Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier: 2e7ZF1AfwmxBkcYxeqSVkxIH0Xfpu5G71X8FJhSWFWA=
Subject key identifier: B3:17:36:28:B3:7C:86:19:2D:F7:BA:16:88:38:A4:CD:EF:F2:FE:04
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial: 0196A540ED4F4435693D708C97BC7E1FDC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number: 1523
Signing time: Tue 06 May 2025 11:00:17 +0000
Manifest this update: Tue 06 May 2025 11:00:17 +0000
Manifest next update: Wed 07 May 2025 11:00:17 +0000
Files and hashes: 1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: f5xa2gMHVuEQZhMrSqMYLg79sCwl4GJhTxhGKv2sSbQ=)
2: qWxHxzkwFGcxa5jSluitx-sE42Y.roa (hash: 3aDiNAN4onF/Cdaq+yTsD+jmRJ2OmMmFOaHRV5Fmhp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:40:ed:4f:44:35:69:3d:70:8c:97:bc:7e:1f:dc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Validity
Not Before: May 6 11:00:17 2025 GMT
Not After : May 7 11:00:17 2025 GMT
Subject: CN=b3173628b37c86192df7ba168838a4cdeff2fe04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f3:f0:1d:77:2f:f9:e8:03:63:02:d1:63:0e:
93:4f:22:1f:cf:f8:ff:fe:e8:c1:5f:68:69:05:29:
5e:d8:8a:5b:47:52:fd:bd:d3:15:95:71:09:43:f7:
f5:36:ea:ef:4e:80:06:c8:cf:95:6f:ef:3b:a3:97:
2a:37:b5:63:09:ac:6c:d6:d8:7b:ec:6c:c2:38:97:
48:ba:77:0c:a1:51:35:4c:c9:11:aa:d2:62:ed:c0:
4d:58:9d:6e:70:b2:d7:11:ed:62:6b:a0:67:37:52:
bc:6a:d7:48:2b:cd:9a:4e:a1:fe:38:8e:3c:5c:03:
46:e3:61:a0:85:7d:e9:55:e0:cb:1d:59:e1:67:51:
28:38:34:d7:4e:62:35:9a:d9:8b:29:2b:6d:1f:58:
0d:be:1c:33:51:8b:7e:2b:d1:55:8a:5b:78:01:ea:
4e:d0:d6:55:59:5a:54:3f:48:66:73:f6:25:ae:41:
47:ad:95:0b:e9:3d:54:45:2f:9c:51:56:60:f5:87:
bb:de:4e:2d:e4:16:fc:e6:ba:4f:73:1a:90:3b:15:
e4:e4:68:ae:cd:44:88:70:2a:93:bb:5c:d1:ab:81:
47:75:24:0c:1d:2a:29:63:95:da:5c:b4:ba:26:b1:
fa:28:85:e0:2a:57:03:c1:64:ab:42:79:46:1b:6c:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:17:36:28:B3:7C:86:19:2D:F7:BA:16:88:38:A4:CD:EF:F2:FE:04
X509v3 Authority Key Identifier:
keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:13:11:b0:6b:2a:20:71:50:bc:57:bf:b4:18:40:df:1f:7b:
05:a2:53:20:1a:89:f2:f4:58:62:22:13:fe:af:ec:1b:b0:9c:
21:bf:88:40:89:af:42:65:83:12:11:0c:dc:bb:b3:a5:46:a1:
e7:c9:1b:df:e4:02:e6:21:bd:ec:95:03:45:00:8f:1d:25:29:
52:fa:8b:8a:fe:70:ab:09:07:61:37:49:bf:a5:43:36:24:0c:
17:42:90:bb:9a:26:c3:c2:9c:80:00:c1:7c:ac:6d:be:a3:9b:
d0:6a:99:5f:59:e5:68:d2:db:cc:56:e6:13:b8:98:58:27:ea:
8c:4e:24:d6:4b:70:3f:a4:6b:fd:3b:41:fe:ea:08:c1:88:5f:
74:e6:26:84:f4:04:bc:0d:69:a2:d9:00:d9:52:a4:cd:e9:52:
c9:ad:b9:8d:52:34:bf:8f:b7:ef:dd:30:6e:0c:be:4b:da:f9:
ee:79:81:d0:34:93:03:b0:02:f3:9b:2c:20:6c:2b:98:7d:0e:
42:d2:62:4d:32:68:b6:97:70:14:4f:30:09:fd:e2:53:67:33:
ae:e6:13:70:97:f5:3b:0d:86:70:9a:e6:40:23:98:e3:96:29:
fd:8e:62:b0:87:d8:86:51:f2:76:2c:14:6c:53:ca:de:29:61:
f8:7d:eb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:39:33 2025 by rpki-client