Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier: 2/sbBL6dTGpQZPfRKFo1IyFG/ySHNArB1NbMVsLtp+s=
Subject key identifier: 3D:83:98:A2:4C:E7:EE:81:04:0E:7D:65:0D:0C:54:2F:3B:7C:1D:BE
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 0196451FF5D38744DF2404379B0EE1A3D2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 19:00:44 +0000
Manifest this update: Thu 17 Apr 2025 19:00:44 +0000
Manifest next update: Fri 18 Apr 2025 19:00:44 +0000
Files and hashes: 1: L5MQK89fxZaRwM_CqURZbBomtGM.roa (hash: dfoa3Oa+GHxXVfHS0ZcfFlTwLP7no4RhSrEEs8sBD0U=)
2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: BhBJH32pR5JM9bm8aHYD7mFVEpbIJ9hkrahcpm0WvKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:f5:d3:87:44:df:24:04:37:9b:0e:e1:a3:d2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Apr 17 19:00:44 2025 GMT
Not After : Apr 18 19:00:44 2025 GMT
Subject: CN=3d8398a24ce7ee81040e7d650d0c542f3b7c1dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:6e:93:e4:ef:bf:5f:23:ff:3f:ed:3a:f4:
47:bb:2f:07:c5:05:91:41:2a:ab:5c:b5:82:d0:fe:
b7:aa:3a:db:5c:a4:7f:e6:9f:af:30:3d:28:a8:73:
02:d6:2d:5e:8c:b4:14:1b:14:3e:f6:3d:34:24:ae:
70:c9:1d:d2:fc:26:8c:29:44:ec:9d:5f:65:e9:75:
f0:20:fa:8f:15:36:9c:40:66:00:24:54:6a:35:23:
4f:d1:84:02:d7:91:d0:1b:c3:c5:d1:91:c3:a4:dd:
9d:90:37:f6:e9:d7:8f:b5:79:01:2d:27:df:21:92:
53:96:9e:db:48:32:0c:1a:2f:de:d4:e2:d8:3e:50:
45:d4:5e:59:52:83:c2:49:b1:96:d1:21:73:ca:26:
43:d4:0d:57:55:cf:ce:c8:ff:87:26:f0:8b:56:0a:
e1:1d:51:54:13:08:28:1e:12:7c:01:d1:fe:bc:10:
d1:e8:5f:d1:e0:4f:85:eb:e2:97:7a:d1:3e:79:6f:
6c:38:c6:4d:74:eb:5a:a5:6d:26:e7:e7:ae:06:e4:
df:11:03:ad:35:67:99:87:e5:0b:c7:0e:4c:1a:ad:
4e:a1:cc:b0:54:16:c7:3a:4b:32:d2:6f:28:1e:73:
78:ed:70:74:cb:b4:8c:21:3c:a2:31:9a:d5:d7:5b:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:83:98:A2:4C:E7:EE:81:04:0E:7D:65:0D:0C:54:2F:3B:7C:1D:BE
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:52:39:ca:d1:6d:9c:6f:c3:72:02:48:b0:1a:06:13:6e:3c:
5f:8a:6c:18:46:82:c4:15:21:d2:03:aa:93:30:58:33:1a:ef:
3b:ed:63:73:2e:a2:5b:6c:d5:05:bd:c6:16:b7:fd:cf:a1:f8:
44:21:35:2d:a8:63:1b:01:fc:02:82:36:8b:5a:d0:54:8d:6a:
12:47:89:dc:4d:ea:aa:78:92:ee:1a:98:8e:6f:c1:ee:f0:58:
1d:9a:ac:3c:08:19:2e:0b:ef:5e:58:ca:43:40:ce:eb:20:2a:
27:70:d4:63:03:33:6d:a5:b0:c4:4d:b8:34:45:89:60:e0:99:
79:fc:84:8c:5e:43:b7:69:b6:34:47:5b:d5:eb:6f:e6:9d:a2:
7e:f2:3e:76:d9:6d:0c:53:23:37:46:a3:1d:5e:c6:fd:cb:e4:
b2:27:92:0a:9e:5f:1c:c4:72:73:3a:37:d3:52:4c:29:cf:ba:
cc:b7:44:e1:d6:09:e3:d8:98:81:fb:50:48:57:11:d3:4c:ef:
30:17:ec:c6:4f:16:5e:e0:0b:a2:35:0a:a5:b7:ce:75:a2:87:
dc:73:c8:a0:af:88:22:29:52:f3:f9:2c:6e:9d:b0:49:c8:b8:
b6:35:7c:76:86:0a:cb:67:42:1c:fd:0c:e3:37:75:e5:61:4a:
8b:ff:cd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:17:33 2025 by rpki-client