Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier: pLUGquSXE+1LtlU1TJ9//Uv+tnjJKnnfv5K6ipiWea0=
Subject key identifier: 6C:BC:D4:83:3B:08:B8:40:D9:FC:D4:01:79:F9:2B:7F:55:39:3B:EC
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 01963651ECC16AC76251CBA2F2CA592A96DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number: 1215
Signing time: Mon 14 Apr 2025 22:01:00 +0000
Manifest this update: Mon 14 Apr 2025 22:01:00 +0000
Manifest next update: Tue 15 Apr 2025 22:01:00 +0000
Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: mypaJD27o1c8upIisRobESZotbalBoRU6F301mEz5Ic=)
2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:51:ec:c1:6a:c7:62:51:cb:a2:f2:ca:59:2a:96:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: Apr 14 22:01:00 2025 GMT
Not After : Apr 15 22:01:00 2025 GMT
Subject: CN=6cbcd4833b08b840d9fcd40179f92b7f55393bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:da:c8:8d:ee:e2:30:37:e5:b4:7a:d2:7c:
b2:82:71:98:2c:be:9f:86:1f:d2:bb:10:4b:51:d9:
af:ab:23:d6:b6:8f:5a:28:49:38:06:11:7e:e7:4a:
54:21:13:5e:2e:88:66:16:a0:f2:9e:21:b7:f5:d6:
ee:a5:8a:e0:bd:73:81:1d:00:c6:72:f3:24:cd:10:
52:64:56:d0:85:63:98:e8:e8:85:8b:c2:46:bb:e1:
dd:1b:1c:2a:ad:83:2b:c9:66:73:52:51:97:5a:62:
79:b8:5c:ba:47:78:b7:0b:48:29:89:b9:fe:26:e0:
7d:d5:2b:7a:da:d3:64:61:5d:6d:bd:b0:04:cb:61:
c7:df:82:07:5d:bf:57:19:09:a5:b0:c3:4c:e4:39:
df:9f:91:69:69:ca:62:38:4b:0a:c1:50:30:4c:12:
49:da:58:2f:33:8e:6c:22:6c:70:aa:fc:f1:09:f8:
2c:a2:9b:82:ec:fa:d0:a6:44:8e:7c:f4:67:dc:9e:
7d:8d:69:cd:1a:85:a3:ba:c2:5a:06:ac:b6:44:ab:
70:e0:02:ed:52:73:5a:39:f1:b1:b7:ac:0d:31:a4:
80:5f:fd:2e:5c:34:10:dc:07:be:6c:51:46:fd:3c:
8f:70:4f:7c:f1:e5:ed:c2:79:05:8f:a2:67:ee:5a:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:D4:83:3B:08:B8:40:D9:FC:D4:01:79:F9:2B:7F:55:39:3B:EC
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dc:0d:63:ad:33:9e:1b:2c:27:40:78:d2:a9:e4:73:37:9f:
9a:dd:b3:e5:1a:90:12:b3:09:2b:2b:2a:4d:9f:04:0e:dd:fd:
40:54:cc:71:e3:6e:bf:18:45:23:4e:45:f8:92:8b:7f:8f:de:
7c:e7:5e:90:ea:51:57:ef:90:6b:15:c8:75:f4:f0:60:12:f5:
9c:f9:f8:d7:ac:8d:58:7a:4a:f7:6f:fc:02:46:a1:2d:3e:1b:
a8:76:a8:6f:b1:90:99:93:6e:90:da:31:19:c1:09:63:9d:0e:
b7:5a:f2:df:e8:81:e4:6c:9b:b2:d4:49:fc:97:89:ec:ee:ca:
6a:90:6e:09:2b:57:64:0a:92:59:8e:91:ce:ae:be:92:46:ba:
fd:62:07:ba:3d:64:9e:98:f8:2a:d1:82:f0:61:18:e1:df:4e:
41:cd:0f:b4:87:86:b4:3a:e2:39:a1:03:97:46:24:fd:1b:d4:
e7:b6:11:89:8d:b2:1d:b9:ff:7e:09:43:de:19:2f:b7:e6:be:
e4:dc:a6:0e:20:0b:17:4f:f2:5e:24:77:d9:9e:d8:5b:5e:2d:
a4:4c:f4:35:12:2e:5b:c2:42:78:d1:6a:10:d9:eb:00:e7:fc:
fa:f7:8f:e4:77:3a:e9:11:00:2a:91:77:1b:6e:6e:8e:24:e4:
12:4d:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:21:42 2025 by rpki-client