Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: jmhDhCC4VO8z9PDI/Zv/c7TdMjIsPV2DccOsZGpv9T0=
Subject key identifier: 2F:20:83:05:5A:05:41:3F:75:EB:72:FF:0C:67:68:2A:F1:B1:96:14
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 0196A0F678347BA66EF2EF915D3B850F6BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 1093
Signing time: Mon 05 May 2025 15:00:29 +0000
Manifest this update: Mon 05 May 2025 15:00:29 +0000
Manifest next update: Tue 06 May 2025 15:00:29 +0000
Files and hashes: 1: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: g69ssNIL8vVbM7e7c94KYX0i04aKOgnr9RlT8TZqjEI=)
2: PcqW_01nYr_g65r_pcHJ33ZMGuA.roa (hash: ldAGcbaFd4WhyCTSLv1tpLkIbH81eRDfpjEnAMP8NwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:78:34:7b:a6:6e:f2:ef:91:5d:3b:85:0f:6b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: May 5 15:00:29 2025 GMT
Not After : May 6 15:00:29 2025 GMT
Subject: CN=2f2083055a05413f75eb72ff0c67682af1b19614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:db:4a:ad:37:65:63:dc:c8:f1:64:e5:da:
59:10:a5:e5:af:25:41:97:a8:51:6a:9d:c6:e8:8c:
78:f5:a3:ba:9c:7c:6b:ec:0e:18:1b:d3:e9:25:64:
7d:04:88:c6:68:bf:ba:0e:0a:28:80:a0:bf:08:17:
d8:8e:1d:30:0f:23:93:1f:be:c8:cb:c1:b5:f6:47:
8b:14:a9:ce:f7:db:b8:8c:2e:00:d2:e7:af:7b:f6:
1b:37:3f:75:a6:5d:d4:34:0e:32:96:e5:08:fa:9f:
88:d6:bf:26:91:c5:ff:65:79:db:c0:01:af:15:ed:
08:88:49:56:3c:71:df:9a:1b:7f:6c:99:e1:88:f6:
5a:5b:e0:2a:f7:58:62:28:78:b9:8b:f2:01:a5:a6:
16:0f:a8:70:2d:48:36:04:3a:94:b1:c5:34:58:e9:
74:ac:17:31:ed:fc:44:02:c1:b7:cc:11:3d:c2:f9:
95:1f:5d:6f:8f:d9:50:77:52:7a:8d:da:e2:fd:7d:
11:0a:d7:60:41:84:f1:94:d6:d5:16:e4:94:9b:62:
99:a3:11:2c:b2:f0:a1:6d:63:a5:df:8c:0b:8f:32:
4a:80:4f:9a:99:a9:aa:72:7e:11:6a:06:df:fb:96:
be:a1:96:80:19:1c:16:ae:56:bd:bb:51:99:50:de:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:20:83:05:5A:05:41:3F:75:EB:72:FF:0C:67:68:2A:F1:B1:96:14
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:54:ef:f9:cb:03:c3:99:17:4e:9a:33:23:12:e7:b4:b7:47:
d4:02:98:44:fc:e5:30:76:b3:11:e6:94:b9:cb:c6:ac:67:0b:
61:1a:80:f7:bc:99:ca:55:d1:b0:aa:38:b7:7c:20:4c:e1:c3:
31:9f:64:83:56:37:4a:43:d3:13:3d:f5:2f:43:e3:67:3e:3d:
64:1e:ce:69:28:66:30:1c:83:cb:5f:5e:4f:a6:3c:e4:92:73:
75:3b:33:fc:17:e6:04:07:b2:95:3b:8d:5e:8e:33:87:dc:ca:
b5:c3:8d:a9:7c:a1:ad:f1:40:96:e7:4a:a3:1c:c6:89:d8:69:
52:dd:48:66:d9:aa:0f:9b:36:c1:ab:c9:01:40:d8:5f:fe:1b:
2e:e0:b6:8e:91:33:ad:42:e0:d7:a9:d0:87:56:1c:34:08:8d:
f5:3b:dd:7a:61:7d:eb:83:f9:ca:ec:3b:af:fe:ef:05:2f:48:
a7:cf:62:33:1a:4d:c9:52:a8:4c:00:8e:30:4c:d8:e5:79:cf:
fe:91:39:b7:50:2f:16:84:3b:2b:dc:70:c6:5e:19:8d:e7:ef:
36:6c:ea:07:0c:3f:2c:f6:2d:1c:50:cd:48:9e:13:3b:05:4c:
d5:74:20:bb:77:94:8d:ed:61:cf:bc:38:25:a7:3f:2a:da:5d:
f3:9e:00:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:22:29 2025 by rpki-client