Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier: kM8G60+5pbZHp+Zqq9ZB7irp7FxwrsgxtVntSPtmMKI=
Subject key identifier: C2:7B:58:D2:87:2F:AD:9A:2D:EF:BC:FA:F0:A6:00:E6:08:ED:8F:26
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial: 0196C8041FD836E603F2CA844E4D3DF27249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number: 05D2
Signing time: Tue 13 May 2025 05:00:35 +0000
Manifest this update: Tue 13 May 2025 05:00:35 +0000
Manifest next update: Wed 14 May 2025 05:00:35 +0000
Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: 61uRB81EEbpVKXIslrJ6b1L/vFn39Ci0VAx9aeJoE8g=)
2: jCF0UZxubcg2boAXKn66J2n2ZyE.roa (hash: Jnz70fxzRetWB+WwfJpKB4S2++FXBxK+gp589kR2o6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:1f:d8:36:e6:03:f2:ca:84:4e:4d:3d:f2:72:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
Validity
Not Before: May 13 05:00:35 2025 GMT
Not After : May 14 05:00:35 2025 GMT
Subject: CN=c27b58d2872fad9a2defbcfaf0a600e608ed8f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:7e:ab:43:62:a4:c1:32:27:67:ef:65:ee:
58:01:37:10:d7:54:a2:b4:9e:ef:4c:fc:d6:c3:42:
9f:77:1d:6f:63:6c:8a:40:c2:ce:fd:1c:18:46:17:
36:ed:5f:e6:3a:12:55:08:ce:3d:3f:05:27:2f:76:
f6:62:d6:b2:a9:90:c2:af:c9:24:9a:a3:62:e0:3e:
94:6e:b7:07:2b:da:3f:3e:e7:75:59:62:20:2c:f9:
eb:8a:3a:e7:9c:43:a0:42:33:79:af:32:ff:25:e0:
c4:1e:eb:c9:d8:c3:49:78:d3:65:14:66:c4:41:6a:
de:e6:2e:24:87:0e:0d:6b:dd:b5:97:87:8b:06:93:
46:8e:86:03:37:ae:75:1f:26:fc:51:eb:92:43:22:
dc:2e:a0:e2:3e:67:96:96:26:b8:4c:07:96:c5:d0:
90:51:90:97:46:cf:a5:92:3f:ac:7a:ea:4f:2e:18:
3e:e4:34:c9:91:c8:af:ae:18:1b:b6:b3:d9:79:ab:
54:c6:4a:6d:f3:96:53:d1:e6:03:3c:3d:ba:e2:85:
12:f1:cb:3e:c7:4d:84:2b:8b:ef:15:c7:1f:0d:7f:
fc:5c:7d:5b:c8:cb:f3:3e:cc:f1:ad:73:0a:63:20:
20:1e:9b:49:33:d7:bf:dc:3e:f3:93:da:62:be:3a:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:58:D2:87:2F:AD:9A:2D:EF:BC:FA:F0:A6:00:E6:08:ED:8F:26
X509v3 Authority Key Identifier:
keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ac:03:c2:60:07:7d:f9:7f:bb:e9:17:31:4f:97:3e:ef:2e:
71:a8:17:83:f0:24:d5:25:f8:7f:76:10:a8:fc:2e:d2:9b:35:
8d:6b:a2:bd:45:65:d1:66:e6:b0:1c:bf:53:cd:f9:b2:c2:9c:
f8:bd:a9:db:fb:35:e8:60:b9:47:d2:6b:06:a5:31:05:b8:d7:
c1:27:9f:eb:11:a7:3a:42:03:ea:b5:c5:52:43:14:b1:02:e6:
3b:40:88:c0:c2:81:07:25:3e:4a:22:7b:04:17:cd:d4:92:f4:
07:b8:b6:9b:a5:24:42:46:ef:83:df:f8:8d:2a:f2:d7:da:e0:
cc:6b:d3:7c:4c:1d:16:53:8b:bc:df:80:5c:55:ed:ca:e0:73:
7f:2b:2f:c4:e0:54:c6:24:04:80:d8:63:9a:50:9a:69:42:3c:
fe:6d:9d:d3:9d:87:72:52:ff:fa:c6:da:f1:0b:6f:db:49:da:
1b:ce:cd:93:99:fc:1f:c9:8f:5e:49:3f:51:73:e5:ae:0f:59:
d4:eb:f6:1d:ab:3a:ea:43:c0:22:80:9a:ab:10:93:7e:03:14:
a0:db:2a:47:d5:7f:b6:a2:02:50:54:5e:37:f0:65:ad:33:16:
a7:6c:c6:05:a9:88:27:c3:f9:5c:cc:e2:8e:a2:67:8b:8f:af:
1e:0f:78:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:47:40 2025 by rpki-client