Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
File: NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft (raw, json)
Hash identifier: WoUN5UlbEPuDpr8RB0Ey/dI/RU+KYEO9B+tI60qliTA=
Subject key identifier: A4:F5:09:69:AD:9C:74:74:A1:99:52:49:D7:50:1C:F8:6D:87:E1:DE
Authority key identifier: 34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
Certificate issuer: /CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Certificate serial: 01969ED1582D846F8CCC5D13CC44AE54C05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
Manifest number: 1104
Signing time: Mon 05 May 2025 05:00:41 +0000
Manifest this update: Mon 05 May 2025 05:00:41 +0000
Manifest next update: Tue 06 May 2025 05:00:41 +0000
Files and hashes: 1: NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl (hash: rETJT0Nm8KsiT3bHN1PzY1OgzFX/jqky8ktyXrQYqvk=)
2: aPFNqKZrV_epMPFvc-8vIsgJFgg.roa (hash: 83I0vKl1m5ZTxLcVY4fj2guNAuZT35HFxx/AGVAfz8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:58:2d:84:6f:8c:cc:5d:13:cc:44:ae:54:c0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Validity
Not Before: May 5 05:00:41 2025 GMT
Not After : May 6 05:00:41 2025 GMT
Subject: CN=a4f50969ad9c7474a1995249d7501cf86d87e1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ab:78:fc:12:92:5f:69:bb:c6:d2:cf:ec:03:
5a:ea:9a:02:d9:76:38:12:ee:06:71:3d:c2:6d:1e:
7b:27:72:d5:b0:99:1b:82:8a:cc:48:db:22:fc:9f:
ca:6c:48:4a:ed:d5:33:0c:f2:00:b9:8b:07:eb:4a:
d4:a9:51:4e:5a:61:44:f4:12:89:eb:94:62:c7:0e:
72:00:c2:17:1e:a7:a2:58:c8:98:f6:d8:f5:dc:53:
d4:51:23:44:28:17:3d:a8:af:97:13:6e:e9:5e:c0:
39:a7:e9:90:5c:b8:b5:7d:bc:45:c4:a4:c8:58:b2:
1b:b4:9d:fc:2c:f6:ea:fb:8e:4b:e5:1c:7d:3b:f9:
55:66:97:dd:bb:77:92:04:83:c0:ed:3a:b4:63:36:
d1:1b:12:b8:27:70:22:55:34:77:d2:66:46:45:cd:
a1:de:04:94:8c:50:d5:a1:84:f6:75:8b:01:56:bb:
bb:83:f4:01:5a:2c:50:86:8a:7f:be:ce:6a:80:d8:
4c:4a:25:7d:24:b2:d2:f6:db:da:e2:75:df:f0:dc:
04:66:3b:22:13:a8:a9:13:bc:0e:3b:7e:e9:55:8b:
73:fe:5a:01:d2:ee:52:12:6a:07:c6:94:59:45:eb:
ee:12:da:02:50:3a:19:c2:27:5f:fa:b3:00:31:61:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F5:09:69:AD:9C:74:74:A1:99:52:49:D7:50:1C:F8:6D:87:E1:DE
X509v3 Authority Key Identifier:
keyid:34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2f:9b:9c:6f:7d:7f:78:3d:eb:a7:e8:6b:6a:f2:a4:ba:71:
3a:ef:40:db:09:4a:1d:b2:4b:bd:a4:9e:b0:04:53:b7:af:6a:
7a:2b:13:c8:47:93:d7:c4:5b:73:ba:9c:5a:9a:67:28:a1:8a:
fb:5e:13:ad:73:b0:51:8b:33:f1:c2:3e:05:29:dd:46:e0:ee:
c5:35:d6:fd:1c:6b:d1:d7:97:cc:1e:2a:84:e5:a8:b9:0d:eb:
bf:f0:2d:c9:c4:fb:15:c6:31:e2:c4:12:60:c2:26:d4:31:2d:
45:b9:51:07:44:a1:d2:ed:34:81:bd:ad:95:e3:cf:a6:54:52:
02:ae:ab:83:14:3f:45:2c:d8:f0:2c:5b:95:85:39:be:33:0f:
6a:2d:a9:2f:f7:c6:aa:00:bf:79:81:65:3d:c1:94:37:57:1a:
11:08:ce:e0:86:39:bc:0a:a3:63:bc:18:5b:92:b6:eb:ca:88:
98:4b:c2:9a:64:59:30:cc:97:0b:09:49:60:7a:6a:4d:cd:93:
f0:0d:4d:0f:6a:e1:37:57:76:ec:9c:19:af:9d:60:1a:cd:79:
72:3f:73:cc:13:73:4b:5d:a3:0d:a7:cf:5b:f3:24:27:c1:69:
3c:43:08:76:51:f9:0e:c4:c4:77:0a:8b:b4:9e:3f:a8:64:3e:
43:53:ea:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:04:58 2025 by rpki-client