Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
File: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft (raw, json)
Hash identifier: Te4Og6hzW4yKQplgNu7Msj1vKV8Q3G/O325laYH9aes=
Subject key identifier: 36:BE:B6:9C:36:D1:69:76:09:ED:32:D3:1F:77:5F:66:E1:14:44:64
Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
Certificate issuer: /CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Certificate serial: 0196C2DDE6A412051A1576520F0BF23CF6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
Manifest number: 0FCC
Signing time: Mon 12 May 2025 05:00:44 +0000
Manifest this update: Mon 12 May 2025 05:00:44 +0000
Manifest next update: Tue 13 May 2025 05:00:44 +0000
Files and hashes: 1: JscmxGl_L2E7JnV0mfv32RHUpNw.roa (hash: 8j6EFW05T3ckFd0k6CAkZlDvS05KieVcVNbYKlWGlos=)
2: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl (hash: fbLjpISA3xb9LzJZ17BBCQmB8GWPzAhMrF4P/PXKovI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:e6:a4:12:05:1a:15:76:52:0f:0b:f2:3c:f6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Validity
Not Before: May 12 05:00:44 2025 GMT
Not After : May 13 05:00:44 2025 GMT
Subject: CN=36beb69c36d1697609ed32d31f775f66e1144464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:4f:15:3c:81:63:7a:6f:49:38:9d:35:b9:
55:28:13:6f:5c:b7:68:a5:5f:e9:58:fd:5b:4e:1b:
70:44:04:54:24:41:2c:49:a5:1d:08:e7:71:28:21:
2f:d0:b2:f1:33:98:5f:57:d8:a2:63:cf:20:2c:69:
8b:62:75:fa:bd:03:e7:9c:e0:44:1b:45:d1:92:2a:
52:43:ad:9f:67:34:6f:eb:f5:87:f6:af:ee:a5:76:
a5:21:7b:83:d8:cc:8b:64:bc:dd:13:b7:53:d5:8c:
cf:d8:e1:01:54:d2:fb:94:bc:9b:5f:6e:c4:69:d2:
a4:20:a0:11:df:f5:0b:8f:a6:2c:03:ae:d1:d2:bc:
da:2e:6e:de:b5:b9:ac:46:b2:29:7e:61:03:95:fe:
47:7d:b4:fb:f3:cf:17:d6:3b:4a:37:e9:15:e3:80:
a4:a6:8c:b1:20:14:17:b7:5d:4e:0e:62:7c:9e:98:
c1:61:4b:6c:c8:7e:81:50:f4:b0:e9:57:1f:57:8e:
19:5a:f0:e4:03:b8:e8:9c:88:da:f2:e4:aa:5a:3c:
f0:a7:2e:de:9a:04:40:61:68:ef:ac:d2:df:40:ab:
12:0e:0a:73:f3:df:7b:6c:a9:21:f3:24:14:4d:b1:
fc:52:10:60:20:ab:2f:52:00:87:e4:ad:19:51:50:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BE:B6:9C:36:D1:69:76:09:ED:32:D3:1F:77:5F:66:E1:14:44:64
X509v3 Authority Key Identifier:
keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9f:50:61:2c:39:be:b4:58:a4:05:d1:ac:c3:d1:ac:ca:7d:
a1:cf:6f:da:da:20:63:7c:93:cb:4f:19:2f:75:75:e1:e9:3e:
5e:51:89:99:3e:bf:ad:74:02:1c:a6:0c:ff:f3:f0:a0:c7:dc:
c6:d9:90:60:bd:51:f0:11:42:24:bd:6d:8a:0b:82:54:ac:5d:
90:a1:e2:05:67:6e:ee:e2:86:8a:34:55:2f:d3:98:e3:70:aa:
d4:e4:3b:dc:19:a9:97:5b:74:81:59:d2:ea:ae:90:76:25:e1:
cf:8c:5a:8a:d5:ee:a0:48:89:9c:5e:96:c6:e9:04:91:5e:ac:
a5:09:99:b0:41:ef:a8:32:ee:ba:30:fc:e8:ae:65:8e:f7:45:
a8:60:f1:30:8e:78:a0:c9:6a:55:64:0b:42:6e:29:7d:75:3e:
de:d3:dc:65:73:71:a6:a4:b8:74:69:8a:41:5a:3c:2a:c3:51:
37:64:89:91:ff:b1:98:09:b0:ca:f2:a9:0b:0b:19:0e:d8:88:
9b:cb:7d:a3:5d:ab:e0:b1:8e:c6:b2:37:8d:0c:c8:77:87:1f:
c0:ad:85:d6:5c:b7:16:3b:0a:f7:24:3a:41:00:85:b0:2a:de:
36:e6:13:da:3a:36:7d:94:6d:70:09:65:e3:56:d6:5f:87:8b:
cb:ba:b1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:45:55 2025 by rpki-client