Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: G5F7cJfapwLYKjdKVnRKtpsaDAswtYhKcGWihOBAxtM=
Subject key identifier: 58:4E:AA:D2:70:57:7C:63:0A:2E:9D:8D:E3:47:66:D1:5E:53:36:E1
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 0196B0D796ED702AFB839BD328AFFDF60B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0C0E
Signing time: Thu 08 May 2025 17:00:40 +0000
Manifest this update: Thu 08 May 2025 17:00:40 +0000
Manifest next update: Fri 09 May 2025 17:00:40 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: UeVx/ThzkP1ky7whExg/2EGH2ME9ag4SAuqhhATCWg0=)
2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:96:ed:70:2a:fb:83:9b:d3:28:af:fd:f6:0b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: May 8 17:00:40 2025 GMT
Not After : May 9 17:00:40 2025 GMT
Subject: CN=584eaad270577c630a2e9d8de34766d15e5336e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:dc:92:f6:d2:d7:e9:96:d6:58:8e:83:17:
03:0f:ca:a8:48:3a:8b:a3:94:fa:c5:17:1e:e8:fa:
0a:73:b6:fb:48:b2:dc:46:a0:c9:87:68:41:c7:ab:
d7:86:65:38:51:19:14:d4:da:1a:2f:f8:1d:a3:51:
58:f0:b3:6b:ff:85:66:12:49:5e:07:33:8d:eb:52:
3b:bc:67:c6:29:4f:50:02:e8:27:76:58:70:6e:a9:
5e:f5:f4:0b:a7:50:c5:01:7a:c8:92:3a:c5:16:22:
6a:aa:77:21:da:cb:6d:30:5a:d9:9c:37:34:67:be:
10:8b:38:c9:69:40:19:be:b4:9b:58:4b:b7:4c:6f:
5e:b9:10:21:35:ff:a1:a5:2c:d5:cb:0b:6b:96:f4:
e6:f9:e3:75:5e:59:9d:15:66:28:e0:23:b6:be:86:
ad:3e:92:90:53:f2:44:5e:5f:37:e9:b8:77:4b:19:
52:98:64:13:b2:2f:a8:e3:ae:9f:c8:4e:0c:a3:ea:
f5:08:c7:77:a8:59:d1:e6:ff:2c:7f:c6:f7:d4:12:
0d:2e:bf:cc:75:3d:ee:5b:21:e2:1a:eb:00:0b:df:
29:d2:af:8c:63:db:fd:9b:7b:62:e2:a8:96:9d:57:
7a:c2:fe:b1:70:17:30:8e:f6:74:aa:fb:ea:c5:d2:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4E:AA:D2:70:57:7C:63:0A:2E:9D:8D:E3:47:66:D1:5E:53:36:E1
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6f:28:a6:8f:cf:49:d3:53:30:f6:5b:82:ad:0f:04:81:34:
3e:ab:e1:67:c3:d7:90:53:15:a8:1a:56:28:9a:64:11:15:79:
25:4b:e4:99:ff:1b:ff:5a:8c:73:24:76:23:12:3b:45:91:e7:
af:a3:14:79:ca:4b:42:fe:18:ce:60:76:54:45:ee:82:9c:1d:
7d:ef:79:a0:a8:df:3e:30:c6:ed:1f:9e:bc:92:ae:86:fa:5e:
71:d2:74:3d:ed:3b:df:b7:0c:df:13:8d:7c:ad:ae:8a:f3:8a:
62:4f:27:b3:da:e5:0e:67:20:27:a4:5f:1c:ed:94:1d:b8:a7:
17:d7:0b:72:f9:08:af:07:cb:d7:c1:9f:47:29:f0:67:d5:e1:
b2:52:ca:22:ee:4a:a0:fc:29:2b:a0:cc:c7:fa:74:34:22:d9:
10:95:1e:6c:6b:68:22:eb:bd:97:0e:4d:07:36:24:fc:54:81:
95:04:f8:10:34:17:72:57:b7:6a:d5:4d:59:1e:0e:4e:27:40:
3a:72:c3:f9:a0:f9:4d:79:47:a1:f4:b2:b3:34:71:2a:ec:8d:
2c:86:34:d8:1d:9e:5b:3c:78:2c:5c:c7:0b:17:6f:89:dd:a3:
d6:7e:62:bc:e5:57:27:19:9b:8b:c5:d2:b8:9b:a0:f7:a9:0a:
27:26:25:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:09:12 2025 by rpki-client