Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
File: NQtAztNuMfkF4abo4DxiHp-_yyk.mft (raw, json)
Hash identifier: 32yuwq0DNmr31Ju2Qe2Aq7lxwUMHg+J6+ito2qDX2ZA=
Subject key identifier: 6A:2E:1D:43:81:5A:40:BC:99:06:25:C6:47:70:8B:D4:C3:95:2A:4C
Authority key identifier: 35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
Certificate issuer: /CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Certificate serial: 0196A0888797EB43DCCA7130CA894E683AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
Manifest number: 1262
Signing time: Mon 05 May 2025 13:00:24 +0000
Manifest this update: Mon 05 May 2025 13:00:24 +0000
Manifest next update: Tue 06 May 2025 13:00:24 +0000
Files and hashes: 1: NQtAztNuMfkF4abo4DxiHp-_yyk.crl (hash: 3rrrdFbpyEBQHOtnCqi42UXzT9P6FgDX4HH4mKnQemg=)
2: u7-gL9wSp2bGW7DIF24NVuhmOKc.roa (hash: tP75Wdne3vqUbGN0hrtXpkGNXdZlPHZwjnI3xiXFlak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:87:97:eb:43:dc:ca:71:30:ca:89:4e:68:3a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Validity
Not Before: May 5 13:00:24 2025 GMT
Not After : May 6 13:00:24 2025 GMT
Subject: CN=6a2e1d43815a40bc990625c647708bd4c3952a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e0:6e:e7:92:ee:28:50:8b:60:cf:9e:1e:f0:
4b:2b:d4:dd:5a:f5:08:59:fb:76:fe:92:e2:00:ac:
52:7c:76:28:a8:59:98:f4:07:b6:4d:70:31:12:a9:
67:94:eb:14:67:d6:48:fd:86:7b:82:73:c8:ed:9c:
ad:6a:e2:25:ee:1b:8a:9a:ee:e6:e6:7d:f3:47:2e:
40:d7:77:8f:8d:d9:76:aa:f4:93:7c:b4:a4:78:6d:
b7:e1:61:40:5c:3f:ce:8c:dd:79:49:93:2e:81:f8:
b2:10:40:77:73:af:2a:a5:57:71:d9:69:c7:1f:c2:
c6:6a:12:db:6e:ec:7d:97:67:b3:d0:7e:de:94:a6:
18:24:34:73:16:20:77:da:53:c5:0a:cb:93:bc:39:
29:cf:b2:6c:b2:c7:24:cc:eb:1f:b0:a9:0c:a0:cf:
d0:8c:4e:76:1b:76:df:d9:58:20:6d:c2:29:bb:4f:
65:a2:7d:24:30:d3:3c:f6:8b:37:4b:b4:4c:59:79:
3f:42:01:c8:98:f3:4a:d2:e7:44:14:35:62:0e:a7:
c0:2b:ef:11:2e:2c:91:a8:bb:7e:83:46:6c:0b:77:
5f:e8:71:11:a1:29:6b:ca:26:ad:b3:98:1f:5f:7f:
79:f3:71:40:ac:c1:41:1a:00:db:52:4f:d4:c3:47:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2E:1D:43:81:5A:40:BC:99:06:25:C6:47:70:8B:D4:C3:95:2A:4C
X509v3 Authority Key Identifier:
keyid:35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cc:2a:fb:f1:4f:89:56:9b:7f:f3:16:66:e3:77:36:3e:7b:
d5:e0:c9:df:31:d1:ae:ba:4f:cc:51:45:3e:9e:a4:61:53:c5:
c9:54:ed:4c:4a:f3:7a:0c:19:60:ad:ba:67:7d:62:80:93:5f:
8c:00:d6:70:99:0e:6b:38:09:19:85:bc:f1:1b:b8:87:96:44:
a5:27:80:58:49:f1:98:23:b3:19:c0:55:0e:40:71:1f:ae:8a:
e2:31:fe:9c:a1:08:30:e6:ac:ae:04:65:67:89:41:06:1c:b4:
b4:84:87:9b:ed:82:38:78:d3:81:c6:e6:0e:49:da:8a:ee:1f:
99:e5:b6:41:77:85:4b:cf:9a:e7:b0:ae:3a:d6:a3:8c:af:1e:
8b:f1:84:99:ef:65:b9:b6:64:ea:5f:fa:2e:7a:34:2a:38:c6:
dc:d2:9b:71:5c:aa:68:2c:f0:f5:fc:c1:0d:29:31:ee:63:2a:
34:3a:39:ee:b0:7d:89:80:01:47:1d:fb:d6:65:2b:28:c3:2b:
40:6c:53:45:9c:da:68:a3:b7:28:8e:13:89:aa:10:4b:9f:37:
bd:51:16:b4:b9:6c:ad:9c:6f:bd:73:e0:c0:f0:d9:3e:6e:56:
92:27:f1:98:fb:9e:19:59:00:c2:7e:e6:28:3b:09:7e:36:79:
67:7c:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:51:37 2025 by rpki-client