Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
File: NLFHrBz3fVyPsq90-tO3O10TeyY.mft (raw, json)
Hash identifier: pLNK2X/bSe/L2gGgA7gnLZAxE5n62vZsXWFcTsbzKBg=
Subject key identifier: 5F:2B:E5:49:28:4B:19:F6:13:24:B6:4E:E5:67:21:79:FD:39:C6:14
Authority key identifier: 34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
Certificate issuer: /CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Certificate serial: 019656815BF1C23C6D2814714D676CCCB800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
Manifest number: 92
Signing time: Mon 21 Apr 2025 04:00:40 +0000
Manifest this update: Mon 21 Apr 2025 04:00:40 +0000
Manifest next update: Tue 22 Apr 2025 04:00:40 +0000
Files and hashes: 1: NLFHrBz3fVyPsq90-tO3O10TeyY.crl (hash: QOenmRFyR4Jfz3/+toMpvx00i1J979Onf9BuJNsleyI=)
2: THnq9fycftVoi9SRyG2RAgjh-xM.roa (hash: CvE6vZRBpMVjaRZR6SZYXH1U/C4JGawX5FU1BEkF3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:5b:f1:c2:3c:6d:28:14:71:4d:67:6c:cc:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Validity
Not Before: Apr 21 04:00:40 2025 GMT
Not After : Apr 22 04:00:40 2025 GMT
Subject: CN=5f2be549284b19f61324b64ee5672179fd39c614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6c:90:b6:41:9f:81:02:1a:8b:97:7c:2b:26:
7c:6f:31:6d:90:86:8b:5c:a0:3e:83:01:89:2b:73:
eb:7b:08:ba:b4:a7:48:8c:b6:6c:cf:5a:4a:ce:11:
78:65:a0:6c:47:0a:97:3c:73:50:c3:7a:b8:a4:00:
b7:df:a4:a8:84:14:8b:f8:d5:58:c2:10:fd:bb:e1:
f8:6d:cc:39:7f:b9:ba:3b:a3:2c:87:d7:93:4f:d4:
32:fa:c6:c4:88:1c:ad:9f:05:96:ad:88:a5:bd:bc:
69:98:4b:be:a8:4d:24:25:96:9c:f8:b5:1f:95:77:
93:94:68:d9:3f:33:4e:49:e7:ef:d9:b7:13:a4:d9:
da:7e:11:07:7f:d8:52:5e:db:b8:7b:cd:84:cf:3d:
9c:7f:ad:1d:90:c5:74:5b:6f:36:05:47:c4:f5:01:
7b:70:54:77:60:85:26:ff:00:57:ab:86:69:5a:d1:
59:3a:28:a8:bc:12:6f:17:80:d3:d3:38:ea:d1:68:
2e:e3:d6:40:66:fb:8c:94:ff:56:74:97:36:b2:2a:
39:9a:80:cb:aa:03:70:d3:56:77:f1:04:c3:c1:6c:
be:b4:88:94:3a:3e:dc:1e:42:70:ad:0b:9e:ac:8f:
7c:bf:f8:7c:81:64:ed:25:11:ad:ac:13:64:79:5f:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2B:E5:49:28:4B:19:F6:13:24:B6:4E:E5:67:21:79:FD:39:C6:14
X509v3 Authority Key Identifier:
keyid:34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7d:68:d6:76:60:ba:34:34:dd:f1:69:ab:fc:1e:16:6f:a8:
61:05:84:1d:d2:89:5d:51:1c:3d:d0:e3:0c:54:ab:5c:9e:63:
a1:a1:83:6f:54:99:88:4e:67:90:79:f0:63:20:ea:64:d2:c3:
65:84:27:2c:12:e3:85:56:4b:7b:73:d5:cb:f6:e7:aa:e8:4f:
0b:03:e5:2a:d7:02:54:eb:8d:51:cd:7b:31:d6:90:fb:ce:5a:
04:3b:99:fb:8c:1d:ad:fd:6b:0e:de:53:dd:af:f7:50:9d:4f:
3a:4c:77:ae:63:a5:b2:80:c8:b0:5c:17:d2:06:0d:f0:98:0b:
c2:0f:76:b5:86:7d:79:17:4d:3d:c8:d6:83:c8:fe:a9:a6:c7:
30:f1:a5:ba:a3:dc:f0:f3:69:dd:09:83:88:f3:cb:6f:bf:57:
b8:16:af:54:05:b7:ac:aa:34:fb:30:76:e9:ba:2a:bc:42:a6:
06:36:45:ae:6b:32:aa:47:87:57:83:df:bf:5f:39:2f:9b:cb:
f8:3a:87:7f:c8:1e:9f:bd:61:fc:de:4e:26:a7:ef:98:51:0a:
17:37:0b:cc:14:4f:38:25:f1:32:07:26:1b:19:2c:39:3c:7e:
d3:51:10:7c:32:e3:e3:41:7f:d5:c4:a3:51:ae:60:82:1a:10:
e7:bc:eb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:47:13 2025 by rpki-client