
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier: x9CsoQ4cz08MxTsKHEhbHQo2gSyOeue6YZRciOeHkVo=
Subject key identifier: 49:05:90:85:C9:D0:C8:C0:9F:54:F5:0E:F5:8B:E1:9C:84:38:BA:9A
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 01958CCEB04E8FB2B18EFCE6A463C3506C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number: 0CDA
Signing time: Thu 13 Mar 2025 00:01:50 +0000
Manifest this update: Thu 13 Mar 2025 00:01:50 +0000
Manifest next update: Fri 14 Mar 2025 00:01:50 +0000
Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: RmwDY4hEC8a2iJIeG+jpd4N/dEHXP/xqgJfRwMK1saw=)
2: PmVcb6mc4PNxZC_ptgP_O-XbGLI.roa (hash: pKGXoSvQeFa7SbcSS7sBYIQ1DYaO2+BzF5Gj11hr5Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:b0:4e:8f:b2:b1:8e:fc:e6:a4:63:c3:50:6c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: Mar 13 00:01:50 2025 GMT
Not After : Mar 14 00:01:50 2025 GMT
Subject: CN=49059085c9d0c8c09f54f50ef58be19c8438ba9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bb:24:da:dd:63:55:fd:96:f7:8c:5c:78:38:
73:7a:1e:7f:69:62:ce:30:df:cd:f7:ec:f5:8c:5c:
c1:0a:55:0d:60:83:58:53:ba:7e:98:90:9c:e8:a8:
c2:b5:f8:25:2d:37:68:f8:4e:99:cd:16:69:ea:63:
a3:bb:e2:eb:21:1f:c9:22:39:2f:2e:13:69:ef:68:
62:38:92:6a:60:c5:0a:2c:cb:5c:36:75:ed:ab:eb:
35:7c:2b:f0:20:39:9e:70:bb:e7:27:5b:29:b4:bc:
7c:e5:ac:36:5d:1f:9f:5d:fc:84:07:51:e4:ed:9d:
6b:36:9e:fc:d5:1c:dc:d5:59:3a:12:65:a5:ff:71:
22:87:f8:dc:68:17:89:84:2e:8e:2f:ce:0e:c9:48:
ef:c2:9c:c8:b2:4f:6c:2a:c9:04:39:eb:a9:fc:a9:
52:57:67:3a:7f:68:18:18:19:8b:c9:4e:6d:1f:8f:
1e:37:3f:48:33:98:7f:0e:e0:a6:bb:1f:88:a2:ae:
02:89:9f:34:bb:2c:38:cf:4e:6d:2d:12:a0:60:51:
b0:53:06:ae:3d:34:bd:10:fc:c8:bc:3b:20:60:c4:
87:4f:f1:8d:3c:45:17:b8:6a:f6:bd:bf:19:13:b0:
31:37:64:74:23:52:5b:49:f2:17:20:d9:e7:95:89:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:05:90:85:C9:D0:C8:C0:9F:54:F5:0E:F5:8B:E1:9C:84:38:BA:9A
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:87:55:49:29:bb:3b:fa:cc:45:14:f6:63:77:ed:79:cf:2e:
32:48:ee:48:3b:d1:fc:d5:7b:d0:f7:f3:87:0c:95:5d:ff:96:
cf:91:25:e5:16:7a:7c:e3:d3:36:ea:de:6a:60:6c:8c:75:ff:
27:fe:e4:7f:63:d9:a1:cf:cf:9d:92:b5:fe:c0:fe:a3:88:98:
7d:d3:09:6c:54:2e:a7:a7:bf:6a:8b:31:c1:21:19:81:b1:74:
cd:8e:c0:1a:5e:49:67:c6:09:74:5e:c6:7e:31:7d:4a:3d:b6:
47:42:71:77:c3:37:1c:e8:56:74:30:cb:62:c4:cd:d2:f4:8a:
bb:1c:2e:f9:0a:4b:9d:12:b8:82:e4:51:d4:52:76:9e:86:50:
6f:43:2e:19:53:31:b0:9a:d0:cf:18:6a:d2:37:3d:51:76:4c:
ed:33:af:92:8a:07:85:2b:86:33:fb:e7:a7:3b:61:d2:4c:3e:
e7:7c:43:88:03:39:ab:8b:7a:c7:e6:eb:9e:ac:d2:03:bc:9b:
9d:69:81:b0:df:d4:0c:3c:9c:18:d6:bd:07:d2:3f:d5:2b:fd:
db:88:c1:92:27:fe:c0:44:ac:c8:ba:38:89:ab:f0:65:f6:2e:
8f:b2:23:39:85:2c:f5:b5:46:b4:a4:b4:c5:d2:8f:3c:ec:5a:
15:23:a3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:18 2025 by rpki-client