Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: dAdETgJnex83peWqv5Ixi6QAyL9/rFoeH5ewEWI3MRw=
Subject key identifier: CC:F1:67:FF:97:CB:7A:1F:17:78:3E:67:9C:E1:B3:FE:E5:B0:33:B7
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01965793C414830F8EDCEAD7F0BF95B9FE48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 09A2
Signing time: Mon 21 Apr 2025 09:00:23 +0000
Manifest this update: Mon 21 Apr 2025 09:00:23 +0000
Manifest next update: Tue 22 Apr 2025 09:00:23 +0000
Files and hashes: 1: 908CjJVwEzY-Q7rq5gWYan6FK7A.roa (hash: r+dWqc5p2uQvaR0hp/ydgSShtCb659XbXMV6CSkrEdU=)
2: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: Era5v3f6g4/iXm7EjobU5mZU/44mtYaeRppqlVW1HtU=)
3: fDsdK2tD77O7e4AR_nokgS7lFto.roa (hash: 29a/vkXJaunGUFq80jkR7W5FhU3JI/W9/SFVMkWYH+c=)
4: pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa (hash: DLnt9qWRp3EI4stZNmwt/HobGa97g3RTR8iRLREX4YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:c4:14:83:0f:8e:dc:ea:d7:f0:bf:95:b9:fe:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Apr 21 09:00:23 2025 GMT
Not After : Apr 22 09:00:23 2025 GMT
Subject: CN=ccf167ff97cb7a1f17783e679ce1b3fee5b033b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:60:bc:8a:19:ed:ba:ff:76:0a:d1:86:cc:0d:
83:05:e4:af:65:7e:d5:ed:31:7d:2d:2f:9c:e4:70:
03:d1:41:de:7a:44:d0:3e:a8:54:12:4c:24:73:0c:
9d:cf:d1:6d:3e:8b:ae:d4:20:2b:74:39:7a:57:d7:
eb:d0:18:8b:7a:e4:26:6e:44:97:22:6b:e7:dc:e9:
43:8a:49:e0:8c:0a:b7:6b:f9:28:57:81:91:b0:8a:
40:95:cb:8f:d4:b1:82:a4:ba:9b:25:f5:0d:ed:a9:
b2:aa:99:a3:c8:8a:2f:45:e0:dd:52:b9:2a:ac:34:
13:22:30:b2:f3:b8:83:3f:96:13:59:c4:4a:b3:04:
b8:06:ae:58:e1:57:1c:cb:07:a0:96:6f:63:8d:0a:
dc:98:ff:58:91:f9:c5:60:94:15:c3:a5:01:97:97:
7d:62:9c:62:3c:e4:18:e0:2c:ab:4c:40:e6:ad:95:
ea:43:29:d6:c8:9b:86:27:43:7e:30:73:16:42:29:
0b:6b:6f:97:dd:d8:1c:7b:e2:3d:36:6a:7e:d4:3f:
a2:4d:48:b3:24:bb:cf:88:f7:99:ce:d5:95:81:4a:
a0:f7:28:be:d1:1b:be:5d:7b:2b:48:8e:ad:17:d4:
d9:e2:4e:d9:c3:19:aa:f3:02:55:09:bd:0f:59:4a:
85:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F1:67:FF:97:CB:7A:1F:17:78:3E:67:9C:E1:B3:FE:E5:B0:33:B7
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:78:8a:d8:82:d3:dd:8f:c6:fe:6a:63:83:81:9b:4b:70:c3:
15:fd:25:e6:64:03:86:11:09:98:8f:fa:22:25:1c:a9:cb:58:
f5:29:c4:fe:08:b4:82:37:cf:15:86:31:91:2b:8d:09:f6:7b:
ca:48:af:d0:ca:23:22:4d:41:45:eb:ff:54:50:cc:c7:20:d7:
79:8e:8c:25:42:3d:39:14:98:6f:f1:8d:88:1b:50:58:73:ef:
32:95:76:d6:4e:37:9b:34:8f:78:cb:ee:f2:ed:4c:38:25:bc:
6d:b7:c4:0d:79:e9:08:6d:8f:ac:50:a3:ae:22:9e:f3:6c:a4:
07:0f:67:d1:e0:9d:9b:e8:da:68:df:91:b7:1a:e9:5e:ed:6f:
84:86:48:a4:63:d4:1d:82:8f:cb:f7:d5:0d:ac:df:62:ee:33:
dd:b3:e0:0f:f3:78:a7:72:38:20:e4:a1:1c:98:fc:4b:45:b3:
59:9f:ef:b4:cc:89:d1:b3:8a:fb:6e:cd:c8:3f:be:03:6b:c6:
b5:28:ef:56:75:a6:e7:7f:f8:d4:87:e9:a3:90:e5:fe:45:66:
1a:fe:9c:e9:23:57:f6:37:9b:ad:de:95:b5:3d:15:1d:22:a1:
5c:11:b3:6b:65:0e:76:f3:b5:87:f2:91:f1:5c:44:a4:0b:a0:
e9:38:04:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:47 2025 by rpki-client