Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: jLOfhuWikEWZ/43IyW1sc9uJNX2clsxdTJnjAzQxxOo=
Subject key identifier: 4C:3C:D0:BF:7E:7F:83:61:CB:D3:0B:50:5A:26:D7:C6:96:81:FD:A1
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0196A54163763734DF2C49A6285BADABBF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 1545
Signing time: Tue 06 May 2025 11:00:47 +0000
Manifest this update: Tue 06 May 2025 11:00:47 +0000
Manifest next update: Wed 07 May 2025 11:00:47 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: f74hb33A99NLRnR/5+z0SC/vfdaY9jbKzFa7utnmmgA=)
6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:63:76:37:34:df:2c:49:a6:28:5b:ad:ab:bf:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: May 6 11:00:47 2025 GMT
Not After : May 7 11:00:47 2025 GMT
Subject: CN=4c3cd0bf7e7f8361cbd30b505a26d7c69681fda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:93:82:ae:24:6f:76:36:e0:da:50:bb:b5:
fc:bf:40:6f:f0:a9:db:8a:75:dd:cc:9b:bb:36:05:
9c:8f:30:9d:fb:ae:ad:40:0a:25:72:11:da:3f:60:
7c:e2:31:e8:38:f9:e5:5a:bd:ee:ff:0d:f3:b7:11:
e4:cc:a1:6c:4f:f3:5c:5c:3e:6f:16:41:12:3b:2f:
24:9c:63:50:25:7e:90:58:eb:0c:ce:2e:da:3d:07:
de:ce:c9:a7:14:fd:e3:7a:38:8a:ba:8a:42:24:ff:
e8:ac:07:ab:ec:cf:f5:30:d9:c6:c0:e5:ad:7e:54:
88:65:29:42:0c:8d:c2:1a:66:89:f8:0e:b2:1e:56:
b0:9a:2d:d5:cc:88:85:a2:93:a6:8c:fc:c4:98:ef:
c1:29:51:09:3d:b1:8e:52:a5:62:1e:be:65:09:f4:
cf:f5:5d:a0:84:a1:5e:00:2e:25:55:f4:13:1e:9f:
a6:5a:67:ad:48:e4:27:60:c6:05:34:13:97:d6:7c:
97:76:15:74:1e:e3:ce:32:87:1a:74:76:f6:84:31:
b5:81:13:e7:d4:eb:20:14:69:e6:9d:d3:d1:03:30:
ba:94:20:9d:91:09:b2:1a:2f:90:c6:ab:95:a4:c1:
d3:a1:fb:2d:80:08:b7:6f:23:b3:02:55:3d:79:25:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3C:D0:BF:7E:7F:83:61:CB:D3:0B:50:5A:26:D7:C6:96:81:FD:A1
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3e:d4:ae:fe:3a:af:1e:fa:10:28:78:3a:7d:6e:0a:de:20:
0a:34:d0:d3:b4:6f:48:dd:d9:42:24:df:96:1f:e5:09:a5:0a:
f6:cb:93:8c:e7:e3:ce:bf:a3:ac:e9:d0:95:86:ed:2e:c5:33:
f3:4d:96:3a:27:d6:25:79:41:ee:8d:60:03:73:73:c0:5f:45:
2a:0a:76:50:92:af:3c:c5:f4:32:da:88:2e:4c:4c:73:33:15:
e3:a8:d7:6f:b7:d2:b0:ec:39:8f:81:e9:5d:0f:06:8e:a1:0b:
33:b8:b0:b5:21:a2:28:10:d5:49:8a:7f:c4:d4:0a:9d:3e:48:
f8:67:64:f0:49:19:71:62:9c:81:a8:e9:b3:58:43:e9:2b:af:
79:2a:7c:a0:d9:80:00:53:43:77:cb:71:ee:57:d0:ec:14:77:
3b:a6:77:62:36:b9:f3:68:84:34:be:7e:81:c1:a4:bb:a9:28:
6b:f0:bd:24:c5:9c:f0:98:41:76:02:f6:93:9f:ab:08:29:b0:
27:6c:28:98:58:9a:bf:ea:2b:32:6e:98:60:58:17:a4:78:40:
3d:45:fb:00:aa:df:aa:1c:5b:08:10:ca:00:3a:91:77:93:3a:
64:90:56:66:88:8f:46:60:94:ba:1e:da:7b:4a:64:65:98:5e:
25:de:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:00:51 2025 by rpki-client