Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier: w3jtBpLfRr9t0B/bQ3S46hh9XAVBvYU+M4MiEZJBGQw=
Subject key identifier: 0F:43:1C:C5:A8:74:3C:79:80:75:9A:6E:11:74:B7:F9:E6:E4:E7:B1
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 0196A465A83B9CB0F3D15D2FE615099AD0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number: 152B
Signing time: Tue 06 May 2025 07:00:47 +0000
Manifest this update: Tue 06 May 2025 07:00:47 +0000
Manifest next update: Wed 07 May 2025 07:00:47 +0000
Files and hashes: 1: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: qJjuYqYmzio//gVd53DWFzj9tTHVf+oAjMtEaw8qvrE=)
2: a86URqUjdV6NGR4_Rkuxzk9nvOQ.roa (hash: QkDObpBQb/2gqaSVK2qoFjm69vfVIidcXe/y1fY7jKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:a8:3b:9c:b0:f3:d1:5d:2f:e6:15:09:9a:d0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: May 6 07:00:47 2025 GMT
Not After : May 7 07:00:47 2025 GMT
Subject: CN=0f431cc5a8743c7980759a6e1174b7f9e6e4e7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:2e:2f:18:bd:87:35:11:9c:0d:75:66:d2:
e3:d8:36:e9:b1:5c:02:e7:83:9a:ec:bb:78:b9:9f:
67:b7:58:17:83:16:2d:55:55:b6:a5:30:05:e5:af:
1c:1d:a7:26:7f:10:4f:53:c9:e6:0d:6f:3f:d7:50:
9c:71:b7:fc:61:24:a2:fe:6e:9f:18:69:4c:5d:7c:
2e:6d:88:d8:e8:7e:66:77:85:bb:24:f3:9c:61:26:
c4:ea:58:32:3f:53:33:f5:a4:5b:b7:3f:e3:53:b0:
4e:34:3e:06:00:80:05:1e:ad:50:07:21:27:0e:c5:
b6:c2:e6:d4:c7:90:8c:39:e6:7f:b7:61:e0:05:21:
d6:08:fc:53:73:2c:1a:1a:3b:3c:5e:86:97:5d:95:
fa:18:44:90:54:eb:73:31:63:3e:eb:6c:06:8f:25:
fd:5a:06:cb:01:78:94:38:22:41:b3:01:5a:aa:ef:
c8:97:07:45:31:ef:5e:86:dc:e5:09:03:23:d6:47:
0b:29:57:1d:4e:47:54:bd:0f:ca:d5:c4:55:e4:5e:
23:88:1b:5a:9b:a9:27:46:92:a6:7c:1e:5c:18:71:
7c:ba:aa:b5:d1:05:bc:2e:a1:12:f0:f3:cb:e3:11:
0a:35:db:a2:e8:d0:2d:f4:f2:0d:7c:4d:b6:be:a2:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:43:1C:C5:A8:74:3C:79:80:75:9A:6E:11:74:B7:F9:E6:E4:E7:B1
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:90:b8:b9:67:f6:77:49:39:75:c6:47:6e:d7:81:2b:2a:74:
b7:10:66:43:3a:c1:9e:26:63:eb:2f:9f:6b:6d:2c:96:a1:ed:
99:d7:31:6e:b3:c5:ce:ff:16:65:0d:ae:ae:1d:7a:72:0b:95:
d5:8b:21:07:6d:7e:ff:f5:c1:49:c1:4a:f6:00:c0:1b:30:a3:
8c:e7:92:a3:cb:ae:d2:7b:5d:b7:de:75:4e:fa:37:a7:7e:cd:
d5:62:69:33:e2:44:db:d8:87:8d:10:16:1a:99:71:cb:43:47:
3c:0c:c7:b7:6d:ef:ac:18:db:36:d1:3e:db:30:34:44:d2:16:
ef:0d:d7:88:bb:44:b2:29:84:a9:35:40:80:59:63:33:2b:06:
83:3b:51:33:18:bf:b8:34:06:1c:07:9a:35:00:3c:44:97:f5:
f4:0e:e9:8c:84:6c:c9:54:00:28:ff:93:13:54:20:6e:ee:4a:
13:ae:c5:d3:dd:5f:cd:5b:34:19:ca:fd:57:f2:cd:a3:f9:4c:
5a:2d:57:6f:7a:91:60:45:4c:ca:93:e4:04:26:50:65:3c:09:
47:49:1f:39:1b:a9:27:d3:65:a9:7d:2c:81:4f:89:85:05:82:
d6:df:10:f2:cd:5d:8f:01:a5:b0:aa:d9:2e:e3:d9:60:50:13:
67:cb:0f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:41:02 2025 by rpki-client