Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: SfbaWLzzkVcy7aABWPeiJX5vfX85An2rFhXqCHaec7o=
Subject key identifier: DC:CE:FB:E3:F1:90:25:27:8B:A4:05:BF:CC:40:D4:96:BB:3C:DE:CB
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 0196439F32C01690BCFDAC318C7C0D9C642D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 049F
Signing time: Thu 17 Apr 2025 12:00:28 +0000
Manifest this update: Thu 17 Apr 2025 12:00:28 +0000
Manifest next update: Fri 18 Apr 2025 12:00:28 +0000
Files and hashes: 1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: Q95wo5shL0ZWIx04eCchbalpuevFRg1lfhYgfVwjF5w=)
2: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (hash: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:32:c0:16:90:bc:fd:ac:31:8c:7c:0d:9c:64:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Apr 17 12:00:28 2025 GMT
Not After : Apr 18 12:00:28 2025 GMT
Subject: CN=dccefbe3f19025278ba405bfcc40d496bb3cdecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:cc:18:69:2f:62:09:87:b5:76:74:3a:92:
56:11:47:8c:1a:3a:43:f4:b8:25:cb:3b:49:9e:c3:
f4:37:8d:06:5c:c6:3b:aa:38:54:50:e4:e8:45:47:
22:b6:0b:3f:0f:b8:88:58:3f:f9:ef:90:70:58:c8:
96:51:df:84:bb:78:fd:d4:31:61:55:f3:02:e9:a9:
12:7d:e3:18:49:ad:4d:95:34:37:93:60:1c:fd:fc:
c9:12:95:c2:bb:04:8a:73:07:29:02:d3:33:48:c5:
d0:ad:0b:41:5d:1b:8e:50:9c:10:60:26:d9:97:ae:
17:d5:11:e8:ec:63:c9:ba:d6:09:7d:bf:14:8a:1d:
ae:0b:76:43:4d:a0:5e:17:c5:27:f3:69:0d:5b:80:
25:45:5b:32:d2:c7:df:36:9b:e4:64:3c:42:61:11:
e3:69:97:d1:ed:66:21:f5:c4:ae:4a:37:f2:ea:56:
20:f0:78:f1:2c:4b:df:4f:95:bb:15:35:4d:f5:4c:
67:88:d7:b4:96:d2:b8:64:e8:4a:f5:e7:e3:13:78:
25:f7:69:5b:af:17:4c:63:ba:0a:1a:82:be:02:d7:
3e:dc:e7:87:06:c6:32:89:e0:13:0d:ee:1d:ff:87:
ec:fa:f2:6e:bd:79:7a:ba:80:81:f3:44:51:e9:ac:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CE:FB:E3:F1:90:25:27:8B:A4:05:BF:CC:40:D4:96:BB:3C:DE:CB
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:50:37:35:9f:9a:89:32:83:97:19:67:92:3e:9f:73:d7:0d:
f2:01:e8:92:fb:5d:99:7b:08:99:9e:58:ea:50:4b:20:04:d6:
c5:3f:dd:b0:af:6d:96:d9:64:d0:0a:d1:88:3f:ef:3f:1d:c7:
df:5b:fb:39:18:b8:d2:ae:67:6b:31:06:d7:7f:14:b0:2f:52:
a9:dc:fc:fa:b9:38:a5:15:00:eb:54:7d:fe:5b:57:ff:b9:3d:
b3:24:e3:cb:ec:bd:fa:d0:53:48:ec:2f:56:0e:79:28:6c:87:
ef:8c:b9:d2:6b:fb:d7:17:99:7a:06:5c:d0:9d:74:1f:16:46:
66:cb:1d:cc:f3:e4:03:26:6e:53:3a:de:d2:70:c3:5d:47:68:
ba:79:6f:a7:5d:db:84:e9:c0:bf:0f:83:18:d1:a8:0d:48:3c:
57:10:b8:9d:f9:09:57:a4:c8:a9:b3:56:64:15:ab:88:30:cb:
00:66:7e:82:95:78:d2:0a:f3:bb:b8:fd:84:47:d8:a6:ba:0b:
7e:12:60:32:3d:4b:f5:95:d7:0b:5f:0b:e0:b7:61:99:e5:c6:
9e:4f:2e:22:00:b5:7c:80:33:25:e8:c1:aa:a1:96:25:08:bb:
70:cc:82:d1:1b:6f:f3:c9:89:e8:06:c1:7d:ea:2a:16:3b:64:
5b:f3:2f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:24:36 2025 by rpki-client