Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
File: NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json)
Hash identifier: X9IFwpxgrWo3POApNqTzc+28jdxogk8OWNfhezFyNyM=
Subject key identifier: 89:5F:CB:DA:19:6B:7E:29:4F:21:34:54:12:34:10:F2:7D:F1:B5:E4
Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
Certificate issuer: /CN=34c4956f85671125882c574cd2e2d203aabded05
Certificate serial: 01965538BD5931DE5CD6AFCE92F5912B06A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 22:01:43 +0000
Manifest this update: Sun 20 Apr 2025 22:01:43 +0000
Manifest next update: Mon 21 Apr 2025 22:01:43 +0000
Files and hashes: 1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: uq4T3tITOiIIiVCiUnHeCfwHvikHfO92UPwqJBTs+G4=)
2: xtLurjJMXgwePFKUT7vd_Bs7y4g.roa (hash: 9QOnyZtRBS25fvMRFyNZdyW0R5uMOP/pXW6ujcGtyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:bd:59:31:de:5c:d6:af:ce:92:f5:91:2b:06:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05
Validity
Not Before: Apr 20 22:01:43 2025 GMT
Not After : Apr 21 22:01:43 2025 GMT
Subject: CN=895fcbda196b7e294f213454123410f27df1b5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:ba:c6:20:18:8d:4f:e0:85:e1:69:56:b5:
53:51:f2:77:22:d9:48:45:68:03:ab:97:df:ef:2e:
f9:d3:3b:ce:a0:6f:02:37:d6:43:91:2e:22:06:da:
85:48:38:03:9b:dc:7f:d8:19:86:11:ef:9c:74:36:
6c:55:59:10:47:6c:f1:da:72:1d:cf:ef:08:e5:61:
08:c1:6c:ab:a7:c1:81:30:53:09:08:8b:93:3c:29:
8c:b8:c7:51:5d:b4:b3:5f:04:90:85:4d:b2:72:9d:
d1:64:e8:70:43:60:fe:9f:6e:40:81:03:a5:d7:92:
51:90:1f:49:01:8d:f4:96:51:b0:17:4b:0a:7c:c8:
a6:23:7e:7c:e3:ed:0f:b7:d5:eb:a1:52:71:87:69:
44:4f:45:5d:9c:f1:3a:4d:64:54:ab:b4:3c:b8:82:
b3:9d:58:e2:a5:3a:30:21:ca:20:fc:4c:70:9f:4e:
ef:2d:cc:1f:6f:fd:45:07:ea:d6:f9:43:4f:6e:ed:
63:be:1d:fb:ac:0a:90:5d:5f:28:8d:a3:27:2b:d1:
2a:d5:9d:29:b4:53:4b:8f:e9:ac:a5:05:3b:cc:46:
42:95:06:21:8e:23:30:75:46:49:56:2e:d7:d4:25:
23:f6:10:da:71:36:73:7c:c2:d1:8f:82:ab:a9:6c:
2b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5F:CB:DA:19:6B:7E:29:4F:21:34:54:12:34:10:F2:7D:F1:B5:E4
X509v3 Authority Key Identifier:
keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5d:12:1e:9c:bb:38:f2:64:45:51:d2:04:57:d5:da:e4:a9:
8f:b5:59:d6:8e:10:af:b7:df:69:6b:35:3c:68:32:e6:7c:6c:
7d:1a:b4:31:39:d1:cb:59:75:d3:cc:9f:31:b6:66:78:56:2e:
83:d8:eb:20:fe:72:eb:5d:4c:d6:e4:89:12:b4:c3:3e:f3:9b:
aa:38:57:ba:e8:fa:df:4d:67:50:07:01:8d:b5:23:73:57:d5:
9f:cd:13:e5:be:60:1e:a3:72:22:1a:47:50:13:7e:72:61:7a:
6d:0a:96:df:51:f7:99:5d:8f:88:cb:2b:54:aa:3e:9f:93:72:
d6:3f:8c:83:be:00:81:39:d5:da:53:f1:45:a3:7d:65:04:f4:
e4:ab:e0:40:2f:f0:ef:9b:48:60:fa:c8:26:c1:9b:40:78:8e:
18:fb:39:cf:89:58:ff:16:78:b4:13:0c:27:1d:c3:99:b0:f4:
97:0d:ae:46:bb:78:0f:3e:fb:d8:6b:1d:ab:85:9a:d7:26:a6:
2d:1d:cf:0a:ee:74:54:65:a6:aa:1f:f0:31:22:ad:16:1b:bd:
ce:de:fa:92:56:d5:00:95:fd:36:7c:2e:a2:27:8b:de:51:09:
4a:76:b4:d6:60:7d:04:6d:84:a9:dd:b5:bc:ea:78:b8:6c:b8:
ff:e8:b1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:52:48 2025 by rpki-client