Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
File: NLFHrBz3fVyPsq90-tO3O10TeyY.mft (raw, json)
Hash identifier: qO7fLEI86s+sC4CE4GzG/FRytIyeljvRCyO/2Hnrh8s=
Subject key identifier: C4:A5:74:78:E3:41:07:B9:24:F7:0E:00:31:05:25:B8:53:DD:75:E5
Authority key identifier: 34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
Certificate issuer: /CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Certificate serial: 0196C68352F9D9A0BEFB0BE6D1D82F040FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
Manifest number: CC
Signing time: Mon 12 May 2025 22:00:17 +0000
Manifest this update: Mon 12 May 2025 22:00:17 +0000
Manifest next update: Tue 13 May 2025 22:00:17 +0000
Files and hashes: 1: NLFHrBz3fVyPsq90-tO3O10TeyY.crl (hash: QHmQ/s+w4doPIlSyTjOGfgeQLMwZBAvVQFYD0HwS70g=)
2: THnq9fycftVoi9SRyG2RAgjh-xM.roa (hash: CvE6vZRBpMVjaRZR6SZYXH1U/C4JGawX5FU1BEkF3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:52:f9:d9:a0:be:fb:0b:e6:d1:d8:2f:04:0f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Validity
Not Before: May 12 22:00:17 2025 GMT
Not After : May 13 22:00:17 2025 GMT
Subject: CN=c4a57478e34107b924f70e00310525b853dd75e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f7:7e:4c:ac:ac:27:ce:d2:c3:13:1e:cf:66:
21:14:cb:09:db:ca:f7:df:3a:da:25:d5:97:8c:b1:
8b:42:bc:b5:c1:1f:aa:51:da:95:5e:f3:32:ee:fc:
86:ed:34:b6:21:b5:cb:2f:19:d1:80:47:ae:84:fc:
42:6e:cb:dc:69:9e:c2:27:7c:bf:61:d9:a0:90:9c:
b8:3c:f5:d1:74:8a:64:66:76:87:01:5f:e3:3f:d0:
d5:5d:34:5a:6c:58:85:1d:4e:9c:89:37:ff:d0:8c:
e9:71:28:3f:c8:c3:4f:d6:58:c2:c8:6a:bf:17:f5:
0c:71:12:f0:7b:b6:de:63:25:d7:30:49:ac:32:a4:
52:84:fb:19:97:fd:9f:87:62:42:76:43:83:9c:7d:
60:e0:10:9c:ed:23:92:ec:51:3e:17:fb:17:d4:04:
53:e3:28:7d:a9:f0:3a:0e:60:4e:1f:73:3a:2b:40:
50:66:b6:c5:7d:2d:11:09:12:20:bc:00:22:72:85:
f7:fc:28:5b:f8:94:8b:dd:d4:bd:db:ee:4d:21:f3:
06:83:5d:9f:e4:c4:80:69:73:5b:c1:a9:da:fa:b2:
87:24:62:9b:22:a8:55:65:04:c8:c5:0a:21:b9:fe:
1e:d6:46:54:de:5e:1b:07:4d:46:84:6b:f3:81:13:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:74:78:E3:41:07:B9:24:F7:0E:00:31:05:25:B8:53:DD:75:E5
X509v3 Authority Key Identifier:
keyid:34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e7:fe:d8:75:5c:2e:06:c7:89:e9:07:f5:ac:16:e6:02:98:
f6:99:32:18:bc:95:b5:a4:90:ce:81:4a:23:79:e5:88:ff:c0:
9c:fb:8d:ff:d1:50:9f:2e:4c:06:fb:29:47:42:8e:16:94:61:
4c:ac:1e:65:12:db:3f:0f:88:11:93:78:b7:66:c2:58:0b:9e:
f4:9e:bd:8c:1b:b1:a2:40:3f:1e:40:90:1b:fe:80:34:86:0a:
3d:67:81:65:c0:61:65:15:c5:64:33:05:4e:f4:c6:8f:11:11:
a0:cf:db:2d:f0:ab:f0:70:0e:54:48:48:d0:94:7e:c4:ee:78:
07:9b:d9:1d:f5:93:f7:17:96:da:05:79:35:77:62:0d:90:86:
fd:4b:5f:e3:b2:41:cc:4d:60:00:4e:a4:f8:75:6f:b4:49:1f:
73:d8:fc:c0:a1:45:3a:73:17:b0:e0:5b:10:58:7f:30:20:b5:
82:83:34:f7:63:f8:20:a3:65:fe:df:30:07:7c:bf:07:9f:38:
02:8f:43:a3:51:18:06:66:10:ba:eb:87:b8:7f:22:8b:6a:8f:
85:48:88:c8:25:e3:29:38:82:b7:8c:55:07:d9:26:97:30:60:
fb:eb:2e:ae:76:4e:21:f4:4e:e4:29:88:02:30:71:cc:33:82:
59:46:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:03:57 2025 by rpki-client