Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: 0rIe/Flmwdszb/9ifCxhFEiquWzBbQ7EnIFkMPi1sHA=
Subject key identifier: 57:60:86:BA:0A:F2:CB:6D:9F:1F:60:D6:1A:70:9E:EF:08:E5:18:E1
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 019656132342E7B40A865116DA4D03D9B461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 0E35
Signing time: Mon 21 Apr 2025 02:00:16 +0000
Manifest this update: Mon 21 Apr 2025 02:00:16 +0000
Manifest next update: Tue 22 Apr 2025 02:00:16 +0000
Files and hashes: 1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: RsQF68Ow137dDlg9kUsqEM9Rl4bQYlV2u1J/PvsKamA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:23:42:e7:b4:0a:86:51:16:da:4d:03:d9:b4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Apr 21 02:00:16 2025 GMT
Not After : Apr 22 02:00:16 2025 GMT
Subject: CN=576086ba0af2cb6d9f1f60d61a709eef08e518e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:8e:cb:75:28:f1:3d:ab:be:72:ee:69:69:
69:6e:b2:16:51:c8:63:22:d6:15:5d:68:95:ac:fc:
56:27:55:cb:c5:cf:84:d3:a6:6c:4b:00:d1:8c:2f:
43:14:30:4c:75:78:7a:3e:70:dd:a4:d5:3f:1c:67:
2f:02:3b:48:50:ea:7d:79:d2:dd:99:f2:1d:06:f9:
84:e3:3d:fa:33:5f:18:22:5b:eb:85:e5:49:ef:ec:
2f:1d:1f:d1:c8:2e:48:aa:a4:a3:ca:dd:72:62:49:
e3:a0:10:44:6b:7f:29:7a:df:0e:b1:0c:dc:68:bb:
ec:fb:71:cd:33:88:92:ce:cc:63:e0:da:ec:fd:0d:
e1:1f:27:8c:82:5b:0b:a3:44:be:bb:67:b3:98:25:
e1:ae:64:32:eb:f3:a1:7e:0e:46:ab:1c:7d:c1:01:
b6:76:5e:55:ac:ff:6d:17:af:09:bc:62:24:08:9a:
67:60:51:38:08:be:d6:2a:c0:51:da:78:58:84:f9:
b1:dc:93:a8:36:c8:e1:75:ba:42:1c:1d:c5:ae:fc:
5a:b8:31:bc:d4:ca:01:4a:2c:20:3f:ad:b5:83:cc:
4f:e5:a8:7d:7b:03:f8:8c:d7:cf:c5:73:8d:6e:7d:
9f:3b:4a:5e:ac:b7:91:09:e4:bd:4f:1b:78:fd:ab:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:60:86:BA:0A:F2:CB:6D:9F:1F:60:D6:1A:70:9E:EF:08:E5:18:E1
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:08:49:ce:fc:40:a9:b9:ac:ae:12:e6:1e:4c:17:dc:07:41:
cf:b2:9f:28:a0:3f:10:72:be:c3:a8:4e:68:d4:98:a1:0d:22:
e7:8e:e8:2d:79:d6:de:59:45:03:0f:e9:81:6f:f8:72:4e:74:
ca:98:e5:88:66:d9:cb:a5:42:84:e2:fd:16:ce:0e:1c:64:ac:
05:f4:d6:82:19:53:6e:81:42:2f:dd:88:86:f0:4a:ae:ad:5d:
e5:4a:4a:d6:7b:a4:47:51:de:54:fa:3d:d5:ff:71:a3:44:94:
61:5b:04:2b:5b:f2:f9:57:67:5a:8b:e3:90:3d:31:84:79:df:
41:58:a7:cb:f9:42:9c:3d:42:85:29:ef:05:5c:7b:e5:2d:10:
6a:41:ac:28:fc:fc:4e:b3:c1:04:c4:eb:24:4b:27:a2:27:60:
88:d1:2a:1d:49:61:09:83:0b:df:b2:4d:f9:5e:67:ec:65:c0:
b6:52:fb:dd:ff:b8:4c:07:c9:cd:4b:26:06:1c:f7:a2:d6:b1:
24:ea:1e:61:da:1f:d6:3f:27:38:75:b5:75:7f:ef:ea:2f:91:
92:f1:6f:a6:62:2c:f8:d2:d7:f0:36:26:46:b8:a9:58:b3:41:
46:d7:b7:d6:3d:d1:f4:4a:e9:6d:d7:e5:15:be:86:8b:4a:1b:
ea:0e:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:18 2025 by rpki-client