Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: hDpovAXu7hxiz16cPC5fF+MEruaWbY/8Gw1VXJPAr+o=
Subject key identifier: 8D:47:B4:83:19:ED:E5:7B:15:6D:05:2A:7F:F6:DF:1B:50:4A:11:19
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 0196AAD51AE3A63427D745ECEDBDB80A4709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 0282
Signing time: Wed 07 May 2025 13:00:14 +0000
Manifest this update: Wed 07 May 2025 13:00:14 +0000
Manifest next update: Thu 08 May 2025 13:00:14 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: PdIxJS/VKeOLQ88IPMje67GKz8pw9tMtU+fTCT7Y/iA=)
2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=)
3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:1a:e3:a6:34:27:d7:45:ec:ed:bd:b8:0a:47:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: May 7 13:00:14 2025 GMT
Not After : May 8 13:00:14 2025 GMT
Subject: CN=8d47b48319ede57b156d052a7ff6df1b504a1119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:e8:73:53:e7:b7:ca:4b:bb:3d:a3:96:62:
b6:64:15:3d:56:52:c0:00:a5:e9:dc:3e:9b:b5:cf:
28:59:31:e3:91:06:be:00:df:b6:24:9a:04:6a:03:
f6:fe:05:cf:95:71:0b:18:7c:d4:08:36:7f:7b:d6:
80:0c:6e:25:83:c1:af:b3:4c:a8:ca:d9:6a:c1:f0:
33:d5:00:22:3e:ff:22:9f:f1:d4:93:f5:92:ed:b2:
82:97:67:df:63:8b:66:a5:35:10:5c:78:3c:da:2c:
0b:84:5b:ff:c6:12:29:85:c6:80:39:d4:7c:43:70:
a4:60:66:c9:89:b6:39:09:8e:e6:e0:8a:b0:64:65:
bf:ee:b9:b0:e2:3d:3d:10:97:e7:7e:68:91:c0:9c:
72:39:e7:3a:ac:1a:2a:6f:44:fd:02:ce:65:ae:cb:
9e:5e:31:04:68:c8:2a:02:9a:d6:22:0c:de:26:bb:
fa:02:a0:c3:bd:47:fd:64:f8:4b:7d:38:bc:b0:3d:
41:27:43:31:43:04:ff:c4:72:cb:4a:8e:8e:7c:5d:
01:f4:d2:cc:38:36:ab:53:46:19:93:d6:0d:1a:cf:
96:25:b8:f6:46:a4:19:f4:af:2a:68:97:6d:42:97:
3f:b4:33:04:1b:a0:79:3c:81:54:3e:f7:2e:87:12:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:47:B4:83:19:ED:E5:7B:15:6D:05:2A:7F:F6:DF:1B:50:4A:11:19
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c3:8d:cf:8d:c6:b2:6c:8b:81:95:81:09:0a:83:4d:69:9e:
ea:2f:25:f8:f2:18:2c:44:06:67:7c:55:17:b4:48:ea:f3:77:
64:4b:53:39:92:e2:91:c1:76:8b:17:2f:e3:cc:83:48:f0:64:
69:33:a9:a8:b6:17:d6:86:5c:56:84:92:e2:df:87:b0:79:17:
df:0a:17:ec:c9:d7:bc:1b:0f:96:a3:45:09:89:e5:ff:4e:32:
b3:71:9c:b0:41:d8:7d:41:d5:61:f6:df:6a:c8:80:14:da:3c:
c1:e6:ee:3d:17:ac:20:e5:91:be:22:ce:e5:5d:5e:db:6a:29:
96:33:5e:44:94:e4:0f:db:3d:dd:e5:8d:a5:55:03:9e:97:a0:
29:9c:60:07:90:e6:2d:4c:17:73:49:16:89:1a:85:17:dd:ea:
62:96:64:c3:c4:d7:50:ae:39:03:a6:e6:ed:a4:31:de:b4:75:
aa:53:68:a0:4a:d1:61:77:c6:66:41:ee:e3:fa:bb:70:b9:e4:
45:d1:c7:5a:22:ba:07:48:e7:98:ac:d7:17:6f:00:d3:6f:5f:
a6:c3:79:9b:56:99:bf:24:46:95:23:1f:76:c4:7e:54:5c:de:
b2:3d:95:6c:35:11:6b:f7:ec:2c:47:aa:12:5a:5d:20:0c:27:
18:ad:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:19:25 2025 by rpki-client