Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: PGPR8/nsPH6Y3kHTv59nFumsdJ4lDR2uiKs1H2QhFdc=
Subject key identifier: F4:07:D5:3D:F2:28:10:C7:9D:A6:40:97:F9:F0:3C:74:24:0A:FF:F7
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 019657944A58B9EFCCAC9B8C5F27202EF768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 09:00:58 +0000
Manifest this update: Mon 21 Apr 2025 09:00:58 +0000
Manifest next update: Tue 22 Apr 2025 09:00:58 +0000
Files and hashes: 1: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (hash: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=)
2: Cefp2MinUNICkZh50zBZ0en6wPE.roa (hash: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=)
3: IUaglXMoCfWHYoEHDvfMOLW0gCo.roa (hash: SIDwg/N1xEcZG6CVXI1MxQJ23X7MPqohUnh5tpikeYs=)
4: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: g7dMradghFvtSBMFdKnPsDA8m9HbqrcDwa1MdnQdSF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:4a:58:b9:ef:cc:ac:9b:8c:5f:27:20:2e:f7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Apr 21 09:00:58 2025 GMT
Not After : Apr 22 09:00:58 2025 GMT
Subject: CN=f407d53df22810c79da64097f9f03c74240afff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:6d:d0:b9:89:bf:a0:ea:45:2e:09:d0:09:
07:3c:6b:f9:be:f6:a7:8d:10:f5:e1:c8:0b:e5:1b:
0c:83:c9:b0:47:9b:1c:f8:5b:e8:a3:39:7d:a2:ba:
6e:e3:92:77:c6:87:0c:d0:14:21:0c:3e:8d:e8:da:
a0:36:78:6e:7e:c6:59:d7:89:f1:40:84:e1:51:d0:
81:73:4c:0e:f8:87:fc:5c:3a:fb:a7:76:86:de:78:
cf:c9:27:67:2a:d6:c7:98:43:7e:0e:60:14:d3:68:
c9:9d:46:e5:7d:85:8a:3a:84:00:03:ae:7f:2e:9b:
96:03:75:70:b9:7c:d3:a9:04:64:58:b6:66:02:e8:
54:f3:89:16:ec:0c:9c:c0:92:22:6f:1e:3f:41:d9:
ae:dd:64:06:8e:93:d4:05:a3:e4:ef:4b:58:79:08:
b1:84:10:ff:9a:87:28:b1:fb:c6:d6:93:37:ac:25:
02:9e:41:01:00:ea:fa:7c:c1:d5:cf:b7:46:d4:ab:
d9:eb:2d:ac:ab:b2:06:63:38:f5:68:fc:7e:a3:b3:
8a:de:0d:e3:d4:60:61:59:5d:68:3c:94:81:f6:30:
75:af:74:fa:1f:bf:79:99:8b:51:8d:55:64:6c:47:
e3:0a:ba:25:3f:cb:01:b2:58:13:3d:d2:3f:73:93:
ee:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:07:D5:3D:F2:28:10:C7:9D:A6:40:97:F9:F0:3C:74:24:0A:FF:F7
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c6:53:cd:89:ba:d5:7d:1f:70:79:8e:de:f2:2a:d6:63:ad:
95:2c:1b:05:dc:7e:71:29:3b:db:69:af:1f:0f:35:9d:8f:ad:
c0:34:20:97:ae:71:4a:06:25:9e:21:36:29:3d:18:33:35:d5:
19:cf:8f:a4:ec:8c:68:a8:c4:d7:21:c1:95:0c:40:73:33:90:
8c:53:9e:db:85:d5:c9:2b:c3:bf:ac:b4:e4:31:2d:35:7e:6b:
88:50:93:93:3e:06:64:5c:ad:0f:71:8e:1a:58:d8:62:78:66:
54:80:33:6e:d0:3f:d2:24:d0:68:79:b3:ae:bf:4f:b8:d1:71:
ac:d3:fe:ca:4a:8e:41:0f:93:5c:ff:6f:e1:79:ee:1c:af:f6:
42:1f:d0:a5:a9:a6:04:7d:bf:59:4a:87:bc:8b:1a:6c:db:46:
e4:6b:d9:33:44:4b:bd:58:0f:f7:5f:64:63:76:8f:7c:83:7d:
5c:8f:9b:96:74:69:e4:02:e3:be:d8:61:83:a5:3d:11:0c:e6:
ff:a4:e6:2d:f2:c1:ad:a1:10:76:3b:18:29:34:bf:8b:a8:28:
b6:d2:b6:81:53:72:eb:ac:98:fb:79:21:34:a1:60:da:b5:78:
54:3f:97:32:b3:63:9f:ed:ad:a4:17:6a:0c:d3:88:4f:18:cd:
12:29:8d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:58 2025 by rpki-client