:70:df:a0:12:9f:92:66:c7:ee:50:7a:3e:
8b:55:61:0c:e3:c5:5d:71:69:ad:54:c9:03:cf:a9:
29:80:7d:00:34:f9:a8:15:4d:ca:c5:77:c9:6c:f6:
3b:5f:36:8c:4f:81:5c:16:a0:98:da:e1:30:d5:8c:
16:39:2f:da:31:ea:54:b0:1e:3e:cf:17:6e:9e:ef:
e7:13:e1:37:36:6e:11:5a:42:13:76:bb:e3:28:04:
e7:89:a2:e8:a2:84:3f:83:0c:0e:3d:7e:1f:01:13:
73:7d:37:b4:e7:43:78:8b:ab:00:e5:9c:08:5c:91:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6A:11:B5:45:63:88:9D:A8:06:5A:6E:69:11:46:2D:B5:9B:DD:21
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:66:ee:c0:34:f5:5a:e8:b2:58:aa:d5:ad:65:63:9d:1d:b1:
0e:d1:72:75:72:03:52:fc:c3:db:e5:94:f2:a1:1c:59:e2:c0:
1e:2d:24:26:7b:f0:96:09:37:75:de:85:77:86:c7:51:dd:c0:
57:06:63:01:ed:98:ce:ce:de:1b:42:f8:e0:f2:30:03:2e:12:
c4:9d:8c:4e:80:b1:d5:1e:89:37:99:08:2c:30:f1:ee:e2:8d:
f2:dc:c6:da:03:2a:5f:ee:94:3d:c8:fd:1a:3a:47:8d:4b:97:
79:18:74:3c:91:fc:17:a9:ef:ff:4b:52:7c:b2:ba:c9:de:35:
69:06:b0:71:b7:ff:66:56:7a:08:99:48:44:0f:8a:ca:16:05:
79:42:05:c4:e1:c3:d2:0c:84:eb:25:c4:00:ef:1f:d4:32:30:
30:df:8b:5e:db:16:b0:48:ab:06:f3:01:8a:ff:e7:6b:20:a8:
3d:86:69:7d:bb:8b:c1:0c:7f:e6:a0:21:42:a4:6a:72:df:9c:
3e:e5:2a:14:4a:38:47:3e:f3:e8:5a:32:f5:7f:a5:25:70:90:
8d:50:7d:c0:20:86:ba:a4:67:d1:cc:9d:68:52:47:81:7b:c9:
13:aa:d8:94:4a:2b:5e:07:a4:91:51:be:f0:d3:0f:9d:43:48:
07:ce:ea:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:11 2025 by rpki-client