Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
File: NW4BARgaykJR6fJKj2NzXi9evc0.mft (raw, json)
Hash identifier: QjQl9RGaMFXQ860sDDvMZJ7sEctYgUU3DsacZPT9mG0=
Subject key identifier: BA:30:0A:2C:48:49:70:B5:74:DD:FD:9A:C1:D8:EB:7A:DF:85:1F:C8
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Certificate issuer: /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial: 01963FF9E1D08E1F209CFDFA7F6EC1E2D957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
Manifest number: 0200
Signing time: Wed 16 Apr 2025 19:01:02 +0000
Manifest this update: Wed 16 Apr 2025 19:01:02 +0000
Manifest next update: Thu 17 Apr 2025 19:01:02 +0000
Files and hashes: 1: NW4BARgaykJR6fJKj2NzXi9evc0.crl (hash: BUPidXq7qjBMtSZBXCnAT4UFMs5CKlk/YVDThcCJ3zw=)
2: dEoQSu71Ws9XnNjOfEdbibTdInI.roa (hash: sYA0jY+C8zad7z34ckQV3VzC0yGLwcHRH79SGfsU6zY=)
3: y-NIwscX11p02xnh21oGE_zmYCI.roa (hash: +Y0OYgxDa6WhuGqqRO+OXeS1WkoYTiwyapeS/DlTCTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:e1:d0:8e:1f:20:9c:fd:fa:7f:6e:c1:e2:d9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Validity
Not Before: Apr 16 19:01:02 2025 GMT
Not After : Apr 17 19:01:02 2025 GMT
Subject: CN=ba300a2c484970b574ddfd9ac1d8eb7adf851fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:cf:d5:20:38:c9:ae:14:30:b9:69:2a:42:
d6:b9:8d:b6:56:a4:c7:74:c9:1e:ae:ae:da:59:32:
45:50:d1:60:f0:fb:51:90:73:43:6b:64:bb:e0:15:
07:64:58:f9:51:50:53:c8:99:b6:06:61:48:ed:0d:
e3:26:71:eb:e4:c1:8a:05:91:8a:13:c0:55:df:67:
0d:2f:5e:ca:29:c0:07:32:ae:d1:fc:a7:c2:55:e3:
ef:ec:1f:63:9f:bf:1c:72:c2:ad:08:82:0d:ae:ee:
61:ec:11:ce:ae:ab:a3:92:d0:3b:5e:3e:e8:dc:07:
e4:d4:48:68:60:ab:c3:5a:2f:ff:f1:07:37:74:2f:
71:df:52:4e:b5:38:55:1b:97:d3:29:6e:d5:37:ae:
3d:0f:cd:c5:f6:ec:4d:cf:4e:73:2d:e0:42:bc:2c:
48:a5:ba:51:0b:d1:f1:81:cc:b7:17:af:6b:bb:be:
6b:18:2b:1b:48:89:a2:46:ff:b7:90:46:84:f8:e5:
2f:f2:fd:c1:c8:b3:3d:d6:89:31:b1:ef:0b:e3:28:
28:c1:77:9e:db:b5:23:33:00:72:d2:45:02:c5:fb:
d0:4f:48:9c:b1:36:97:31:21:ea:16:21:61:ca:1e:
f5:69:81:e0:0f:76:5e:4a:d6:f3:e1:f0:58:81:ad:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:30:0A:2C:48:49:70:B5:74:DD:FD:9A:C1:D8:EB:7A:DF:85:1F:C8
X509v3 Authority Key Identifier:
keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ac:25:ca:e2:f6:c8:06:44:24:6d:f8:f3:cd:17:07:f0:9b:
63:3c:1c:83:1d:d6:2c:84:9b:0e:72:40:4a:6d:44:89:f9:da:
7e:c5:0e:4b:78:76:d8:2d:5b:e9:7d:12:c3:ed:ce:c4:3f:c0:
5f:0b:bc:d5:6f:62:ea:1e:33:29:fd:5e:fa:bf:d7:de:f9:95:
75:f8:cc:75:54:c5:5d:bc:f9:8d:ff:f9:df:4c:0c:51:dc:09:
fb:55:e2:9b:9d:c6:60:b5:63:5a:b0:06:34:25:7e:1e:7f:2f:
b1:5e:c9:42:93:55:55:b7:d9:27:da:9a:a9:7b:4e:47:4b:89:
27:6d:6b:d3:81:4e:14:d3:91:9f:c6:b8:7f:4a:f0:75:34:8e:
95:94:46:5d:ae:51:27:73:21:7b:d4:ae:dc:2b:7a:7f:2e:bb:
07:07:29:93:3f:ee:61:82:c1:b9:9c:20:e6:1c:0f:44:cc:3b:
0b:60:5c:ec:a6:15:be:2f:a2:f6:39:64:00:7a:47:b2:0d:e1:
a2:a6:94:0e:31:01:1d:80:e1:94:57:59:9a:02:20:bc:fe:27:
90:68:2b:d3:9c:7f:37:14:50:ee:61:94:5a:24:fe:8b:98:24:
25:a9:20:31:5a:58:b5:03:0b:fc:f4:e5:0e:64:28:fc:c4:12:
e0:48:89:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:01:32 2025 by rpki-client