Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: UOPDEFiZ6HOBvn7Pc2I48uefaeltcXLD54qGSz4RA0Q=
Subject key identifier: 60:33:25:5D:E6:8E:5C:F3:29:46:40:4E:AF:6B:50:3F:EE:78:44:53
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 01965500EAC0A0A8BF2CCBE10D067196A30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 21:00:45 +0000
Manifest this update: Sun 20 Apr 2025 21:00:45 +0000
Manifest next update: Mon 21 Apr 2025 21:00:45 +0000
Files and hashes: 1: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: 505QvQPInPARifXVKKO6Fno68sQd9r3V2eFBBnIeW4c=)
2: fw5w9jTTZNnVRi6ltsbrZFMjlng.roa (hash: Spp2bK6sMfFLneeWMwidps5PTWRtnPxGOntgwXViU3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:ea:c0:a0:a8:bf:2c:cb:e1:0d:06:71:96:a3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Apr 20 21:00:45 2025 GMT
Not After : Apr 21 21:00:45 2025 GMT
Subject: CN=6033255de68e5cf32946404eaf6b503fee784453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:e1:54:e3:1e:bd:a2:bd:b0:50:93:da:12:
df:d6:36:6d:56:af:ef:e5:ee:14:ba:fa:6d:06:48:
91:e1:8a:fe:dc:b1:d2:84:b8:2a:04:57:5f:ee:46:
74:65:d1:2f:f6:cf:e4:3c:8c:74:17:0f:22:57:3d:
22:c2:1d:27:62:3e:96:38:af:45:f8:ce:36:5b:72:
d9:11:c7:c5:de:bb:fd:d5:45:7b:ae:7c:62:00:68:
20:b1:10:e1:0e:10:75:ec:82:38:c7:10:b7:48:94:
cf:cc:af:51:bd:21:c9:ca:a2:b5:b7:c4:6a:eb:29:
d9:35:93:f5:c8:fc:0d:9b:79:d2:c2:b3:62:bf:e8:
de:a8:8a:83:d6:f9:4d:61:a4:07:12:88:47:43:a8:
9e:c8:ad:43:3f:29:cc:c0:69:0e:58:e3:b5:7b:e2:
bc:af:44:ce:7d:4b:69:67:71:18:c4:96:0b:6d:d3:
25:8b:99:e8:3d:3a:26:b8:3a:7c:f6:20:a2:35:cd:
94:60:dc:cc:17:1a:ca:05:9f:01:29:68:db:1e:41:
1e:41:7b:3f:c5:19:06:ef:44:98:e3:c2:32:0c:fa:
35:45:03:61:5d:8a:ad:61:27:4e:08:f5:41:0c:f8:
29:73:28:c0:bc:fc:06:65:01:7f:12:50:f2:f4:75:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:33:25:5D:E6:8E:5C:F3:29:46:40:4E:AF:6B:50:3F:EE:78:44:53
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:48:1d:d1:af:bc:af:23:2a:22:30:e9:bb:cb:f8:e2:17:64:
2e:e7:98:31:6d:91:44:a6:e6:49:fa:cd:61:17:39:aa:0b:d1:
54:62:06:22:c5:ef:eb:39:1d:e8:40:b2:ff:52:df:ad:b6:86:
89:f2:b7:86:67:03:a2:b6:df:9d:81:ba:17:ce:c3:f5:c5:a9:
a0:a1:68:12:4e:6c:0f:38:29:14:5e:16:ec:76:81:88:99:7c:
b2:7f:c4:4f:68:9e:6f:16:72:93:64:db:b8:7b:fe:86:84:ca:
da:08:80:e6:f8:1c:21:15:37:3d:2c:08:ce:88:86:3d:b4:5d:
38:32:ee:35:f0:b8:f4:5c:51:35:85:83:dd:aa:a0:80:3e:c4:
5a:2c:54:63:fe:c5:37:1d:25:58:f9:78:8f:bf:51:40:3b:53:
8e:ae:3c:bb:4a:c2:ce:b2:60:e4:20:4a:53:f1:3e:3a:d5:f2:
91:2a:f5:74:12:b8:df:35:e9:19:a3:59:b7:c0:db:1a:06:5c:
c9:9d:c1:30:b7:7d:d3:7d:0b:90:27:e3:d7:c1:e8:11:7f:41:
5f:03:48:fd:83:01:46:07:c6:17:4a:de:80:55:c1:0e:d2:77:
bc:84:e0:dd:87:c6:2d:ce:b8:46:9e:fc:59:e4:ac:d7:46:48:
53:d1:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:15 2025 by rpki-client