Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier: uXau2kCAepQT7Z8iUC3W+VAbdE4jRNuIRZDx0u6Xzok=
Subject key identifier: 35:53:62:8C:FF:F9:E8:B3:3D:FD:27:89:4C:87:6D:8A:8C:5C:83:42
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 0196526D8ED4BA6C77EFB8A15A611D97ACE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number: 034A
Signing time: Sun 20 Apr 2025 09:00:33 +0000
Manifest this update: Sun 20 Apr 2025 09:00:33 +0000
Manifest next update: Mon 21 Apr 2025 09:00:33 +0000
Files and hashes: 1: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: OGt1ZebO9v0mhiG0wbh0emDCgSlhWOW0So1IoJsIyLs=)
2: mlswz8Ncs32ae7C2It5n-o0yiHo.roa (hash: S5ligNAG6F0uIgpXYHQu/GqcrGyX5LZG4CQQfjCfuRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:8e:d4:ba:6c:77:ef:b8:a1:5a:61:1d:97:ac:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Apr 20 09:00:33 2025 GMT
Not After : Apr 21 09:00:33 2025 GMT
Subject: CN=3553628cfff9e8b33dfd27894c876d8a8c5c8342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:08:5b:fd:c3:86:14:90:67:ec:b5:92:4f:
d1:84:63:48:a6:dd:c5:2a:23:96:d0:06:fd:6b:bb:
1c:99:a2:9b:c2:a5:f6:b6:61:89:17:7b:37:8a:6d:
6d:65:d8:41:2d:64:1a:45:5d:a0:66:54:c8:8c:98:
ce:12:25:7a:79:ae:32:e2:c8:d4:49:ab:19:33:ae:
ab:4e:5f:a6:43:8e:8d:69:b7:c3:02:21:d4:08:8d:
79:65:2e:a2:d8:d7:7b:c4:61:c6:c4:38:fc:09:a3:
d7:de:07:5a:07:0c:75:3d:52:25:b2:d4:af:5a:35:
b6:9a:d7:67:8b:d4:f2:5e:4c:0a:95:bc:00:73:1c:
e9:76:7c:0b:b7:35:b9:85:10:1d:c9:03:22:ea:38:
93:08:07:75:5c:2a:0c:9f:0a:8a:fe:f4:81:9f:5b:
5a:9d:23:09:6b:cf:4c:4e:87:ca:8c:29:64:00:03:
bb:28:c4:35:63:38:95:4c:dd:ae:0d:5b:a8:c8:67:
50:4e:51:a0:da:63:b3:87:56:d3:98:db:35:0c:5c:
bd:a8:6e:28:2e:68:06:19:60:9c:00:59:8c:ce:c5:
26:c6:52:ee:bd:a8:a5:41:4e:1b:d1:77:ac:07:75:
c8:ca:ae:39:67:54:b4:df:35:89:e0:9f:d7:81:b4:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:53:62:8C:FF:F9:E8:B3:3D:FD:27:89:4C:87:6D:8A:8C:5C:83:42
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:41:b8:da:1f:8c:18:c0:a0:9e:8d:75:21:5a:87:d0:1e:77:
d2:b8:7f:26:ed:c9:95:55:b7:52:b7:e3:ca:68:8a:4a:e7:5d:
ce:e8:c5:2a:d9:a3:72:a3:6b:92:a9:b2:1d:79:dc:a1:3f:b4:
c4:38:d9:db:4e:1c:b8:2e:9b:e5:a0:fd:1a:62:c5:2b:05:27:
22:84:f6:d1:19:f4:c6:8a:c3:14:eb:1d:be:88:72:66:8d:7e:
dc:7a:7d:0a:72:ae:db:52:e1:5b:f5:d6:25:71:80:64:c1:37:
a5:ae:81:c1:0b:63:c5:95:eb:39:fa:a5:85:1d:b0:02:c0:4a:
de:8d:1a:66:ed:2f:a7:e6:5d:66:90:bf:d5:1c:f8:6b:71:34:
d9:15:88:56:69:df:06:4b:ef:a4:c4:2d:45:56:7a:a4:69:fb:
a4:93:7c:d0:9d:3a:99:ac:05:c6:af:28:ed:0e:b7:2d:78:a2:
dd:0b:22:79:54:1d:ac:15:1c:0b:a5:55:1f:fb:57:5e:a9:43:
cc:ce:72:0e:b7:2a:98:7e:58:9e:a4:15:5b:3f:20:fd:b1:37:
4e:d9:a2:95:78:bd:67:65:b1:ba:0f:91:ee:95:72:40:18:ce:
12:d3:f0:d5:b3:a7:82:64:c0:81:50:3a:50:03:b8:22:f9:01:
68:2c:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:31 2025 by rpki-client