Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: Mp92uAzcGXUQnNMuMB97ZEknQpqbLh42xT7VQqFt850=
Subject key identifier: 68:4D:C0:98:18:A9:FC:1E:1A:30:FA:5B:0D:48:E1:BB:DF:1D:AB:D2
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 0196AA67B801F226C565BB659ABC3FFC8D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 14BC
Signing time: Wed 07 May 2025 11:00:46 +0000
Manifest this update: Wed 07 May 2025 11:00:46 +0000
Manifest next update: Thu 08 May 2025 11:00:46 +0000
Files and hashes: 1: Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa (hash: r74V+TICXc97SHMOMlLlN4zJGa1Cwt8Y3q6l6hYrpFg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: msKiXnkaavdBzmSGFO55EDF5zoRC9mw+VQqLDJ8/zzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:b8:01:f2:26:c5:65:bb:65:9a:bc:3f:fc:8d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: May 7 11:00:46 2025 GMT
Not After : May 8 11:00:46 2025 GMT
Subject: CN=684dc09818a9fc1e1a30fa5b0d48e1bbdf1dabd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:95:c4:9a:0b:51:39:d0:d4:e4:ee:7e:03:e5:
8a:d7:a6:e1:6c:81:ed:10:bb:17:72:21:d2:5e:c5:
fc:df:38:44:30:d1:5e:2e:5e:28:c5:db:2a:8f:2f:
f4:7d:c8:1f:eb:e2:ac:01:e5:8e:35:23:26:1d:2f:
4d:92:e6:ad:01:62:2d:54:3d:4a:56:bb:02:73:2b:
1c:11:15:84:90:6a:15:2a:e8:bb:4a:f1:ee:a0:b1:
11:dd:7b:cd:38:e8:1c:b6:73:af:88:e8:0a:6a:0b:
fb:17:3b:d3:52:3e:cb:2b:d0:c3:be:3b:be:5d:14:
39:73:f6:b2:93:2a:b6:01:cd:69:7e:f3:a8:e8:39:
04:0e:1b:f8:4a:30:33:f3:af:7d:44:62:4a:94:0a:
ee:4a:8d:df:0c:bc:67:e2:a9:d9:6e:26:ff:fb:4e:
c4:19:6d:37:8f:a2:e4:61:d9:ea:b1:2d:7e:b9:ae:
39:d5:43:42:4f:67:2f:85:16:d5:bc:76:42:5b:c2:
fa:54:9e:12:4d:df:52:f3:5d:d3:04:a0:82:49:06:
f5:a9:13:2c:95:2b:ee:07:a8:b7:da:12:1b:cb:62:
f6:3b:f7:5f:1d:e9:7a:c7:1d:1d:cf:e5:9b:18:c7:
6b:bb:35:06:da:16:70:6b:4a:f1:b2:77:85:0d:f8:
fa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4D:C0:98:18:A9:FC:1E:1A:30:FA:5B:0D:48:E1:BB:DF:1D:AB:D2
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f7:0d:b3:d6:33:9d:43:e0:96:4c:f8:82:a3:09:0a:6e:aa:
9f:87:b0:2c:21:47:12:a0:d9:d2:14:31:02:39:a3:21:d5:ab:
4c:e1:df:82:41:03:86:de:e7:90:b8:ad:28:5b:8b:a5:71:c5:
31:c3:7a:32:64:78:61:a2:19:1e:df:85:34:7f:62:4e:ea:41:
d5:f8:84:fd:b2:fa:60:dc:81:59:b5:ef:cf:b1:75:de:14:f1:
38:95:c4:61:c6:1d:e3:2c:54:36:2a:de:ef:c3:03:ec:11:ba:
01:17:8e:bb:2f:13:37:d7:ff:f4:af:58:35:57:99:97:94:c6:
a5:bb:a4:ad:86:68:1e:10:a9:d1:b3:97:a0:39:cf:da:df:41:
f7:a0:83:a6:9c:14:6a:8f:6a:36:34:4b:00:2c:56:79:95:db:
cb:ce:82:2e:26:8b:60:9a:8e:da:4c:bd:0e:e4:90:33:d5:09:
bf:b1:8b:ef:e0:62:08:5a:a9:ca:e1:41:14:06:7d:76:10:12:
fa:fd:be:de:5a:ea:e2:67:12:a7:d3:ca:b1:6b:dc:46:5c:49:
6a:e8:1a:5a:25:27:44:2b:aa:7c:57:3b:3e:6b:3a:15:b4:32:
45:48:9e:f5:d7:27:e8:6e:c8:fe:9f:9b:65:58:12:0a:55:7b:
1c:5a:1a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:43:11 2025 by rpki-client