Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
File: NsxJTEqTS7s89Gulgk1mZsiUei8.mft (raw, json)
Hash identifier: FD4xlxo6/mE7J2Q/4xp14DalaHO3l0cgpTtXKo8fFZM=
Subject key identifier: DA:E8:85:B0:2A:AE:C8:8F:D7:DE:61:40:CB:B4:E4:D6:D1:82:BB:41
Authority key identifier: 36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
Certificate issuer: /CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Certificate serial: 019644B20205C24D18052517A33955C06FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
Manifest number: 04B3
Signing time: Thu 17 Apr 2025 17:00:38 +0000
Manifest this update: Thu 17 Apr 2025 17:00:38 +0000
Manifest next update: Fri 18 Apr 2025 17:00:38 +0000
Files and hashes: 1: NsxJTEqTS7s89Gulgk1mZsiUei8.crl (hash: idUQJ++3p8wcBqW6qnwlxwrGH+Nst7A+SXrgLSBrgk0=)
2: StdZuEMdBW7X4NXLCF7XI4ppVlw.roa (hash: iq6H8WyI/GcnhvxxJGW8O2+6IQ6zatbRbbXOnldRxIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:02:05:c2:4d:18:05:25:17:a3:39:55:c0:6f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Validity
Not Before: Apr 17 17:00:38 2025 GMT
Not After : Apr 18 17:00:38 2025 GMT
Subject: CN=dae885b02aaec88fd7de6140cbb4e4d6d182bb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:a0:32:73:2a:4b:db:ae:80:9a:ce:11:11:
cb:81:75:db:b5:34:fe:e3:53:a2:8c:31:4a:e3:be:
ab:e4:94:78:e8:4e:33:32:63:b1:b9:4b:8c:ba:bf:
9e:9e:3b:09:ea:c6:33:b5:ab:8b:1c:6b:0d:f6:fe:
52:66:13:b1:a8:5c:3a:32:15:85:83:39:34:72:2a:
4b:6a:e3:18:2c:c6:0f:1c:66:f1:e3:e4:83:99:cf:
c1:ae:6f:e0:2c:08:cf:33:e9:41:9e:fc:7e:36:a5:
8c:2d:85:6e:0f:5b:21:d8:b8:88:c0:d3:aa:7c:36:
cb:86:08:66:d3:d1:9a:1e:cb:67:ce:08:20:3e:ee:
9a:c8:56:82:d7:73:93:a8:e4:56:83:d0:9f:8f:d0:
f1:ee:3c:99:9e:2d:3a:02:2b:0c:16:64:90:2e:b5:
6b:f2:d1:c2:d2:98:57:b7:2b:45:fd:5d:ae:06:97:
8d:6f:75:19:22:2d:af:14:10:23:de:a3:e9:6f:e0:
ba:a0:0f:a5:a6:da:42:32:8f:2d:f1:4e:d3:92:5f:
e8:24:3f:e5:e5:28:aa:4d:50:2b:2b:00:95:6b:3e:
18:a5:19:5e:70:ea:09:7f:2e:0b:93:0f:45:04:fe:
bc:52:02:5a:79:6a:e6:7f:57:d6:00:72:51:0d:ef:
31:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E8:85:B0:2A:AE:C8:8F:D7:DE:61:40:CB:B4:E4:D6:D1:82:BB:41
X509v3 Authority Key Identifier:
keyid:36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:57:4d:ff:f5:7a:41:f7:e1:66:a0:74:01:b7:99:58:60:97:
f1:39:3b:c9:f4:20:81:5a:d7:3a:e1:fe:bc:68:bc:f1:4f:01:
0c:00:11:83:a3:22:a9:cc:59:1e:52:c5:59:9b:cc:48:aa:0e:
92:f3:73:c5:38:da:dc:5b:a0:6e:87:27:b4:45:08:e8:0d:82:
ad:e0:66:28:9e:62:6f:26:ce:ca:ee:9c:86:cb:d3:9f:ca:66:
0c:98:bb:47:99:89:dd:cf:6b:25:8b:1a:0c:7a:a5:86:e2:86:
ca:93:a0:f6:7b:75:2b:69:2c:1e:0a:bd:a5:b2:8e:89:26:bd:
53:75:02:17:b0:66:59:a6:9d:3a:6b:fb:86:cd:e0:b8:6f:9d:
8e:8e:bc:0c:69:59:02:80:b8:51:ca:d1:4d:b0:a7:3c:0b:17:
51:85:bf:f2:48:c5:63:75:e7:aa:d5:e0:70:a4:07:60:47:d4:
3b:44:41:c2:3c:79:54:7c:ae:6b:44:83:88:3e:b4:ae:cf:34:
f8:5e:b0:65:48:e3:5b:81:21:24:86:c7:e3:08:89:0d:d1:68:
72:8a:be:71:e9:dd:32:f4:59:48:65:f4:c5:83:59:94:ce:d7:
4c:5a:a6:e4:7a:e8:30:8e:56:ba:85:ca:f9:c8:84:f7:78:bb:
2f:70:82:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:03:51 2025 by rpki-client