Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier: CyHqCLU/MEZ6VtCogpz/be57xH4nJFVPXVEQ9ZBiKQ8=
Subject key identifier: CA:35:25:BA:F5:F4:5D:7C:B4:50:FA:9A:C7:5B:C1:AB:DE:6B:39:A9
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial: 01963C1D9E0617BE9C3D4C2272E73F1D2146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number: 0E56
Signing time: Wed 16 Apr 2025 01:01:36 +0000
Manifest this update: Wed 16 Apr 2025 01:01:36 +0000
Manifest next update: Thu 17 Apr 2025 01:01:36 +0000
Files and hashes: 1: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: volsogjBMsNON1q/nz3vnRhdB77dnY4jxFWk4nEJed8=)
2: j7uIJiPhcZxIrIipfuK1rqo935Y.roa (hash: 7J2YXXzcaOGsarNoeRvp5q8jGItI0Hy8Dxn5tPP/JpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1d:9e:06:17:be:9c:3d:4c:22:72:e7:3f:1d:21:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Validity
Not Before: Apr 16 01:01:36 2025 GMT
Not After : Apr 17 01:01:36 2025 GMT
Subject: CN=ca3525baf5f45d7cb450fa9ac75bc1abde6b39a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:61:80:a9:35:62:38:a2:8e:ad:8a:51:9c:0f:
d5:5b:6d:50:13:53:19:f1:10:85:3d:e9:13:e3:76:
d0:b7:a2:76:03:0f:1f:7b:3b:a4:e1:57:27:ed:44:
bd:a5:9a:a7:b3:e7:73:0a:7c:9f:dd:40:44:79:dd:
59:05:5d:94:fa:1d:40:7f:e8:11:e8:d2:1e:3c:7e:
a6:7d:5d:bc:5f:40:c8:24:b9:d0:dd:e8:99:73:f9:
f7:bf:1d:48:ed:ec:10:4f:a9:c9:40:6f:09:2b:9a:
59:df:2e:41:a3:fe:5a:d4:34:6f:f5:5b:26:66:2b:
9e:47:79:08:70:90:64:52:92:a0:98:11:03:47:fb:
82:8a:77:56:08:88:57:06:74:15:2e:c9:b0:13:77:
fb:b2:88:c1:dd:fe:ca:e2:74:44:3a:1b:38:fa:70:
e7:34:16:54:81:47:ff:7a:09:6e:0c:92:48:74:db:
56:cf:cf:ca:b8:3f:1d:1d:83:39:b5:88:43:d3:6c:
a6:9f:27:b4:7d:ae:4a:17:d4:5d:91:48:a0:5d:ad:
68:99:9d:ed:a7:e4:df:e2:2c:52:a5:60:72:60:c6:
c6:f8:a3:da:47:73:4a:7d:0e:cd:2e:a7:a2:e1:b1:
0e:87:11:21:65:60:05:a0:25:50:5b:e5:11:ec:c4:
73:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:35:25:BA:F5:F4:5D:7C:B4:50:FA:9A:C7:5B:C1:AB:DE:6B:39:A9
X509v3 Authority Key Identifier:
keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c8:ae:dd:ab:87:2a:22:cb:23:b4:24:d9:4b:62:c8:72:0e:
3d:8e:61:11:e2:ee:f1:fa:8a:35:b4:17:6c:86:d1:64:61:f9:
56:48:1b:85:0b:6c:48:36:dd:f5:dc:51:d8:f7:c2:e1:ab:10:
3f:ea:b1:f0:65:e2:93:fd:65:80:b4:bc:dc:b5:8e:ed:14:02:
4e:ee:95:ce:39:e1:3d:4d:7d:8c:da:c1:3a:03:41:ef:8b:20:
2f:d2:b3:45:fd:b4:f6:f3:aa:31:b0:2f:e5:c9:14:21:ff:d4:
3a:c8:3e:e5:ea:a0:38:8e:73:15:ab:1d:17:3d:bc:33:3a:76:
45:96:ed:a8:4a:34:ad:32:38:91:b4:5e:7a:8d:63:05:57:33:
7f:d2:33:ec:7d:ec:e1:0b:da:35:3a:b3:84:23:f1:92:dc:0d:
05:e0:68:ed:b6:d9:e8:47:4b:2a:b8:f7:a9:21:1b:f9:23:82:
78:29:f2:a6:1c:aa:be:d0:f3:1b:97:26:e6:8a:e7:e8:70:35:
4c:2d:f2:11:7d:bb:70:23:e1:c4:ce:86:b7:32:5c:12:fa:90:
80:87:70:11:fc:0e:49:94:bc:c5:a5:dc:25:aa:d2:d3:b9:a5:
70:40:2b:f0:1e:6a:05:79:63:5e:8b:07:eb:b9:28:15:92:a4:
a3:07:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:17:47 2025 by rpki-client