Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
File: NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json)
Hash identifier: olIs+KLRluTLJ3KG+9Das16iF8/SYzxuZnTJIqw94h8=
Subject key identifier: F4:27:2E:EE:B6:5A:48:DC:11:33:90:12:F3:43:7E:66:D0:73:E7:18
Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb
Certificate serial: 019655A5DB580ED3BAAB4B2A6713C97F2530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
Manifest number: 14BD
Signing time: Mon 21 Apr 2025 00:00:54 +0000
Manifest this update: Mon 21 Apr 2025 00:00:54 +0000
Manifest next update: Tue 22 Apr 2025 00:00:54 +0000
Files and hashes: 1: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: Pq73VUWuSOGs+JLgeZyDn2EzUHntUkAWp6Dv/10NTpE=)
2: RvuQkZ_J-wvlyDc9DwQMRfdbRuc.roa (hash: ZwW8RhsC1c6THaCJDOUF+Lquzo4U71ipuOUtISL9Y48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:db:58:0e:d3:ba:ab:4b:2a:67:13:c9:7f:25:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb
Validity
Not Before: Apr 21 00:00:54 2025 GMT
Not After : Apr 22 00:00:54 2025 GMT
Subject: CN=f4272eeeb65a48dc11339012f3437e66d073e718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:dd:da:c9:58:fa:45:ab:85:16:c6:74:f7:
63:48:46:ba:03:f5:34:ed:ba:5c:dd:d0:72:90:29:
a1:7a:d8:7d:27:a9:2a:24:42:f7:7e:c1:5d:e0:2b:
1c:42:bc:b5:38:2e:af:68:33:35:53:89:4b:da:82:
6e:70:e1:89:88:ba:b1:ec:5a:88:e0:9c:67:be:d4:
8b:be:cf:0f:4d:9a:ce:35:14:c3:3e:d8:72:2f:f1:
d9:51:ab:ed:be:b2:99:44:c0:c1:c7:2b:00:e8:7c:
00:49:2f:ea:0f:ab:7f:17:4b:c3:b6:e3:29:8a:63:
d6:dd:65:ec:ec:16:c4:80:47:f1:f6:28:d9:bf:e4:
10:83:8b:de:7f:08:b8:74:ba:f1:f3:04:de:d6:6f:
e0:2e:eb:0c:02:ed:e4:c2:cb:2f:ec:12:96:b4:bf:
6b:81:6a:c8:52:3f:b6:c1:e3:f8:e9:6c:f2:60:f1:
c1:0c:04:a7:c5:9c:1e:2a:b1:68:76:e7:e4:08:aa:
92:d7:5a:ba:af:ba:d8:d0:47:da:2b:d6:7d:9b:7c:
69:ef:36:e0:bc:28:44:de:8d:7f:06:24:78:fb:65:
25:b9:b4:ea:4f:6c:a7:c6:c8:32:fa:35:cd:1c:61:
c6:64:f0:eb:51:01:8a:1a:26:40:0f:24:2f:7e:c6:
51:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:27:2E:EE:B6:5A:48:DC:11:33:90:12:F3:43:7E:66:D0:73:E7:18
X509v3 Authority Key Identifier:
keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:20:83:2d:5f:35:4e:18:33:d7:3e:5e:71:f0:10:3e:fb:c6:
94:ed:34:e9:07:ef:5b:12:e5:bd:54:80:35:10:d6:43:06:39:
06:dc:29:4e:fc:2e:52:8c:89:69:de:c3:7a:3e:88:e7:6f:a1:
02:08:6e:42:40:d3:99:a9:c0:5d:66:df:61:93:23:18:d6:77:
95:c3:a5:5c:ba:f9:da:07:a7:bc:a1:54:0d:43:31:68:64:6f:
bd:a9:db:21:67:c0:0e:3e:9d:b9:5e:ee:f9:d4:4d:de:1a:37:
cb:05:26:78:58:67:fa:4a:7c:6d:c1:21:bd:9a:20:a1:8b:36:
cc:f3:54:06:d1:94:e6:11:1d:b9:fb:71:75:60:cb:da:23:1f:
6b:fb:68:1f:6b:93:74:ee:9b:ad:84:63:94:b8:d5:5d:f2:39:
54:9e:06:7b:fe:97:bb:06:b7:a3:ed:6c:04:70:41:40:59:b5:
ef:af:f2:b6:d8:4e:1b:5a:82:b4:35:9e:42:36:4b:a9:af:ff:
de:69:7f:b0:cb:0a:64:ad:71:e1:bb:12:dd:e6:3c:b2:cd:51:
3b:13:2c:6d:d6:99:90:3e:e7:b6:b9:e7:84:9e:8a:51:7d:94:
a4:f5:87:50:a9:e4:82:4c:c4:18:6c:1d:77:4a:81:d5:1a:70:
3e:2f:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:24:54 2025 by rpki-client