Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
File: NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json)
Hash identifier: o8YAJorjMU0AEN94tA0qG4PgQm/I1eGQkILtofhKi1k=
Subject key identifier: 3A:FC:AC:69:3A:56:65:97:F5:7B:53:B7:73:1B:E7:FB:22:28:9C:80
Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Certificate serial: 0196AB79DD53AEF92680EB67E7EB6E525F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
Manifest number: 0AA0
Signing time: Wed 07 May 2025 16:00:12 +0000
Manifest this update: Wed 07 May 2025 16:00:12 +0000
Manifest next update: Thu 08 May 2025 16:00:12 +0000
Files and hashes: 1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: WWVPKQr1ltNEUDgwWZLtSKWhlLD0jdJrgQAbf4OeLiM=)
2: aW-VGVGdm0-L-FbjniUArFBGQOM.roa (hash: AOid/jkmGTmxdydP8OpZ8P1YZL2W+vkkEZ5iL+JUH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:79:dd:53:ae:f9:26:80:eb:67:e7:eb:6e:52:5f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Validity
Not Before: May 7 16:00:12 2025 GMT
Not After : May 8 16:00:12 2025 GMT
Subject: CN=3afcac693a566597f57b53b7731be7fb22289c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:e4:6c:5f:08:87:07:12:25:39:db:ca:ed:
da:a6:e3:0f:f2:62:fb:3a:d0:9b:ad:35:29:32:c0:
d5:05:2d:bb:a2:39:43:93:fa:aa:f6:81:aa:4b:d5:
9a:41:e1:14:9b:1a:08:5c:72:49:b4:91:96:2c:93:
ec:de:85:54:1d:69:97:7a:e0:e4:7f:67:52:43:48:
6c:74:b8:98:c5:03:9a:5d:0f:be:45:78:9c:f1:7c:
a7:1c:90:17:84:bc:a0:e2:6c:e2:13:27:f6:4f:c3:
cd:e5:a2:aa:75:1d:0d:91:78:d8:31:57:44:34:d0:
cd:74:73:a5:3c:e7:76:54:9d:63:c7:9d:2b:11:70:
6c:38:ec:d0:2b:34:23:1c:eb:9d:5e:9d:88:16:a4:
7d:ef:6b:6f:3d:21:10:c9:84:0c:44:9a:42:1c:bf:
aa:02:a0:aa:4c:e8:68:ac:e3:93:d3:18:06:bd:1e:
64:ae:2c:7a:d5:49:38:fc:43:bd:af:2c:61:02:de:
fe:34:53:3b:14:5b:e1:6a:5e:dc:b7:ca:11:51:d2:
59:54:15:bc:76:4d:0f:fd:14:9a:09:be:df:b1:39:
46:de:45:86:32:7f:1f:af:a9:91:2a:07:3a:47:12:
21:71:aa:a1:f2:60:96:63:2c:a3:97:ac:70:0f:8a:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FC:AC:69:3A:56:65:97:F5:7B:53:B7:73:1B:E7:FB:22:28:9C:80
X509v3 Authority Key Identifier:
keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:db:c3:cc:ee:ff:50:0a:b3:c8:a0:05:9d:c7:15:93:ef:cf:
28:51:ab:46:78:5c:95:1c:d3:58:c2:26:11:30:48:4c:78:84:
94:1e:c6:17:6c:69:17:a9:2e:d1:0c:12:78:76:6d:2a:d4:ff:
d7:fa:eb:ac:e7:32:64:7f:82:c3:d8:23:14:f5:f0:df:c3:a4:
af:36:c1:40:0c:73:18:4d:d6:4e:20:32:9b:b6:86:dd:c3:a2:
cc:31:be:b1:55:48:e0:7f:5d:9e:4a:8b:b0:b3:e8:d4:7c:ee:
86:63:1f:b0:88:30:be:66:a5:3e:d7:bb:dd:c8:e6:15:ce:96:
28:45:43:ce:64:0b:b4:e4:a7:f9:35:51:b4:09:ae:f2:8b:7d:
d8:ec:d7:46:5e:b9:41:40:a2:84:3a:6a:e0:a6:fd:f6:44:d8:
eb:5e:97:cc:31:00:2a:15:fd:d7:f7:38:d2:9a:86:2e:fb:7f:
d8:c1:98:6d:31:9f:9b:ba:dd:ba:ca:e3:b4:7c:4b:9d:04:c8:
db:b6:e0:6a:ee:c9:b3:d7:35:9c:5f:4d:37:1c:cb:ae:52:eb:
30:e1:e4:bd:bc:c5:44:e2:a8:0f:3f:85:ea:5e:10:d0:a5:8b:
85:e6:52:23:d6:31:da:82:55:6c:79:c5:9f:4f:51:94:59:2b:
d0:e6:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:20:56 2025 by rpki-client