Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: 6qEFTQvXXKX9OIpu+4u/C9rVmxKFGbrFaaya8z6hrRA=
Subject key identifier: 35:86:05:09:93:01:04:7F:CC:0C:F5:59:C5:6A:77:BD:3F:4D:4D:68
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 0196C5A78621B9872B996B7F7DAFD4E78AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 0BE2
Signing time: Mon 12 May 2025 18:00:12 +0000
Manifest this update: Mon 12 May 2025 18:00:12 +0000
Manifest next update: Tue 13 May 2025 18:00:12 +0000
Files and hashes: 1: FEZEft80jliOlkGyEwySyBAkmWo.roa (hash: WK/TRHiffo4AU+bk5eHbjtuUsofDcjiz4uFJQmb9AMI=)
2: ish4NG6w0suFxadmLrSJLkxjTIQ.roa (hash: SxPMOYIhwaAgOQuSwCZyhiBxyzhniVTSwZchO8Jy+js=)
3: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: bwwJJFiB11+D5/1ZUYgT1GPkmpBqMw8MGztUiRbTzlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:86:21:b9:87:2b:99:6b:7f:7d:af:d4:e7:8a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: May 12 18:00:12 2025 GMT
Not After : May 13 18:00:12 2025 GMT
Subject: CN=358605099301047fcc0cf559c56a77bd3f4d4d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:02:76:f0:df:69:64:6c:6c:15:ee:ec:97:ea:
15:43:b3:ff:62:bd:d2:bb:41:10:a3:fc:c7:63:bc:
8b:63:5e:61:0b:a4:82:cc:ec:a6:5e:a7:a5:01:cb:
ab:b9:49:d2:b8:e9:46:8b:3d:48:70:7b:7d:a2:1d:
f6:ba:aa:22:58:fb:cc:96:48:e2:45:c4:80:5f:f1:
9f:a6:a4:e1:4e:0a:97:90:c8:65:aa:49:c6:82:7b:
cd:d6:dd:7f:ee:ad:7a:8a:71:07:a5:3e:80:37:38:
f3:e2:3c:f2:ee:7b:46:31:b6:46:49:28:bf:96:e4:
0d:72:e7:d0:d0:22:3d:5d:78:44:c8:a6:37:b0:74:
ac:4f:fd:fc:9d:9f:28:b0:6e:1c:7f:75:15:bf:d8:
c6:de:39:53:6f:67:99:db:09:49:11:a1:ac:3d:25:
9d:07:34:18:13:07:d5:96:13:4f:10:0a:f5:eb:ce:
a3:de:40:57:e7:f1:e8:69:19:66:1b:51:c5:9e:aa:
16:3f:49:3e:cf:db:bc:ff:23:0f:81:35:41:0f:70:
5e:b9:e9:1a:c5:63:07:85:30:65:e2:11:bb:95:f9:
e1:f8:f3:d7:80:14:48:c6:e1:9b:a0:b3:e9:25:6f:
d3:0b:b0:ca:ea:da:30:bc:ca:f0:7c:3b:98:0b:21:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:86:05:09:93:01:04:7F:CC:0C:F5:59:C5:6A:77:BD:3F:4D:4D:68
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:96:00:0c:d0:d4:33:07:20:d2:46:41:15:09:e2:bd:7b:1e:
d2:cc:99:20:3f:39:38:e6:d5:69:47:21:46:7b:a9:b6:7b:ad:
2f:8a:4f:15:0a:ad:d4:6b:c4:58:7d:11:8c:ac:e8:9b:e4:8f:
3a:05:ba:9e:f2:04:cf:22:89:ab:b2:58:88:b5:89:49:6d:f3:
ca:a9:66:41:60:0d:ad:55:e6:13:1a:e9:cd:63:09:f9:64:92:
c4:8e:71:ee:8d:3e:8f:f0:9d:e4:b3:3c:7f:07:ec:54:37:69:
58:85:53:0e:66:86:57:1f:71:eb:cd:2c:b6:b8:b6:24:b0:3e:
1a:7e:fe:b8:68:50:df:64:d5:3f:6d:67:9a:a6:d9:57:a4:e9:
b9:38:b8:b1:4f:dd:4a:57:22:c3:dc:7e:04:b0:2f:f6:d6:32:
d4:b9:85:6b:b6:1b:ff:ce:13:a3:33:ae:6a:a3:eb:39:ff:cf:
85:42:c1:6b:5d:79:55:ce:be:1e:04:8c:79:65:78:a0:1f:a5:
23:d0:0a:23:c9:cc:ed:76:53:ca:0a:ea:70:1c:a3:05:d6:2c:
de:60:6c:59:e4:5f:81:ec:8a:2f:53:87:b9:1d:2a:5b:14:1f:
e9:bd:ee:c1:16:4c:90:bb:8f:58:36:89:38:c4:77:75:d3:bd:
65:0e:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:52:49 2025 by rpki-client