Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
File: NkUaLqQK8XFeYxMWlGiZaspxu4o.mft (raw, json)
Hash identifier: pQhQBG8OyImtF9gNQCPibwYYkcYRRHpqbx6kGpvwiDY=
Subject key identifier: D6:D5:8B:19:C4:81:EE:4F:29:B9:04:66:F8:F1:D8:55:EC:2E:9C:6F
Authority key identifier: 36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
Certificate issuer: /CN=36451a2ea40af1715e6313169468996aca71bb8a
Certificate serial: 0196AC8CE25D58B29F155B6A754B6270D2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
Manifest number: 0A70
Signing time: Wed 07 May 2025 21:00:36 +0000
Manifest this update: Wed 07 May 2025 21:00:36 +0000
Manifest next update: Thu 08 May 2025 21:00:36 +0000
Files and hashes: 1: NkUaLqQK8XFeYxMWlGiZaspxu4o.crl (hash: imVb9S6Y7GyvR/vvjrAT9jhdRRnNc0Pay8rb5tqnGxQ=)
2: O0F84RWu36-icdnEP0gqMSZmFC0.roa (hash: VjIGx/MTrmEnOtVvtOZHwU506/ftw5kzWXyYKquguXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8c:e2:5d:58:b2:9f:15:5b:6a:75:4b:62:70:d2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36451a2ea40af1715e6313169468996aca71bb8a
Validity
Not Before: May 7 21:00:36 2025 GMT
Not After : May 8 21:00:36 2025 GMT
Subject: CN=d6d58b19c481ee4f29b90466f8f1d855ec2e9c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:38:79:25:32:e6:4d:58:ad:41:87:af:45:
51:f8:81:fd:ae:9a:5a:28:cd:9f:69:4e:f8:00:f2:
a4:bb:ab:9e:26:37:59:15:1a:b3:b6:63:95:b7:65:
c6:27:fc:5b:88:53:52:7d:9e:e4:d0:fd:81:75:89:
9c:b5:43:f7:40:8a:cb:51:25:aa:52:25:a5:d7:51:
e0:ee:dd:33:5c:9f:40:fd:71:29:bb:67:32:4f:3c:
07:5d:f0:63:4e:2f:b7:10:76:9e:33:89:ee:eb:d7:
f0:71:96:1b:ce:88:ab:3c:c0:f3:4a:66:51:ca:97:
ff:14:ac:f3:93:1c:f4:a6:fe:28:e2:bc:39:5d:cd:
68:05:26:f2:47:dd:76:80:e1:f6:75:fd:dd:e8:48:
e0:1b:a7:cb:e5:c9:f2:f0:06:7a:04:b0:c4:85:e5:
3a:f1:40:6d:41:b8:d9:70:d7:14:db:cb:a2:5e:7e:
de:c8:1e:01:d9:1f:db:11:be:8b:34:d6:96:b4:b3:
56:aa:3d:3b:fc:49:82:b4:58:58:5f:f0:cf:e3:15:
b7:8f:a1:d8:3c:d4:c0:07:43:31:89:1c:63:10:a3:
6b:71:f4:cd:f1:4e:97:29:b7:d4:57:cb:af:96:71:
c2:6b:e0:8a:13:af:d8:ba:a7:b8:1f:6c:79:bf:bc:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D5:8B:19:C4:81:EE:4F:29:B9:04:66:F8:F1:D8:55:EC:2E:9C:6F
X509v3 Authority Key Identifier:
keyid:36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:39:8b:58:97:af:7a:bf:38:19:68:4c:b3:01:a3:f0:91:48:
00:a4:75:bb:45:11:b2:40:aa:93:8d:ec:28:8a:9d:fb:8c:ea:
17:f1:4e:bb:1d:c9:bb:22:ae:f0:c5:39:5e:87:07:45:4f:cd:
a6:e9:22:0e:c5:85:0b:45:e4:00:d8:32:e5:e7:63:bc:f2:da:
2e:dd:ad:8b:70:ed:ed:a7:31:9c:54:60:71:cb:91:9e:d4:23:
66:6d:a2:89:68:da:e4:22:35:f9:94:6d:7c:39:3c:78:94:06:
b3:74:e4:22:80:33:44:d5:ed:7a:39:38:9f:93:e6:51:cd:63:
1d:3c:af:c3:27:be:a9:d5:4e:d9:fc:58:5f:b1:61:46:e7:77:
60:d4:59:58:04:fa:a9:7b:64:23:f7:af:26:31:cb:03:ca:1c:
77:a9:a0:0f:c1:39:50:d0:11:94:1d:e1:d7:cd:93:43:fb:de:
6c:c4:1a:21:cd:89:48:67:9c:92:7d:7e:d0:11:77:b8:fd:3e:
65:19:65:0f:fb:22:34:46:74:df:d6:6f:31:32:12:81:b0:b3:
00:b0:27:63:99:92:a3:c2:72:9c:2c:e0:29:35:e4:16:27:87:
06:86:ab:2e:82:d4:63:6d:2a:8c:62:34:29:0e:f0:af:0a:59:
4e:70:71:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:13:21 2025 by rpki-client