Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: /7X4YYjQyMIBGvJM99BBnMuXL+wVCxxjGuVvUzhz1lg=
Subject key identifier: AD:63:A2:61:5C:73:D4:9F:2B:23:B3:23:34:FD:DE:EB:40:2B:C2:9F
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 0196B634CA4FF57D91EBB3BBD3C39BF7DAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 016E
Signing time: Fri 09 May 2025 18:00:34 +0000
Manifest this update: Fri 09 May 2025 18:00:34 +0000
Manifest next update: Sat 10 May 2025 18:00:34 +0000
Files and hashes: 1: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: Dr26vNKqFzAnEijl5ySKqYdHphfvTGx2+wV/NF917xs=)
2: wlrH8iJKD-dvArKLHwGDyb-b3_A.roa (hash: MNpmVDPz5k8I2IkuWOZyn4/S4dD0F06yQSeegbd6Lco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:34:ca:4f:f5:7d:91:eb:b3:bb:d3:c3:9b:f7:da:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: May 9 18:00:34 2025 GMT
Not After : May 10 18:00:34 2025 GMT
Subject: CN=ad63a2615c73d49f2b23b32334fddeeb402bc29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d4:dd:ed:ec:66:26:fa:2e:4b:81:ad:74:6e:
c3:c4:82:6b:52:32:b6:7c:a5:35:39:6d:75:7b:8c:
ce:0b:20:3e:93:85:10:0a:30:68:a0:33:ee:ac:7a:
ff:1f:29:8f:cb:89:96:ca:6b:73:c6:7a:39:af:3e:
c4:dc:a4:45:5d:10:bf:2d:3e:a6:a5:0f:bc:19:5e:
6b:43:f2:6e:78:25:a8:db:a5:0c:d8:e2:39:ac:4a:
44:60:22:15:f8:58:59:66:30:9f:2c:b3:a9:98:b6:
b7:90:4f:0f:cc:bc:6c:9d:5f:1f:43:4d:83:ed:36:
bf:17:ce:48:af:ba:b2:74:e2:9e:41:38:ec:fa:16:
72:c0:78:37:43:39:6c:9c:97:d3:d4:42:19:fc:44:
6f:49:f7:32:3a:d1:9f:b5:19:dd:bf:71:ab:7c:a7:
6b:61:3d:fc:fe:45:45:db:43:61:4e:dc:6c:4a:77:
e4:d6:fe:ff:dd:09:ca:b2:a0:9f:5b:e9:ef:70:b0:
ad:5c:4a:b9:9e:fd:bf:a6:18:38:61:a0:45:8d:44:
f0:e0:6e:59:da:34:cb:2b:cc:c2:5c:e3:c1:c9:8d:
9c:69:b7:ee:d5:9f:33:cc:d0:82:89:7c:ab:75:0c:
d8:0b:2c:e5:dc:13:75:fc:d4:bd:aa:ef:3f:8c:e7:
3e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:63:A2:61:5C:73:D4:9F:2B:23:B3:23:34:FD:DE:EB:40:2B:C2:9F
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:07:56:52:e9:cf:86:0b:97:0e:66:a7:92:ed:c8:cc:96:1b:
94:3f:71:e0:3b:ac:32:1b:34:f8:8e:d3:1c:3b:31:83:77:3f:
db:16:83:ef:bd:02:ab:0c:07:0f:30:1b:02:95:aa:e0:63:94:
f8:97:58:45:42:cf:95:b3:19:cd:32:98:33:a6:bd:7a:d2:ce:
ec:59:13:cd:ee:7b:33:a5:cb:4b:a9:92:32:fc:72:97:09:e6:
13:61:07:eb:25:92:47:4f:d3:3c:54:2f:f1:18:b5:00:0f:89:
b8:7f:7c:78:a7:ba:c8:54:15:a8:bf:1c:66:26:b4:d9:4d:2c:
9e:e8:43:e4:51:b4:a8:6e:03:fd:43:8b:70:90:14:c9:7e:e7:
ef:5c:c1:23:95:bc:8d:dc:94:2f:99:7b:33:4e:ad:a2:13:61:
51:75:20:93:b8:42:6e:ba:49:f2:99:ae:54:75:e2:af:9e:b8:
62:a9:ab:e4:8b:64:5b:aa:3d:ee:1c:d2:f1:ea:52:de:d6:bb:
5a:f5:70:10:e4:2b:d2:b6:a7:8e:0e:b4:39:0f:45:86:93:cf:
60:18:e4:40:53:89:76:19:c9:44:b0:e6:ed:ec:73:ab:31:8c:
e0:db:f5:e5:8c:8c:45:54:26:a6:8b:05:00:0b:b0:9c:c6:a9:
83:13:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:03:58 2025 by rpki-client