Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier: z3VmclhdyABhsnzRXihUCegXO93dPQUhkab7fHihpxU=
Subject key identifier: 33:19:0F:53:F7:89:A5:AD:BF:22:48:B4:9A:DE:AF:0C:7F:51:0A:7E
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 0196B0328774310BE8118DBBCB6BD5560687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number: 152F
Signing time: Thu 08 May 2025 14:00:23 +0000
Manifest this update: Thu 08 May 2025 14:00:23 +0000
Manifest next update: Fri 09 May 2025 14:00:23 +0000
Files and hashes: 1: H8j-KlQfL6AGuM7lJr3knJUrtEo.roa (hash: 1uefLTqkvz0OqXFo/HdbBytkVHKTsftF+EzOemS3iXc=)
2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: aHX5SfwqAgn0jMVgAlqOd/12N8V3pIPjdX1BRONpkT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:32:87:74:31:0b:e8:11:8d:bb:cb:6b:d5:56:06:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: May 8 14:00:23 2025 GMT
Not After : May 9 14:00:23 2025 GMT
Subject: CN=33190f53f789a5adbf2248b49adeaf0c7f510a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:f3:58:73:0d:76:0f:be:a5:91:b4:50:ac:
88:e4:cd:1b:a2:b1:71:38:ac:11:f7:7d:b3:4d:d2:
c2:e9:47:62:14:96:9f:69:e4:ef:12:f6:55:99:c5:
5b:1f:67:b9:e0:94:e4:f3:18:bd:f2:46:f5:4e:53:
2b:12:3c:5e:79:3c:09:f8:93:7e:38:07:22:a5:b9:
0b:56:ad:64:d7:f6:ae:08:52:ce:05:aa:d8:45:32:
87:96:1c:bf:59:b4:3f:28:2e:98:dc:1b:5a:56:4a:
ac:0b:01:27:02:9b:7f:fa:de:81:c0:23:e2:6e:99:
af:aa:84:08:4c:6f:61:19:69:ce:c3:4f:69:c1:7c:
e0:7c:83:db:2a:b7:4a:5a:81:3a:b9:24:a2:77:98:
48:d0:61:06:9e:d4:46:a8:ed:38:b7:4a:cc:46:19:
6c:6b:dc:7e:3b:df:21:cc:05:fa:b9:9b:75:3b:7f:
20:e4:a1:83:e0:ef:3a:91:d0:38:8e:47:fa:b9:66:
54:0b:93:37:b0:c0:30:0c:58:11:e0:8a:3a:d7:4b:
ca:b8:67:ba:ef:4c:94:aa:17:72:bf:1d:0a:01:a6:
51:4f:83:0a:3d:6d:e9:36:76:cd:eb:80:e8:af:08:
92:77:b4:87:35:d6:a3:d7:2a:58:86:4e:0d:b3:d8:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:19:0F:53:F7:89:A5:AD:BF:22:48:B4:9A:DE:AF:0C:7F:51:0A:7E
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:91:d9:07:ae:2f:a8:b7:0a:c0:18:ba:6c:99:95:53:ff:91:
05:e4:cc:52:e4:8b:81:5d:93:24:ab:b2:9c:8e:22:68:a8:0f:
e3:aa:e7:07:33:09:90:62:9e:f1:f7:39:eb:0c:7b:b5:9e:92:
fe:2c:33:1d:01:e5:7a:14:58:0f:c5:3f:c2:46:78:fa:56:05:
12:38:3f:d4:7c:bc:73:bb:9c:95:36:a0:ed:e4:cb:32:05:6f:
b6:13:bd:4a:36:9a:5d:22:e0:4c:0e:f5:df:23:56:0e:a4:88:
d5:40:b6:dc:fa:29:8c:d0:cb:33:5b:33:2e:fa:a5:3e:59:a1:
01:fd:88:43:f9:bc:80:74:32:56:fc:6b:7e:30:d3:32:d8:39:
39:2a:14:b4:91:cc:52:11:91:e0:85:b0:4c:c6:65:43:12:aa:
3d:e2:85:4c:ff:f8:ae:fb:1d:60:d3:b6:ae:c9:c5:86:df:5c:
55:6f:c4:5a:52:ce:16:0d:e9:49:f2:e2:3a:4d:60:3e:1e:3d:
10:74:7c:75:5f:48:c9:a9:02:60:34:37:cf:e1:cb:c4:29:c7:
33:4d:f1:c1:6a:08:d4:6d:22:89:af:07:2c:75:e1:52:3d:8f:
bd:fa:6b:4b:76:b8:bd:3f:25:84:43:d9:d1:5f:d6:a8:d7:45:
0a:1e:75:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:00:59 2025 by rpki-client