Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: 6TLUo9Dyfnfb6nYgjyVda8a8+TMdg51Nemm74nQZbnM=
Subject key identifier: F2:26:C9:03:C2:09:1F:33:D1:A9:4B:11:D2:D5:C6:1C:2C:AA:34:13
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 0196B7B5D371DE54460F88B79C992D1BDB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 1470
Signing time: Sat 10 May 2025 01:01:08 +0000
Manifest this update: Sat 10 May 2025 01:01:08 +0000
Manifest next update: Sun 11 May 2025 01:01:08 +0000
Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=)
2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: E8PADCHlfBOgI+blpdW6mtrndWg5u9JvpVH62oDfOo8=)
3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:d3:71:de:54:46:0f:88:b7:9c:99:2d:1b:db:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: May 10 01:01:08 2025 GMT
Not After : May 11 01:01:08 2025 GMT
Subject: CN=f226c903c2091f33d1a94b11d2d5c61c2caa3413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:8e:bc:b7:14:bc:b6:ff:40:11:aa:c6:2d:
ae:2e:bf:8f:50:bc:21:34:d6:63:2f:f9:53:5b:4d:
32:8b:20:e8:6b:76:d9:73:2a:34:4a:a4:96:4a:d6:
91:57:e1:1a:fe:99:68:73:ef:79:93:e2:b4:c1:35:
1b:dd:67:79:71:90:06:04:14:59:f0:df:3a:cb:fd:
75:67:99:4f:0d:e7:18:47:5d:7a:10:29:2b:b8:4c:
ab:d6:19:a4:0b:7a:f4:e4:38:ac:c8:7e:11:c5:93:
c8:72:ac:f6:35:85:d6:bd:74:ad:a7:db:dc:1a:75:
8c:9c:45:91:cb:5e:43:dd:79:ae:37:f6:6f:21:a1:
c4:84:8c:d4:6e:7c:3e:cb:43:12:57:be:d9:68:19:
42:38:21:3e:0e:34:2f:11:06:ea:48:27:c4:f1:eb:
86:81:fa:74:4b:23:08:fc:37:74:22:2b:ed:3b:97:
df:46:8e:cb:8f:67:12:9e:b3:8a:ab:5f:db:fd:d6:
77:76:e0:4d:51:8f:fe:fd:3c:50:2f:05:cc:1f:88:
38:2b:b2:f1:5f:c1:8f:36:7d:5a:ac:d5:5a:4f:7b:
f4:e0:a6:80:07:cb:9a:33:6f:44:a5:ac:93:1d:c8:
ad:f2:73:e2:f7:f8:f4:79:a6:76:dd:fe:d0:d1:0f:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:26:C9:03:C2:09:1F:33:D1:A9:4B:11:D2:D5:C6:1C:2C:AA:34:13
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d0:c4:fc:fd:b3:5c:74:95:04:21:2f:6e:1b:d6:f7:73:3c:
ac:61:5e:86:d4:d3:d9:77:4f:3f:7a:9c:09:9d:d7:3a:a0:50:
15:ce:39:fd:b5:62:b6:f6:02:58:bf:20:3b:8c:61:97:fa:bc:
13:23:f1:c5:1e:3e:3b:1a:95:20:52:5c:8b:e3:ba:00:80:34:
02:11:52:57:27:d3:59:ad:79:fa:0a:ab:fa:9b:fd:38:09:ff:
8c:45:7a:81:10:3f:11:b9:42:80:be:81:bf:a1:42:2b:5c:62:
f2:02:4b:aa:f3:da:ed:b6:1f:2d:5c:f0:f6:96:6d:aa:2b:77:
96:82:dc:72:0b:10:c0:ef:72:ff:8f:f9:4a:7a:e2:6d:a5:10:
f5:5a:bb:25:40:84:8d:7d:1e:f2:e2:cb:18:28:3d:22:8f:a7:
5f:43:18:58:9d:a8:bf:70:99:86:fb:c6:99:4f:63:33:06:c9:
2f:7e:14:7d:66:f0:0d:2b:78:d3:c4:8c:26:16:15:b1:04:13:
1f:01:d4:56:32:03:79:bf:cd:62:b4:c7:6f:f1:3c:b7:9c:a1:
d9:f8:3e:7f:8a:f0:21:fe:07:11:64:bf:d2:be:d8:6a:d1:6b:
2d:5c:ef:e4:f5:7f:82:73:99:c9:73:2e:4b:89:94:9b:4c:f9:
70:52:8b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:04:52 2025 by rpki-client