Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: THjKNp+mF0rIldnsmxA/iV80fM28NEFka5sD4ieFzlE=
Subject key identifier: D2:B5:20:91:4C:A5:16:F1:DC:80:7C:BD:ED:F2:A2:B1:EB:40:45:70
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 0196BA7F1AB04A829CBF62EFF05479597E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 8C
Signing time: Sat 10 May 2025 14:00:14 +0000
Manifest this update: Sat 10 May 2025 14:00:14 +0000
Manifest next update: Sun 11 May 2025 14:00:14 +0000
Files and hashes: 1: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: rcle+uhbwfc66Jg3Eu+B9PKYOBdBBS9DHHdpLdFF8vU=)
2: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (hash: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=)
3: xuTySrtO69FPOcG6SUnZEPsSQ9o.roa (hash: luyQlxdtnhbzwgU08jLpwvc2YYpUGSiEGEb8snEjI6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:1a:b0:4a:82:9c:bf:62:ef:f0:54:79:59:7e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: May 10 14:00:14 2025 GMT
Not After : May 11 14:00:14 2025 GMT
Subject: CN=d2b520914ca516f1dc807cbdedf2a2b1eb404570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:d0:af:92:9c:32:11:4b:57:0d:e1:d5:d9:
c6:48:30:be:d6:38:f2:34:a9:01:45:69:be:99:16:
3e:b9:5e:7d:c2:89:49:70:ea:6e:f6:7c:07:b6:94:
64:e3:c4:82:a7:37:35:e0:d3:63:b9:c3:a4:c9:ba:
68:2e:c8:28:74:49:1f:bf:3a:ef:e2:27:e2:86:c0:
db:47:ee:70:eb:05:36:1d:22:71:5a:57:45:e6:66:
9e:01:8a:6a:16:39:c6:ae:ad:d0:ff:74:8f:3b:46:
70:b9:62:b1:ae:ed:3f:3d:b9:d3:62:65:b2:b1:5c:
11:74:f0:2b:c5:a6:b8:19:a1:89:64:12:54:21:46:
d3:64:53:45:37:43:ed:d8:04:1c:2b:16:4e:ba:06:
c0:ab:63:11:00:4b:7a:47:fb:5b:8e:72:a3:f1:8d:
9c:91:79:d5:fb:4d:f7:28:22:a9:f4:b0:16:a8:f3:
a3:45:23:ed:a2:a3:5c:73:91:5a:cd:67:33:d6:b8:
8f:41:10:b2:18:bf:4c:03:65:fc:74:15:1e:de:e9:
c5:81:0f:0f:f3:9d:6c:15:ca:5d:35:bc:17:49:64:
b8:40:56:44:93:bf:18:99:88:f7:f1:52:cd:05:fc:
27:f4:64:e9:c5:0f:84:7d:e3:9c:98:d1:e0:b7:2e:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B5:20:91:4C:A5:16:F1:DC:80:7C:BD:ED:F2:A2:B1:EB:40:45:70
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fc:7e:64:5a:1e:e3:53:e4:ce:62:fc:58:3c:2d:b8:1e:7e:
e2:1c:7a:cb:fe:4b:2d:53:26:19:c1:eb:c9:2a:56:c1:e8:6c:
fa:57:53:08:43:62:a9:81:f8:82:4e:f6:78:01:e7:90:59:7a:
39:0b:89:02:34:b1:e6:28:ff:64:73:a8:f2:e2:33:38:4c:71:
26:aa:9c:e6:04:a7:8c:ce:f9:ec:21:58:f0:69:db:3a:c0:7d:
4a:3e:3a:bd:50:75:b4:31:6d:71:a5:28:8d:86:74:32:56:11:
d6:a5:90:8b:d0:7c:81:d9:b0:84:94:4e:96:42:1a:3c:31:6f:
ba:b7:ef:6d:8d:9a:94:73:87:20:4f:b3:e7:de:32:dd:7d:12:
21:3f:b6:cc:fc:1a:63:e1:dc:10:3c:02:da:a7:e0:3a:ff:3c:
06:9d:ed:8c:fc:ab:ad:17:db:ea:f5:ed:02:8c:7f:f3:a5:b7:
6f:9c:64:a2:e6:ae:fe:a4:de:c4:f9:ec:8b:88:39:21:12:7b:
94:7b:20:42:b9:31:08:14:7d:08:15:29:bc:04:03:66:40:e4:
56:82:4e:a7:fb:48:c6:5c:35:c0:07:51:c2:db:89:1e:bd:0b:
24:83:c5:4a:ac:81:dc:fa:98:21:15:6e:bf:bb:2d:ef:7b:97:
38:68:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:08:09 2025 by rpki-client