Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
File: NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json)
Hash identifier: 6/KbxIM1Umh/Is37yxWCjal8d9vE99jo6ezg4gtzWf8=
Subject key identifier: 64:CD:D3:A2:1F:29:33:3F:0F:11:B9:1F:59:67:C6:8C:F2:91:A4:95
Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Certificate serial: 019658A663E3367371E5ACAB9187F229C78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
Manifest number: 04A6
Signing time: Mon 21 Apr 2025 14:00:21 +0000
Manifest this update: Mon 21 Apr 2025 14:00:21 +0000
Manifest next update: Tue 22 Apr 2025 14:00:21 +0000
Files and hashes: 1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: P9ng8uNXgtJSHU7MxnK5YLgQYG4M+SORMHqn5dQAyQA=)
2: _RGZJkC_maX9Rk5gq7HAO40xyLk.roa (hash: UMn242+aY7D7FSfVsCmwNFJLABV4j5b5GNVt9RDj5KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:63:e3:36:73:71:e5:ac:ab:91:87:f2:29:c7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Validity
Not Before: Apr 21 14:00:21 2025 GMT
Not After : Apr 22 14:00:21 2025 GMT
Subject: CN=64cdd3a21f29333f0f11b91f5967c68cf291a495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:b6:0f:b1:ad:dd:f7:fa:2e:4d:da:31:c7:
0a:fa:05:60:dc:45:7b:c1:23:45:b2:ac:ef:5f:a7:
af:58:c4:7a:5c:46:22:1d:8d:4d:1e:0f:0b:8c:18:
16:cd:8f:58:e0:81:7d:d7:e3:dd:3c:e6:e7:62:2a:
97:0c:90:6d:b6:94:ab:a8:47:ad:86:a4:0a:63:ac:
ee:66:46:c4:5e:6f:b3:34:67:cb:9c:c4:09:02:eb:
4a:6e:21:2f:ac:ba:de:70:47:8c:f2:d5:81:d4:7d:
17:e4:a0:69:f1:30:3b:a1:2a:7c:5b:b2:9a:fc:77:
30:6c:0f:ca:62:02:64:a7:35:e6:07:55:70:2b:be:
3b:e2:c2:07:b1:c1:3b:31:a1:54:32:51:f5:bc:ad:
bd:96:4e:8c:9d:2c:58:98:22:78:87:08:31:27:2e:
e4:d7:e8:04:61:fa:b9:2e:33:78:5c:78:a2:4f:bb:
24:81:78:4c:15:63:bf:4e:54:15:9a:02:06:70:ed:
de:6e:2e:46:3e:94:d8:cf:b1:39:17:b9:17:de:1e:
13:ed:a2:8b:45:f8:80:fc:c6:c5:73:ed:18:f4:53:
35:2e:f3:06:f8:1c:15:07:d6:1d:51:68:e6:22:c3:
42:62:19:62:0e:7d:0e:a1:3c:6d:20:65:cc:c1:2a:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CD:D3:A2:1F:29:33:3F:0F:11:B9:1F:59:67:C6:8C:F2:91:A4:95
X509v3 Authority Key Identifier:
keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a7:45:72:d9:cf:ab:cf:05:42:a8:62:0a:4b:bb:4b:69:3e:
bd:e6:c5:c3:ff:92:a9:ae:42:db:20:b6:3e:c4:59:5e:44:9f:
58:52:d9:70:18:d0:ab:2f:59:f4:06:49:98:b6:01:44:31:5d:
f3:d4:3a:7a:49:dd:04:2b:cb:81:bc:af:58:fe:03:72:88:06:
99:6f:23:70:28:91:30:b4:5b:2b:50:e6:a7:43:bc:f3:e9:0c:
69:9c:64:7f:c7:98:a1:99:95:af:9c:a1:09:ba:54:a9:54:82:
97:61:4c:e4:e2:78:a5:30:e8:f7:63:f9:cb:0d:dd:9e:f8:82:
1b:50:cc:5e:2c:95:d3:5e:b1:ef:5a:db:67:ed:4e:d6:0b:14:
60:41:24:8d:5b:26:2c:8f:38:f9:83:ca:61:c4:44:5d:80:e4:
a2:bf:6d:88:f4:e4:ab:e3:e0:b8:eb:51:47:f3:38:d1:9e:6e:
ba:27:a7:02:56:f3:73:52:c1:c3:73:95:7c:68:61:7a:fa:b6:
6f:04:96:3f:15:64:d8:af:75:82:ab:fd:13:72:3b:dc:12:1d:
b1:ec:eb:d9:96:7a:cf:7e:51:e5:74:d9:70:54:f9:5d:1c:83:
0e:04:94:e2:4d:09:f1:60:0f:6d:cd:1b:d8:53:01:f8:d3:97:
25:dc:53:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:57 2025 by rpki-client