Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: kR6CN2Mtyy6gmWlAf5gqHhucxsEmcKLJ8DnNMvOu3Gw=
Subject key identifier: 4E:DC:A3:49:4C:97:B8:06:0B:9A:86:50:46:25:92:95:F9:79:99:E7
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 0196BFDCC9DF8B398A49787BCEC9577E5C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 0506
Signing time: Sun 11 May 2025 15:00:39 +0000
Manifest this update: Sun 11 May 2025 15:00:39 +0000
Manifest next update: Mon 12 May 2025 15:00:39 +0000
Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: JIvKFRlBxEB/lb6yv6CmU6I0wwg+4KEYmXjRbjeNe1s=)
2: hzr42e2R_h-LWwgBpSQZacNEqsc.roa (hash: 9mXipkAV76pHGL76kppNcnsru8YUceXMwinc9f3N1VQ=)
3: t7tnySRpEFMTydXCzGToiDJgYGQ.roa (hash: CXeAI4+kyWk1ca7T6WDcTTVmJi/Ezadlx47KG35a8Bw=)
4: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (hash: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:c9:df:8b:39:8a:49:78:7b:ce:c9:57:7e:5c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: May 11 15:00:39 2025 GMT
Not After : May 12 15:00:39 2025 GMT
Subject: CN=4edca3494c97b8060b9a865046259295f97999e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:5d:a0:d3:f1:c4:d5:d6:e5:68:6c:fc:3f:
a7:9b:d4:bb:98:89:1e:29:0e:c8:94:76:ff:4c:7a:
4a:35:b4:18:29:88:ba:20:b1:94:90:0c:73:1b:7b:
22:81:26:a8:c6:53:81:e9:0f:98:0a:46:3a:f9:23:
94:58:4e:9b:ce:54:e5:05:e2:b9:8a:b8:69:6d:a6:
13:8f:dd:97:5a:83:40:21:e2:0b:77:06:1f:aa:b4:
6b:e4:78:b2:66:fa:77:42:2f:ab:a5:2d:0d:78:8b:
64:67:fa:d1:47:11:fe:21:1e:6d:a5:39:fe:65:a6:
06:56:30:c5:e5:32:d8:77:55:72:07:1e:7c:78:83:
61:cb:22:16:86:c5:f2:21:65:aa:cf:a1:3b:72:08:
fe:c2:a2:a0:22:77:33:57:9e:21:90:c6:63:85:da:
72:87:3d:ec:13:28:49:aa:11:a5:aa:d4:ae:39:b4:
04:2a:b3:ce:9b:87:92:e1:87:b7:d6:82:5c:eb:76:
bb:a0:b9:7f:de:cf:53:fa:f7:55:b3:e6:0e:f8:2f:
81:9b:36:2b:9b:09:51:ee:66:bb:fa:14:16:6f:da:
97:c5:02:fd:88:85:dd:17:de:0c:9a:91:61:29:37:
d3:f7:6b:a6:c4:6b:ce:9a:e5:49:bd:bd:73:3f:ae:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DC:A3:49:4C:97:B8:06:0B:9A:86:50:46:25:92:95:F9:79:99:E7
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f9:7c:4e:f9:11:8e:7a:5e:0d:3b:38:d2:bc:a5:66:19:a7:
ee:01:18:bd:f7:bb:cb:48:bb:87:37:72:cc:b7:1c:8f:e0:08:
33:fe:61:9f:5a:0e:b3:c4:c2:4a:f5:48:ef:91:8e:54:be:fd:
59:89:75:4d:e5:de:7c:c4:34:f3:a8:05:a8:d0:e3:03:a3:fd:
b3:0b:a1:35:92:87:9a:4a:9e:12:a6:52:19:b6:cf:9a:96:1f:
e9:c1:d2:01:d3:38:a8:26:28:b7:45:77:4b:d2:da:d8:a7:76:
a1:74:9f:4b:ef:20:91:44:6d:66:0c:c6:4a:b4:75:b4:6b:24:
7c:64:34:5c:d2:a8:26:86:58:44:67:3d:1f:d8:7f:14:6c:e0:
54:f0:01:b3:d5:89:27:77:96:77:6f:84:83:2a:a2:61:77:8c:
1a:88:30:70:09:fb:72:38:0f:68:d6:96:07:63:71:37:f3:66:
6a:3e:16:c0:6e:2c:0e:54:2d:ce:b1:36:26:16:df:48:f5:34:
8e:0f:cd:b6:65:c0:78:5d:27:f5:14:19:44:c0:32:91:fe:be:
ce:fb:b0:ca:bd:05:d7:72:2a:cc:bf:83:5f:3a:a7:16:62:75:
4b:f9:a4:16:50:ef:63:b2:d4:4e:51:e2:6b:fa:75:11:59:21:
77:55:12:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:11:50 2025 by rpki-client