Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier: o1UsN/e2jmZkuMkDSMICT1jKhvJlerWLeUjBUfk30n4=
Subject key identifier: 6B:E5:0C:76:52:E7:08:02:CC:40:67:F0:6A:18:35:6D:DB:BD:AB:7B
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 01965DCDA49E8EFC5AE24C8947FC856E4D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 14:01:20 +0000
Manifest this update: Tue 22 Apr 2025 14:01:20 +0000
Manifest next update: Wed 23 Apr 2025 14:01:20 +0000
Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: +cUH+Bpv2vX+40gHdAOWyCCJgjP4ZXyJjZrKkWYo1eU=)
2: kVipI_xyp0_kuJlOJOnoAHsePks.roa (hash: 1FUuhHfAvSDiWJAZOii+4sL3nFhAdH6ZW0fC89DJLKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:a4:9e:8e:fc:5a:e2:4c:89:47:fc:85:6e:4d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Apr 22 14:01:20 2025 GMT
Not After : Apr 23 14:01:20 2025 GMT
Subject: CN=6be50c7652e70802cc4067f06a18356ddbbdab7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:29:8f:c9:b6:67:05:d6:c5:16:4a:3f:3a:
b6:c2:16:c1:3c:6f:22:a6:7e:0e:bd:32:6c:77:cb:
53:df:03:f4:2d:89:30:d6:d0:56:5c:7d:5f:87:e1:
d9:04:f9:77:4e:11:0c:77:d6:03:a2:77:2f:d5:0b:
80:5e:cb:01:bc:0b:5b:3d:66:a7:1f:ca:9f:2b:ab:
53:e0:bf:0a:c1:41:7d:a0:da:3b:1b:65:f7:ba:ff:
b4:51:77:8e:a1:42:77:e4:cc:e6:9e:da:c1:65:7e:
7f:1b:91:ca:da:1b:9c:13:84:32:51:87:85:a6:c0:
fd:23:1d:ac:5b:b8:fe:44:24:7c:70:b1:34:27:c8:
62:21:90:22:a2:11:04:c8:e9:cb:96:c2:43:84:1c:
1a:09:55:d6:8a:17:19:53:d5:d4:c3:20:75:d0:8b:
65:74:63:38:4f:95:e8:00:82:a0:92:1d:af:ee:96:
c4:63:12:e1:b3:f6:a5:87:62:72:82:d4:12:f7:8f:
80:85:e0:0b:60:b3:16:23:08:29:aa:89:ae:49:96:
b6:e9:8d:10:4b:7c:97:f0:48:f5:22:23:7e:74:98:
91:9e:99:a8:65:a5:a1:ff:3f:38:7a:4b:08:7b:fb:
24:62:a9:14:01:f1:eb:4f:42:3f:79:91:bc:3a:49:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E5:0C:76:52:E7:08:02:CC:40:67:F0:6A:18:35:6D:DB:BD:AB:7B
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:28:08:10:7a:bd:cb:09:7a:f2:40:c8:dc:ee:a2:62:6f:0b:
44:4f:55:51:6e:20:e7:7c:15:bc:56:b9:81:df:76:ee:9c:ba:
a3:af:f1:3c:70:41:7c:8f:27:4c:56:8c:bd:7b:21:64:e9:35:
f8:c4:98:a7:fb:34:ff:05:2e:be:c9:fb:1b:ae:5a:c0:5e:9b:
e6:a8:a1:72:79:fa:4d:8c:07:59:e6:68:9f:7d:b4:4f:8c:b0:
21:14:7c:7e:ae:88:b4:27:4e:07:0f:d3:e6:39:df:51:5a:63:
aa:71:ec:72:d7:ef:5e:b5:a8:ce:62:38:eb:09:4a:7e:91:30:
72:be:88:bf:5a:ac:9e:f3:ad:60:6e:c5:48:30:c3:d7:d6:f6:
d0:c0:96:4d:85:03:07:3e:e7:23:4d:15:03:3f:8e:6c:43:02:
e5:ac:84:38:07:c0:d4:08:8c:9e:f7:d0:86:55:44:86:fd:22:
4b:b0:28:f5:bd:d9:95:4a:4f:95:0e:d5:e1:95:4b:d8:86:78:
9e:84:0f:e4:cd:5d:b7:9f:1a:a3:b8:3e:f2:54:dd:2a:33:96:
53:5e:b5:e8:9a:5b:18:3a:9b:f2:77:7b:c4:8d:30:cc:75:94:
6d:39:91:27:9e:c4:09:e2:da:ca:94:79:58:b4:76:51:ab:14:
09:ca:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:54:20 2025 by rpki-client