Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier: 4H++RmRS0qMj86CxJzKz0VEVoKrDNMUbjUUEIYne3bg=
Subject key identifier: F7:BF:BB:0D:42:42:58:48:DE:6F:94:0E:23:61:C0:93:13:C2:15:D4
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer: /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial: 01969D509B9FBA65C0B2996E519939ED0698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number: 06DE
Signing time: Sun 04 May 2025 22:00:27 +0000
Manifest this update: Sun 04 May 2025 22:00:27 +0000
Manifest next update: Mon 05 May 2025 22:00:27 +0000
Files and hashes: 1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: 27SuUmDDwSb9zpUSW0rOaga6HBafh7wP9k3b6qOyK08=)
2: Rv1036YGXSxZ-LNtEMTG-yB-cpE.roa (hash: 9hIhakYU1jL8ELRanjY68hTQVJc33GMXNtFCdw91hfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:50:9b:9f:ba:65:c0:b2:99:6e:51:99:39:ed:06:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Validity
Not Before: May 4 22:00:27 2025 GMT
Not After : May 5 22:00:27 2025 GMT
Subject: CN=f7bfbb0d42425848de6f940e2361c09313c215d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:a0:a9:75:e9:2a:4a:56:24:2d:64:8d:92:
c6:e0:04:96:9a:e8:b9:97:fe:94:ef:c4:aa:3c:7f:
a5:57:29:29:bd:37:9d:37:53:b1:76:41:b7:ae:ad:
67:fe:1d:67:c1:d9:fe:58:9c:a5:25:99:11:70:33:
f9:80:58:c6:65:58:5a:5f:14:fb:e5:88:bc:79:e4:
38:5e:fd:b3:1d:20:0b:86:50:a1:44:fb:df:f0:dc:
44:69:fc:22:c2:c9:9b:19:6d:7d:96:13:7a:d1:95:
92:d6:72:e1:fd:39:c8:ee:f5:1d:9a:5a:fb:8d:f4:
f2:cf:2a:ef:da:c1:db:cc:62:02:a5:8a:f8:cd:4a:
ce:f4:80:27:12:82:6e:10:f3:63:b8:8b:92:2f:cf:
9a:c4:a3:bd:df:4d:82:d8:1d:d4:45:8b:21:f1:a4:
85:37:83:fa:1a:ac:4c:95:ae:06:00:a9:b3:9d:23:
a7:5b:53:2b:99:d7:cd:7b:02:c8:56:29:90:35:5e:
35:d4:68:5a:cb:b1:72:0a:13:b7:86:e0:19:a9:f1:
35:c1:79:3f:01:4d:81:88:74:b0:f9:6f:4f:76:9b:
d9:9f:ed:e8:42:49:d5:0e:87:45:04:90:c3:37:ff:
76:89:fa:d3:14:6a:61:96:01:57:e4:02:0f:4a:a4:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:BB:0D:42:42:58:48:DE:6F:94:0E:23:61:C0:93:13:C2:15:D4
X509v3 Authority Key Identifier:
keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0d:ce:d3:e2:b8:89:95:96:9c:7e:eb:56:d6:45:b2:8d:42:
42:96:02:99:0a:28:02:bb:c2:88:19:68:cb:a7:bd:30:19:a2:
ea:04:0d:f6:c2:05:2c:5c:75:84:a2:81:0c:fa:9f:1d:2f:87:
a6:32:f8:76:1b:ff:23:0f:17:0c:87:8f:c0:a4:45:9d:be:1b:
36:28:48:48:31:2d:b7:fb:1f:d8:14:9e:95:ad:39:b6:50:a0:
30:f6:53:44:ef:28:f3:21:f6:b7:11:13:d9:a9:75:f5:c5:dd:
90:cc:77:1b:bf:06:6a:85:a8:2e:a7:80:31:07:55:e3:87:e8:
a1:1d:bc:12:27:77:7e:cc:eb:eb:bd:ce:ac:68:54:fc:a0:8d:
39:de:aa:7b:b3:2f:ac:3d:5a:80:e0:a0:8b:41:79:4b:d6:3b:
65:4e:e2:0d:a0:c6:24:93:23:5b:40:02:02:b1:70:41:31:27:
f6:d2:cc:8e:1f:c4:34:0c:b1:94:06:9b:55:eb:df:9b:0e:92:
dd:9b:45:40:01:b8:9d:00:a3:eb:94:1e:b5:97:30:b4:24:ad:
45:9a:52:08:58:c6:4c:c3:d1:9b:9e:5f:7f:4d:6f:cd:0a:db:
2f:3f:30:d7:aa:80:2b:4a:f8:4a:c3:e7:35:24:5c:c9:8b:c3:
0d:6b:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:39 2025 by rpki-client