Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
File: NYx3zUAYPEEVsr8NznFuC8XQv9U.mft (raw, json)
Hash identifier: ywGg0ywiNRNJ4vgyyBQnn7phadFnfHxKGTl4o4YNHS4=
Subject key identifier: 13:FA:07:A4:43:24:57:6F:5A:00:5A:34:AB:F8:39:85:2E:AC:C5:6F
Authority key identifier: 35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5
Certificate issuer: /CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
Certificate serial: 019642FA33E4923F33429CD4C3BF0B40E8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
Manifest number: 025F
Signing time: Thu 17 Apr 2025 09:00:15 +0000
Manifest this update: Thu 17 Apr 2025 09:00:15 +0000
Manifest next update: Fri 18 Apr 2025 09:00:15 +0000
Files and hashes: 1: NYx3zUAYPEEVsr8NznFuC8XQv9U.crl (hash: wr9bJ6hqJUJLhSkAeVMfeC0cBd/up4M81DCuLWSxkSA=)
2: zdd_itkr61DwlSbiF7xORGma-Mg.roa (hash: s7+y8n33Kdf5OFXebrrUAhH6tASSitV8ofo7STn/T1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:33:e4:92:3f:33:42:9c:d4:c3:bf:0b:40:e8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
Validity
Not Before: Apr 17 09:00:15 2025 GMT
Not After : Apr 18 09:00:15 2025 GMT
Subject: CN=13fa07a44324576f5a005a34abf839852eacc56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:04:da:f9:1e:e6:86:ff:ca:94:7a:a5:73:
90:e6:4b:9d:d5:03:20:2a:64:51:4b:c1:82:5d:c0:
61:76:cd:01:89:6d:37:ab:fa:42:e8:87:ce:ed:e2:
88:fe:b6:3f:f5:96:e4:e7:59:44:cd:1f:6c:32:24:
45:ba:ae:dc:10:48:97:ac:44:c6:f5:b7:0c:db:d1:
8d:c1:34:f9:c5:9e:51:1c:0f:1c:a2:14:84:2b:08:
9e:ae:77:ee:25:79:35:48:c7:2a:4e:42:25:05:d7:
49:48:82:9c:91:96:f1:28:92:97:49:55:15:69:1a:
ff:e9:ad:56:fb:07:47:24:7f:ff:aa:5c:3e:f3:68:
86:0e:93:93:e9:40:cd:d4:15:73:0b:1a:ad:aa:32:
2f:94:e6:85:05:71:02:90:3d:d0:bd:33:8e:c3:e1:
6b:eb:14:d4:33:0a:de:78:12:b1:46:60:0c:d0:76:
15:70:a6:cf:52:b0:f7:1c:3d:34:75:25:c7:1d:0b:
31:8d:d9:94:e3:d7:55:e4:f2:11:69:1b:53:79:f3:
66:a7:21:d2:8c:06:7e:96:06:6e:b7:0a:2c:d6:a8:
03:aa:9e:af:26:d3:fd:89:53:7e:98:a9:b3:9d:5e:
98:64:9c:d7:0e:a2:5b:e9:83:37:41:cd:97:9a:72:
0c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FA:07:A4:43:24:57:6F:5A:00:5A:34:AB:F8:39:85:2E:AC:C5:6F
X509v3 Authority Key Identifier:
keyid:35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8b:90:2f:ba:c2:57:bc:80:bd:35:a2:15:cd:65:21:e1:82:
a7:ae:02:b0:c1:1f:d5:71:2b:07:65:6b:de:9d:54:26:8d:9b:
23:e2:08:a5:80:45:eb:d7:3f:ed:97:ea:86:c0:44:4e:36:54:
24:42:12:c5:23:67:ee:bb:20:e9:4e:c2:51:f5:73:ba:57:fe:
6d:32:14:ad:d6:23:d5:25:8c:90:d9:03:86:8b:5d:96:0b:4f:
83:48:4b:69:84:26:34:3f:ac:a7:49:be:c9:cc:0c:a8:48:a0:
e9:4f:09:2a:af:ec:27:95:29:96:9d:7e:6d:f8:35:2c:1a:90:
c0:67:b4:b3:dc:7d:c5:56:e4:f3:27:69:be:2c:9d:55:ea:03:
e8:5f:19:05:da:b6:5c:73:99:bc:66:6e:a2:e4:c8:98:40:b9:
bc:ef:0f:7f:b8:33:9d:19:a3:fd:52:27:af:63:dc:2c:66:b1:
30:1b:fd:5d:22:a6:51:c3:9b:8e:6b:d1:14:56:6a:52:d3:77:
ca:51:cc:68:b8:09:4e:d3:1f:91:b1:59:3c:33:0a:85:00:df:
8f:dd:66:df:e3:67:8d:0a:07:39:26:7c:fb:bb:6d:10:e9:73:
07:2e:c3:5d:3b:14:cb:7d:22:00:8c:a9:45:2c:67:d7:76:0a:
1b:a3:9c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:43:33 2025 by rpki-client