Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/NXwbu7IW2REwR2H6ezE3hHDKtpw.mft
File: NXwbu7IW2REwR2H6ezE3hHDKtpw.mft (raw, json)
Hash identifier: wHahLfMg2UK/1e5aNtnHdqOEOkIPsY1lRoiKC6HyZFc=
Subject key identifier: CB:AE:09:F8:4B:4E:85:51:B2:40:E5:54:4B:80:36:DA:46:A3:E8:7E
Authority key identifier: 35:7C:1B:BB:B2:16:D9:11:30:47:61:FA:7B:31:37:84:70:CA:B6:9C
Certificate issuer: /CN=357c1bbbb216d911304761fa7b31378470cab69c
Certificate serial: 019653B74CC4C3C8FBC13FD1BE6A4C9158ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXwbu7IW2REwR2H6ezE3hHDKtpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/NXwbu7IW2REwR2H6ezE3hHDKtpw.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 15:00:43 +0000
Manifest this update: Sun 20 Apr 2025 15:00:43 +0000
Manifest next update: Mon 21 Apr 2025 15:00:43 +0000
Files and hashes: 1: E9pk0ZllttDZKXJOg-IRuSUOGuI.roa (hash: iZIfCGoic6nKxXYncNFRzeFxubwStFv6Tsp9EcrF68g=)
2: NXwbu7IW2REwR2H6ezE3hHDKtpw.crl (hash: wEG2dpmy/89tDUlZ5LgNK0N9lByQorNXd1pUefeMaEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/NXwbu7IW2REwR2H6ezE3hHDKtpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/NXwbu7IW2REwR2H6ezE3hHDKtpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXwbu7IW2REwR2H6ezE3hHDKtpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:4c:c4:c3:c8:fb:c1:3f:d1:be:6a:4c:91:58:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357c1bbbb216d911304761fa7b31378470cab69c
Validity
Not Before: Apr 20 15:00:43 2025 GMT
Not After : Apr 21 15:00:43 2025 GMT
Subject: CN=cbae09f84b4e8551b240e5544b8036da46a3e87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:58:64:e6:a0:b6:54:ea:04:7d:69:ca:cc:8b:
a0:f8:ca:71:78:94:69:11:83:11:54:9e:b5:70:41:
94:e8:83:f6:43:d4:7a:ac:8b:e7:bb:09:ba:e8:68:
23:af:42:a8:86:c8:66:a1:2b:0a:09:49:56:8b:2f:
b3:b6:a5:f0:8a:49:21:99:b7:4a:34:cb:2c:d7:3d:
92:15:73:74:c3:85:36:13:b1:ec:97:3b:2a:ed:fc:
35:ed:9c:23:07:23:24:f3:62:98:1d:b3:51:8b:23:
40:43:99:13:0e:fb:57:b9:2a:4b:ac:38:db:95:06:
4b:cc:28:f1:2d:0f:a2:2d:00:e5:ee:8c:10:27:a3:
9e:ae:ff:65:77:01:b1:9a:6f:5f:a8:cc:e1:4e:58:
48:75:6b:bd:f8:6c:99:76:91:61:3a:b8:ce:c9:10:
25:a1:85:01:45:67:dd:9d:5d:94:6f:7a:03:50:fa:
f7:ce:f5:7b:bc:90:7a:c7:a0:0b:5c:c9:cc:0b:50:
a2:8f:b2:49:56:ca:48:36:d1:61:e9:35:39:1c:83:
94:1d:84:39:de:4b:5a:a3:11:05:4c:4f:f2:e6:75:
e2:af:1a:8f:ce:e7:5a:2a:85:8b:77:c0:4e:1c:ee:
cf:b0:ac:3e:c6:39:de:9f:a2:d2:18:06:7a:d1:a6:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AE:09:F8:4B:4E:85:51:B2:40:E5:54:4B:80:36:DA:46:A3:E8:7E
X509v3 Authority Key Identifier:
keyid:35:7C:1B:BB:B2:16:D9:11:30:47:61:FA:7B:31:37:84:70:CA:B6:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXwbu7IW2REwR2H6ezE3hHDKtpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/NXwbu7IW2REwR2H6ezE3hHDKtpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/NXwbu7IW2REwR2H6ezE3hHDKtpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d9:06:b5:59:ed:2a:03:f7:62:56:cf:7c:2c:a1:23:24:18:
bb:b3:a3:2d:7e:7f:3a:d6:2b:c0:26:2f:57:6e:70:2f:e7:82:
ef:0b:15:8a:02:0e:b7:19:e3:f8:88:24:4a:70:38:2c:af:9c:
86:6b:b9:cd:f5:6d:b4:4f:e4:df:28:d5:b8:fe:46:50:fd:7c:
53:eb:4e:90:6d:6b:4a:22:6e:1a:1e:83:67:41:ea:d7:c6:a0:
b7:54:f4:e5:05:4d:d9:98:aa:f3:b5:56:45:29:20:45:fa:27:
f6:a3:82:96:5f:56:89:9a:c5:87:25:40:9a:81:86:92:b1:2b:
9b:aa:7d:a2:02:31:8f:c6:72:91:af:b2:b5:b9:ef:e6:f8:96:
20:a3:47:6b:96:45:21:c9:d4:c5:68:7b:3e:55:a3:2c:2b:21:
94:2c:0f:a2:d7:75:3d:3c:35:76:e3:8b:87:16:85:a5:2f:64:
ef:29:4a:66:15:d0:50:fe:97:5d:48:c2:ab:fd:a8:30:ee:59:
b0:46:87:23:74:b8:41:76:03:67:12:94:00:db:ab:ff:a4:5e:
4e:cb:79:fb:8b:00:1d:b4:36:7a:82:e9:7b:d2:60:54:dd:1e:
0b:af:d7:16:39:6e:d1:71:5b:21:98:13:dd:2d:60:f3:df:7c:
df:c0:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:47 2025 by rpki-client