Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: 7Jp1f/tN5yNQwq5uKBKKG49FoNcWYFq4I+4aiReB2hI=
Subject key identifier: 75:DE:DC:8A:61:27:5B:58:CD:9D:4B:DA:7F:55:CA:E3:F5:9C:E9:5A
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 019655DC9CD5EB1152B1311E1510F460C675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 01:00:43 +0000
Manifest this update: Mon 21 Apr 2025 01:00:43 +0000
Manifest next update: Tue 22 Apr 2025 01:00:43 +0000
Files and hashes: 1: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: jn38GtY7wzFb4g3X++IRTR7mpZZpghNw26NsFHdT6GA=)
2: ge72rIVKenfFe0v5asZR_PaxIp4.roa (hash: o9engqettqOIJ9n8PYQ/SXW11G8NZE3fZOewqKwRqSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:9c:d5:eb:11:52:b1:31:1e:15:10:f4:60:c6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Apr 21 01:00:43 2025 GMT
Not After : Apr 22 01:00:43 2025 GMT
Subject: CN=75dedc8a61275b58cd9d4bda7f55cae3f59ce95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:66:8c:ff:c9:c6:d9:14:31:2f:55:40:0e:
c0:68:48:fb:ca:63:44:08:4f:85:89:44:6f:c1:37:
60:07:b3:f5:b2:28:56:e8:4c:1d:2d:cf:57:54:db:
4c:d2:47:1d:3e:af:9b:d7:aa:24:81:73:80:56:f2:
ef:96:cf:b7:53:92:a5:f1:08:e4:76:e2:8c:e4:3b:
52:de:e2:7d:40:1a:49:19:1b:4e:e7:92:ab:27:ca:
2b:b6:e1:c7:37:da:32:b9:13:26:13:9f:5e:73:1c:
39:4a:e5:80:52:0a:f3:19:a1:c8:01:16:cf:b3:e8:
8d:67:83:c6:71:f9:b7:cc:ff:69:5d:da:db:c0:f4:
0d:fc:a9:3c:29:dc:dd:66:8d:bb:17:eb:fe:7d:07:
11:7f:14:e7:0c:9d:23:5b:ee:af:e4:91:49:14:7d:
1b:ef:6b:5b:dd:b3:f1:48:33:ba:1a:2e:34:81:86:
34:9a:c0:e0:14:19:67:67:0a:38:d1:56:b6:88:19:
18:4b:39:23:69:cf:0f:91:df:95:2f:ce:73:d9:f4:
b1:9d:cd:35:2b:44:65:e2:6f:f4:63:02:e5:85:40:
42:0e:4e:92:2d:c3:62:6e:09:7d:31:bd:95:41:91:
63:de:a2:e2:ca:c6:6e:64:76:28:e3:c2:f7:24:45:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DE:DC:8A:61:27:5B:58:CD:9D:4B:DA:7F:55:CA:E3:F5:9C:E9:5A
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b1:1c:ac:ab:be:e5:78:3b:30:09:74:d4:65:1e:62:7f:f9:
a7:c3:2f:c3:f0:b4:34:09:61:b6:a9:93:b7:ab:19:e6:c3:cb:
cb:a1:ab:e5:c6:0a:f2:d5:ee:db:c4:a4:19:70:e2:6d:b0:23:
4d:ac:5c:32:d2:d2:ed:f3:e5:d6:b7:a0:51:fb:d7:21:4c:ae:
72:2c:80:4e:89:2b:69:58:12:23:97:4b:34:c7:a2:3f:2e:4e:
da:b9:91:a0:57:74:72:e7:87:03:b7:32:23:a1:88:2e:da:9c:
5f:b9:36:bd:cd:ea:c8:8a:69:51:33:cf:95:39:30:97:97:6b:
40:fa:95:31:e6:b2:be:70:2b:ab:6a:1b:45:40:ee:5f:db:f9:
5f:4e:1b:9d:ec:4c:40:a4:65:47:83:76:b1:5c:e3:2c:19:ad:
6e:c2:54:84:6a:a8:83:34:11:70:fa:00:28:f5:ed:f6:31:0e:
f3:a8:23:24:39:89:53:20:c7:a9:80:11:0c:0d:08:92:6b:69:
f5:b2:5b:83:c7:ab:f9:41:c8:b1:e4:84:15:91:a3:a2:8f:29:
23:01:9c:a7:e7:13:29:f8:32:6c:cc:c9:b5:95:27:44:e1:f4:
3a:96:3a:0c:bf:c6:b8:32:64:26:2f:20:87:ec:7b:58:a7:67:
f2:56:db:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:33 2025 by rpki-client