Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: hk3JG1o7wIUcGsEdJnzN3rK9avpjgnmi4i4ghh12BTo=
Subject key identifier: 92:6A:FD:20:3B:97:A1:89:6D:3A:10:CA:25:2D:60:E0:03:A0:95:38
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 0196A2E5959B9A61F30F43FE5AFA6033E23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1532
Signing time: Tue 06 May 2025 00:01:17 +0000
Manifest this update: Tue 06 May 2025 00:01:17 +0000
Manifest next update: Wed 07 May 2025 00:01:17 +0000
Files and hashes: 1: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: gGcj8/xwq+9DqNSYfOG9Innf4rhAmB6MbPh1jSo/YQI=)
2: b8jz-r7vQjjddqF3VDNwuYawYD8.roa (hash: yCjopkBeip/l25CGjiD85cwH+WcbGXggMR2Gr3nUOLU=)
3: gUX26Ns6rqAlu-ixVPnEVURo2ec.roa (hash: WlMrZuW0r4RvIkL/qKH8NZx/WIHxm9qbKJuxr85j0wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:95:9b:9a:61:f3:0f:43:fe:5a:fa:60:33:e2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: May 6 00:01:17 2025 GMT
Not After : May 7 00:01:17 2025 GMT
Subject: CN=926afd203b97a1896d3a10ca252d60e003a09538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:63:0d:96:f2:8d:83:34:74:34:54:c1:ad:
5b:4e:fa:04:d8:c2:e0:28:eb:c8:1e:36:b9:01:33:
e5:69:d3:8c:5f:42:01:09:22:4a:ad:8e:33:ad:1e:
93:82:6d:19:c0:b2:12:99:56:de:7f:a2:bd:9c:a8:
35:f6:7f:4f:11:db:1b:c6:b5:0c:1f:e8:1d:54:d8:
0d:e0:78:04:ba:c3:81:2f:15:7a:fe:6b:ea:ae:32:
d8:c4:7d:86:3c:9a:26:40:29:34:14:59:f4:4e:21:
b2:f3:cd:74:98:1f:8b:4b:c8:7b:8c:76:4d:5d:ce:
fe:aa:09:cf:77:c5:c4:ea:14:26:e1:02:7c:23:e3:
2d:14:46:c5:99:03:b9:b4:f5:72:73:63:6a:9b:ef:
01:a9:8c:74:13:74:94:5c:a1:46:ff:6b:5c:63:1f:
af:19:c9:9a:34:a3:78:54:8c:d8:13:cf:42:ef:5b:
60:fa:8c:63:36:db:9a:f0:96:77:a5:0d:17:88:46:
33:51:16:5b:12:5c:a8:4a:0a:12:fb:94:f1:7b:32:
68:f8:e3:69:be:cb:7f:a3:8e:40:a8:c2:79:66:d9:
c1:5e:20:aa:07:3b:d5:cc:58:04:5d:ac:a8:cb:a0:
ed:61:1d:74:ad:29:41:6c:ad:75:b7:db:e3:19:0c:
e6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6A:FD:20:3B:97:A1:89:6D:3A:10:CA:25:2D:60:E0:03:A0:95:38
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e6:be:30:b5:9a:7a:bf:f7:17:4a:f1:e4:e9:73:5b:10:0b:
ca:44:c2:38:c2:d6:73:c6:64:67:0b:3f:70:5e:fa:6b:1c:84:
a5:1b:34:8b:ac:b7:8e:99:09:5a:40:2e:7d:78:a3:e8:f6:fd:
17:56:bc:dc:fd:31:9a:10:93:cc:ab:e2:b7:07:84:e0:a2:5d:
ef:fe:46:ea:81:13:ac:2d:11:f4:d9:b2:16:40:fc:85:3f:06:
32:df:f5:18:73:24:11:2b:d7:52:d8:b9:15:18:90:0f:8e:f7:
76:91:7e:c4:f3:c3:e8:0b:7a:68:6d:56:79:38:f3:c8:51:22:
5a:7f:1c:d7:4a:2c:60:d5:6c:79:40:f5:e4:b6:06:0e:02:0c:
2b:c6:0b:4e:6b:dc:f7:3d:bf:ee:0d:92:1d:71:0f:c1:62:52:
67:4e:19:20:f1:fa:4a:81:1e:dc:2e:22:c6:c9:97:b4:e0:6a:
b6:1c:3d:c8:ae:57:7e:3b:ea:f9:4b:14:0f:be:9e:51:05:b5:
01:11:41:ad:1d:1b:63:46:bc:92:66:9d:15:27:b9:61:2f:a1:
23:ee:b7:ca:c7:e5:2c:8e:76:40:d1:c2:cf:ca:ad:27:86:da:
7d:29:d5:85:be:22:86:49:7d:8b:f6:57:0c:43:98:ed:1f:14:
e3:42:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:56:55 2025 by rpki-client