Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File: NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier: 57oNxMIlgBxpptQ4aJ3Ys6wrlxoec3voyisvOKxkWTI=
Subject key identifier: 80:8B:7E:01:D8:FE:46:3D:F4:A4:8D:FD:DA:F6:EB:E5:35:72:74:EA
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 0196B66C44D7BF9526B43A7F1DC7645A2B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 19:01:10 +0000
Manifest this update: Fri 09 May 2025 19:01:10 +0000
Manifest next update: Sat 10 May 2025 19:01:10 +0000
Files and hashes: 1: KwzLAJFh9AChcSwdy64vpYAmPMw.roa (hash: gKP8z3trUWmnbUH4Fi3xjFDbQv59f3+z5G16CBeShsM=)
2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: hIHDTU3fG13bYZ5//DXHfk4/lXxrS0GpkmBlskmmq2c=)
3: xgRFqxuYECy3s3qxM6WfghCOWpk.roa (hash: C6vhgdbkPh06biK8G7xaWybwcmLZK2bGK2ryBwYlob0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6c:44:d7:bf:95:26:b4:3a:7f:1d:c7:64:5a:2b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: May 9 19:01:10 2025 GMT
Not After : May 10 19:01:10 2025 GMT
Subject: CN=808b7e01d8fe463df4a48dfddaf6ebe5357274ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:ee:ac:4a:33:72:ae:f0:cb:4d:94:9a:45:
b7:c7:29:53:6e:44:5d:53:1b:28:47:37:00:18:de:
03:e2:79:b6:d6:63:21:f9:d9:c2:d6:b2:ff:16:94:
62:90:28:57:48:c4:46:5e:ed:c0:f2:48:44:c2:74:
4d:75:bb:17:a6:ea:35:ff:9e:0d:bb:6a:aa:ad:e3:
9f:02:da:5e:cb:f2:67:5d:7c:f2:c9:5c:50:31:af:
fc:80:a3:0f:0b:c7:91:f3:51:18:ac:15:59:dc:2a:
7c:90:06:7f:83:6c:73:7e:53:08:ab:f1:a8:aa:71:
b6:10:53:8d:e9:a8:42:36:c7:15:d7:f6:3a:a5:82:
f1:7b:b0:9f:47:96:9b:49:34:c3:af:dc:e0:53:2d:
08:23:fd:5b:9a:3d:04:8e:45:15:d3:e4:b8:b6:6f:
ec:c3:cb:ed:f2:0b:96:6d:fd:9e:f5:d5:cf:ce:55:
7a:07:65:47:7d:c0:a9:e6:e4:2f:28:a6:74:df:75:
21:5a:20:37:25:a0:19:8f:e2:94:ba:e7:1a:24:fe:
89:15:58:83:e1:6c:fa:06:e2:35:28:b5:6a:23:16:
8f:bf:0d:7c:df:f5:fd:3f:56:14:5a:d0:aa:dd:a2:
dc:87:91:2a:c4:11:a7:be:07:c8:2e:f5:57:ea:a7:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8B:7E:01:D8:FE:46:3D:F4:A4:8D:FD:DA:F6:EB:E5:35:72:74:EA
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ee:48:04:84:fd:7f:af:c7:71:e0:83:61:95:76:4b:a3:98:
57:ff:c6:cc:1e:3b:67:ab:88:e9:c0:67:07:e5:68:40:1a:87:
e4:72:5f:cc:6f:a7:24:69:3e:fa:5c:77:e5:65:4d:bd:8f:d6:
fe:ab:4e:cf:32:67:a6:e8:2b:b6:02:59:a5:2c:39:ce:98:db:
95:e5:df:dc:46:c7:f9:f1:41:ae:35:7a:e2:21:f4:7b:1e:7c:
60:dc:ba:3e:93:ea:60:8c:6b:cb:dc:ac:5a:86:ab:8b:c4:b8:
9b:c1:85:5c:f8:53:01:ca:e4:74:e3:39:6e:a3:16:a4:5c:7f:
b3:69:7a:9f:f9:01:1c:ef:b3:4d:b4:6a:92:fc:ec:67:af:ac:
a3:13:f1:c9:93:03:1e:c7:20:84:ee:97:f3:ea:e4:36:d2:f9:
e1:3d:c0:ad:bf:05:77:80:35:b0:0d:ce:fb:14:f6:92:2f:c4:
12:0a:fd:65:34:7c:06:22:fc:e0:8c:a8:47:5c:21:05:6e:48:
6e:dd:27:ef:98:c2:6f:f5:f7:48:5a:22:b3:a9:0f:78:aa:66:
65:34:3b:6f:f7:93:db:95:3f:7f:91:8e:ff:c0:a9:f6:bb:a1:
f4:e2:90:ca:e2:ed:ab:55:3c:22:2d:fa:6e:d7:6b:0f:22:2e:
25:22:47:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:28:49 2025 by rpki-client