Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
File: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json)
Hash identifier: xMMUvYRJdxJjVUYdy0cC0XNLEwK0Okbb7yrAgb8+urM=
Subject key identifier: 90:D6:43:46:26:9E:7B:71:3B:E7:06:91:4D:C6:C1:E3:E6:72:4B:B8
Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Certificate serial: 0196BF00E36B552A5718886E83DE9D98846A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 11:00:28 +0000
Manifest this update: Sun 11 May 2025 11:00:28 +0000
Manifest next update: Mon 12 May 2025 11:00:28 +0000
Files and hashes: 1: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: cpSUhDUgpw0PhgPW/KnfvbZBcmIlUztnljg2lBeoqvo=)
2: Tz8QjBgBmzpa68NzWLRe2iAGU-U.roa (hash: juEtxBf0oAaQHOnDE0wzOzsnnb3wMIZXnN/0qajABas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:e3:6b:55:2a:57:18:88:6e:83:de:9d:98:84:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Validity
Not Before: May 11 11:00:28 2025 GMT
Not After : May 12 11:00:28 2025 GMT
Subject: CN=90d64346269e7b713be706914dc6c1e3e6724bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:d2:84:01:2d:32:b5:4f:ae:08:24:31:26:
61:f2:63:0e:07:6a:a7:4c:69:92:8b:79:0a:73:02:
56:ff:9c:c9:a1:71:37:9f:c0:8a:e2:13:e3:fa:32:
26:60:1e:6e:8d:9d:ea:9c:2e:88:84:ce:2f:e6:85:
8d:47:c6:ad:54:8d:4a:39:03:8e:9d:a6:64:57:9f:
33:f3:cd:6f:02:9f:0e:52:30:fb:e5:2e:73:a8:b7:
b7:74:1d:b4:d4:1f:d4:8a:00:02:8e:67:fd:88:f0:
f0:7c:8f:e8:3f:2c:98:e8:bd:57:b5:19:8a:89:3b:
1d:d2:94:4b:14:cb:b5:bb:71:ce:f5:9b:e7:0a:d0:
1f:25:c1:6e:f3:85:c0:b0:0d:7d:de:3e:fc:99:30:
15:4f:46:43:54:08:d8:d1:57:2d:a7:ea:d2:13:b9:
c3:e0:39:79:9e:50:b8:2b:5f:89:85:a6:dd:49:1d:
72:fa:4c:ef:73:00:99:a9:2e:d9:5a:37:15:a4:61:
15:5b:9c:41:51:ff:0e:ed:a7:39:96:5b:cb:57:05:
3f:84:18:99:c5:29:09:ce:fb:59:31:60:03:54:4a:
60:4c:9d:19:76:4c:46:2d:39:c2:c2:62:84:a6:e9:
3a:bc:7f:f8:c2:07:8d:c7:95:c1:7e:ff:a2:5c:08:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D6:43:46:26:9E:7B:71:3B:E7:06:91:4D:C6:C1:E3:E6:72:4B:B8
X509v3 Authority Key Identifier:
keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:da:e1:a9:03:43:20:05:f6:c4:a6:34:79:8e:52:7a:7c:63:
dd:30:d4:34:3a:66:ad:dd:86:3e:0e:9d:b5:02:81:ba:85:33:
cd:1c:43:f1:2b:64:9e:08:3e:6c:c1:c4:15:06:ab:e6:1a:b9:
7f:53:7d:7b:a5:dc:ae:ba:4a:49:05:b0:d9:3c:8b:6b:8d:83:
03:50:dc:66:aa:7b:0c:4e:cc:07:43:30:b1:21:61:52:fe:f1:
b5:ee:c0:fe:d4:8b:1f:58:73:87:65:25:98:3c:13:97:64:0d:
88:e5:e2:f4:5c:71:df:b5:26:1b:a9:ac:3d:db:ba:80:bb:ad:
17:cd:d9:71:b8:64:61:01:09:65:a0:23:9e:23:6c:d6:0b:89:
4b:a9:7e:da:e6:c5:59:35:68:32:ec:bf:9c:af:77:09:46:95:
26:24:25:48:7f:0f:59:dc:d5:40:a8:b7:84:f0:d2:03:ae:01:
42:ca:e1:00:90:62:a0:2e:08:57:20:e4:6e:28:a3:52:3c:7e:
2a:74:21:49:ab:f6:15:db:dc:60:48:51:30:4a:e9:3f:0d:22:
9c:b3:d6:c6:5a:40:cd:22:88:2d:cd:2d:8a:31:fe:b5:09:cf:
e4:0a:c8:00:93:74:de:c1:bd:36:89:ba:f3:aa:fc:5b:37:79:
27:0f:8c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:29:41 2025 by rpki-client