Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: Ef2WQo71LL/L4KSKRiGE1ylOInuzNeP7R6w8XkG7ISY=
Subject key identifier: 06:E0:98:E5:CA:B8:D4:17:AC:0D:E6:68:0D:69:B1:2D:5D:81:DB:27
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 0196A79DC36272F156AE67B38207EDC3DE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 1024
Signing time: Tue 06 May 2025 22:00:56 +0000
Manifest this update: Tue 06 May 2025 22:00:56 +0000
Manifest next update: Wed 07 May 2025 22:00:56 +0000
Files and hashes: 1: 44fsOPhLBto54i38jO9Qp6LcR34.roa (hash: q6FqWEqTwKl4W57zhlt+bCI2esmopnN71WRYkbStb/o=)
2: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: pN+1ST3ndjYJpEaA7NHioTjrJJddd6zm2TttIeSL7rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:9d:c3:62:72:f1:56:ae:67:b3:82:07:ed:c3:de:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: May 6 22:00:56 2025 GMT
Not After : May 7 22:00:56 2025 GMT
Subject: CN=06e098e5cab8d417ac0de6680d69b12d5d81db27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:c4:38:2d:e6:fb:ab:05:39:a1:34:2d:86:
a0:5a:91:b7:3d:5d:f3:9d:04:c6:65:b1:c5:04:03:
fa:cc:96:64:ed:4f:d7:0a:ae:f2:cf:b5:6f:32:05:
51:3d:1f:28:d7:89:1a:98:4b:85:cb:2c:67:a3:f0:
6a:8d:d6:3d:08:ba:7c:6a:d4:0f:b6:61:c8:63:7a:
89:b7:97:ad:bb:eb:1e:da:83:e3:83:8b:f0:a4:6c:
08:5e:c8:a6:c6:93:79:22:29:53:92:45:84:44:e1:
da:54:34:85:05:c7:78:77:22:d9:e0:36:e9:af:d5:
ea:9d:11:ab:eb:48:c4:4b:cc:5e:27:c2:c4:74:6a:
7b:9f:c0:d4:40:7e:f4:ff:cf:6f:dd:91:2b:06:ac:
87:ee:21:8d:96:3e:9c:65:1f:5e:21:fc:4d:2b:2d:
da:c4:dc:98:18:9c:fc:c6:11:fa:bb:0e:09:e8:ac:
2f:5b:6f:e4:cd:8b:2a:6b:85:36:3f:31:99:61:9b:
4d:a4:1e:97:1e:9c:be:16:54:56:87:04:ee:96:6e:
ed:72:1a:2e:68:02:6e:70:a9:6b:28:c2:9b:cd:f0:
e6:e8:ed:e6:bf:07:2b:27:7a:b0:0a:fe:56:4a:a4:
b6:fa:e7:7f:a0:a8:4f:2e:80:46:3c:3d:c5:05:04:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E0:98:E5:CA:B8:D4:17:AC:0D:E6:68:0D:69:B1:2D:5D:81:DB:27
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:29:11:09:1a:54:38:e8:68:0a:2d:9a:99:d3:80:73:5f:7d:
08:91:0d:3a:18:d5:37:f1:26:4d:41:0a:18:f5:21:11:f4:20:
47:95:90:21:4b:c5:13:64:9a:94:d7:37:7d:26:4f:87:93:f7:
59:7c:e9:47:ea:c5:8f:ac:3c:cb:9b:7a:c0:91:3e:d1:05:b3:
bf:8d:4a:c7:61:46:03:c8:e8:7f:0b:c3:e2:ee:ec:ac:7d:d1:
33:06:be:9a:6d:32:28:fe:52:38:94:dc:8f:df:71:c3:55:ad:
a9:2b:05:ba:c9:3d:6a:1a:9e:3f:3b:21:b1:cb:e1:01:bd:37:
22:b4:e8:c1:ad:27:f7:ea:b2:cb:bc:49:49:38:09:c0:62:07:
9c:89:74:ee:1b:e0:08:a0:4e:3b:8d:9f:2a:21:85:3d:41:f6:
9a:44:24:58:4d:f4:03:60:9f:36:12:dd:56:9d:00:18:c8:0e:
aa:0f:aa:31:9c:f0:e8:ed:c2:5a:c4:48:32:21:b6:d5:c7:a7:
30:cd:fb:47:b3:d3:ee:b0:61:fc:ff:2f:07:ed:c8:bd:0f:4b:
c2:8d:62:ca:fd:48:59:cb:73:4c:c2:52:51:f2:ee:ff:e4:5b:
37:e1:90:eb:91:7d:2a:e8:83:5a:e2:c3:5d:c3:52:c4:de:08:
41:3d:d0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:14:04 2025 by rpki-client