Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json)
Hash identifier: Hz/jtFAPEthVS3wcHynxKlniGVP6EL3i5FZ9hJkwLX8=
Subject key identifier: E1:80:A6:F8:CD:62:E8:F4:27:09:49:4D:01:A7:6D:5E:AC:D7:04:51
Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Certificate serial: 0196DAE612DB3DA9E10482B08FB28C2604E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
Manifest number: 0223
Signing time: Fri 16 May 2025 21:00:33 +0000
Manifest this update: Fri 16 May 2025 21:00:33 +0000
Manifest next update: Sat 17 May 2025 21:00:33 +0000
Files and hashes: 1: MxQVcAiuW0p4EDIiEm7q3BWYvP8.roa (hash: JVFsJWGBLPgzxt9uY5l+yySS0Ei3Tn04Hx81eXPjKe4=)
2: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: x8YDnGi3LPA6VP1Lop60pvymbssHhn3hXrsJfTajcaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:e6:12:db:3d:a9:e1:04:82:b0:8f:b2:8c:26:04:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Validity
Not Before: May 16 21:00:33 2025 GMT
Not After : May 17 21:00:33 2025 GMT
Subject: CN=e180a6f8cd62e8f42709494d01a76d5eacd70451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:70:fe:7c:60:e3:0f:92:6f:b5:84:30:d1:29:
1b:0d:06:8e:7e:09:52:6f:e7:29:9e:5f:83:fc:18:
2d:9b:63:65:5d:3c:e4:f1:86:c0:b4:4b:cd:cb:e6:
5b:ef:09:65:3d:7c:78:a6:63:fb:56:33:68:1b:b1:
dc:d6:b9:5a:ed:f9:aa:bc:7d:75:c7:e0:a3:3c:8e:
89:bd:31:cc:7b:b3:00:e2:cd:55:be:4c:1b:32:6a:
59:69:30:10:10:cf:32:e2:eb:92:79:96:d7:6c:96:
56:c9:5b:62:65:70:f3:12:ed:f7:31:1e:bb:41:df:
d5:ca:56:2e:d7:98:2e:b1:d8:b7:b5:ef:42:03:e9:
f1:0e:82:c6:32:f3:0d:5f:ee:48:5c:6b:9d:e0:3b:
28:12:99:1c:8a:3c:fa:5d:b0:3b:4e:de:07:4d:99:
64:a0:2c:85:fe:63:53:dc:e4:e3:b8:dd:b6:cb:73:
e7:62:4d:01:76:62:e1:43:47:bd:69:a0:ed:cd:a1:
79:b7:ca:1e:1a:83:db:38:1c:3a:3e:5a:24:2d:32:
08:a3:06:8e:d8:7d:97:12:75:ed:ac:80:2d:01:6c:
93:06:67:07:31:12:4c:90:ac:67:ef:67:16:76:e5:
08:8d:65:41:7a:f9:27:35:d7:b5:eb:d3:27:39:0a:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:80:A6:F8:CD:62:E8:F4:27:09:49:4D:01:A7:6D:5E:AC:D7:04:51
X509v3 Authority Key Identifier:
keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3e:71:6c:87:2f:bb:ec:65:90:f2:cf:28:0f:12:c1:48:bd:
0d:74:cf:2f:29:4e:36:b8:af:93:2a:83:4c:b6:15:2d:79:c2:
c1:34:b2:c1:f7:f9:43:00:a1:c3:09:8f:74:71:45:fe:26:69:
ea:a1:8e:66:4c:55:1a:f8:d5:64:3c:df:63:47:b8:11:ab:b4:
5b:a5:2c:6f:42:71:e9:e6:85:63:f9:d0:38:e8:b1:99:63:b0:
40:47:f8:0f:f6:45:6f:fb:90:d8:66:e2:6d:bb:cb:e2:15:ef:
a0:3f:21:14:14:04:9e:6e:55:6b:06:74:4a:ca:53:7b:14:a5:
59:69:a0:5a:ab:e5:17:70:09:bc:3d:40:d7:2d:ad:9b:97:ce:
4d:69:cf:8e:41:34:3d:86:97:3f:9d:cc:82:a8:b2:91:e6:da:
26:e9:44:1c:a4:74:5e:bb:78:07:e7:db:16:d9:27:b0:b8:bf:
db:90:60:91:3a:a8:0a:63:4b:f7:79:04:c4:5f:9e:43:10:42:
c9:89:06:96:fa:d2:bd:04:e9:17:33:b3:8e:dc:73:1b:3d:1b:
cb:61:8b:33:fa:f6:6a:26:77:c8:58:ac:bc:d4:dd:31:27:c1:
99:ee:88:20:04:91:ef:9a:ed:4c:6f:32:c9:28:9c:69:8e:ff:
df:12:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:32:40 2025 by rpki-client