Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: HWH8cZOQ6EDYSjppYJ79ZvePrZooLW0CZaVDT4Dl4Wk=
Subject key identifier: 83:CF:C1:0F:EB:6D:47:58:4B:7E:92:C5:63:87:17:B2:53:A9:F7:08
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 0196BC6E5A90F3FDD9A28621E167A3E5EBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 0554
Signing time: Sat 10 May 2025 23:01:10 +0000
Manifest this update: Sat 10 May 2025 23:01:10 +0000
Manifest next update: Sun 11 May 2025 23:01:10 +0000
Files and hashes: 1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: IHSIlxRi11abyApA6Ty76L1zanX3Mpj3fqiUDvJFnAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:5a:90:f3:fd:d9:a2:86:21:e1:67:a3:e5:eb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: May 10 23:01:10 2025 GMT
Not After : May 11 23:01:10 2025 GMT
Subject: CN=83cfc10feb6d47584b7e92c5638717b253a9f708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9f:30:62:47:2b:ca:e7:6a:67:0b:2f:b8:9c:
bb:db:f4:c7:bd:f9:52:31:00:af:a1:3a:f0:08:42:
46:1e:50:47:e0:45:13:e8:06:54:c1:8d:50:d1:f6:
a4:d7:36:3c:a8:c7:c8:ec:2b:c1:94:07:3f:0b:ab:
03:b5:11:ed:db:b2:ea:17:f8:01:b7:29:11:2e:4e:
c8:81:0f:a4:0f:ae:e3:d8:bc:ae:ae:85:ea:3a:c2:
58:13:b0:3d:df:e8:ec:62:b7:10:4c:f1:7c:79:4d:
25:69:53:11:ba:37:a8:2e:e6:72:39:cb:5b:0b:dc:
4f:ef:ff:95:1a:03:e1:7e:a8:4b:82:be:47:4c:b5:
9a:b2:3c:da:ee:a0:3a:b8:1c:66:2a:76:20:59:aa:
37:90:2d:e8:bc:5b:d2:be:47:2d:ce:ef:a3:41:c4:
03:7e:6c:f0:c8:62:9b:d5:07:e3:b5:06:69:13:20:
9d:b2:04:1f:7c:10:c3:a0:08:b5:a5:28:fa:a5:9a:
02:48:44:87:c0:10:91:c2:da:24:67:f3:50:ef:4e:
8c:80:5b:0b:cf:79:29:4b:b7:80:e5:31:52:cb:5d:
68:ad:90:75:b5:3b:94:89:29:50:2f:32:71:3c:a6:
5c:43:55:be:78:9c:45:b2:5d:45:3e:22:21:50:78:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CF:C1:0F:EB:6D:47:58:4B:7E:92:C5:63:87:17:B2:53:A9:F7:08
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d2:63:c0:78:78:b4:12:a6:62:dd:3a:b8:5a:dc:4c:51:b5:
f1:a5:45:78:73:d9:fb:c1:83:73:7f:37:0b:5e:cd:7b:0c:f2:
bd:62:a3:1f:c5:16:fb:ed:42:5a:42:78:be:fa:6c:e5:93:f0:
64:16:0e:36:46:8c:69:25:b9:b7:3a:06:d0:32:13:59:63:82:
a5:ff:2e:d9:13:e6:1d:c2:4b:ae:ba:7e:0f:01:7e:a3:95:46:
ab:be:ff:3e:6c:48:3b:d2:0a:60:9b:26:54:01:0f:30:22:17:
54:b3:86:64:4a:0c:0e:3c:a4:2b:29:b4:e6:3c:43:cb:73:94:
fa:d6:08:94:25:c5:66:a1:5a:98:a4:90:f7:82:25:a8:9e:61:
c0:26:27:c6:0a:19:0d:2b:a1:6e:52:50:da:f6:13:b4:bc:f9:
5f:1b:b5:b9:5b:e6:54:26:c3:98:07:5b:4a:05:0e:0a:69:36:
da:68:d5:3f:c3:73:9b:22:11:44:3d:d6:1f:f5:60:33:26:25:
81:35:b6:38:f1:4c:07:33:40:f5:52:be:37:3d:ec:0d:17:fa:
4a:00:79:19:7a:a6:6a:7c:76:db:7c:08:b4:ed:63:13:c9:25:
34:78:d7:90:88:71:08:fd:f2:cc:1b:13:49:a7:70:b0:93:88:
ce:52:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:51:30 2025 by rpki-client