Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json)
Hash identifier: lZgLQ8oEFDZmYOz6yVdRGzSc34K7+crBSTWTq1qUP4o=
Subject key identifier: 6E:43:31:C7:6E:63:5C:80:72:E1:64:A9:E4:DA:AC:8C:D1:57:F3:52
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial: 01964CA261324D14BAD179FF1CE4584E3E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 06:00:32 +0000
Manifest this update: Sat 19 Apr 2025 06:00:32 +0000
Manifest next update: Sun 20 Apr 2025 06:00:32 +0000
Files and hashes: 1: 3u_UTWM5MnsnNlqUobIqKDYLwKo.roa (hash: veRRLy9ZMKOvJkYp1WIUbOdpjqnYEIFrYe5fkHyfQnc=)
2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: l4y2HPGPVUEKSQAQhKfRLVKerFZfm/mJbWnQbn7x9pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:61:32:4d:14:ba:d1:79:ff:1c:e4:58:4e:3e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Validity
Not Before: Apr 19 06:00:32 2025 GMT
Not After : Apr 20 06:00:32 2025 GMT
Subject: CN=6e4331c76e635c8072e164a9e4daac8cd157f352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:c5:77:06:37:53:df:7b:a6:31:0d:1d:3a:
ec:52:b2:d6:df:0c:70:80:6f:e3:73:47:bc:27:c6:
cb:5b:bb:0d:68:70:b5:eb:11:34:ab:8b:dc:81:55:
93:17:07:96:e5:fa:d4:2f:37:c3:73:50:9e:a1:ed:
0f:a7:5b:56:6d:ba:91:a9:4c:04:a8:37:23:e3:66:
e6:f5:63:44:7e:9b:45:5b:b7:6a:d7:f8:0b:9d:01:
d5:4f:da:6b:c2:f5:4d:d0:b3:33:31:20:68:15:8e:
7f:7b:6f:9c:97:f0:78:e8:cb:33:c7:8b:85:c2:3b:
3f:c6:c8:7f:83:a3:ba:c7:cf:d7:e8:bb:07:67:b8:
b9:6f:1e:8e:c5:1f:41:d4:5d:63:81:26:ae:f8:b6:
ab:35:01:4e:3b:e2:c8:f3:d7:3b:80:f0:bd:ca:1c:
df:f4:9f:e7:d1:82:af:c3:1a:fe:a3:d4:47:d1:e9:
8c:d7:0f:a5:62:3e:62:3b:81:33:05:f7:b8:be:05:
d7:c3:d1:6f:da:9c:32:7a:90:00:b2:58:96:91:d3:
e1:68:de:bf:a4:f2:a0:64:8b:98:2b:e9:c7:3d:e9:
8b:de:0c:33:b0:56:bc:16:f9:8f:fb:f3:29:f7:af:
cd:9e:15:36:f4:32:9b:69:22:69:f9:53:72:5a:3f:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:43:31:C7:6E:63:5C:80:72:E1:64:A9:E4:DA:AC:8C:D1:57:F3:52
X509v3 Authority Key Identifier:
keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d6:49:e8:ab:52:9f:ea:78:50:b7:a4:26:ac:4d:c4:29:00:
71:72:90:cc:17:a5:1b:8b:32:ce:0a:cb:bb:d0:45:fa:81:81:
34:ec:fd:6b:95:f6:56:6c:76:f8:a7:58:bf:f6:3e:f8:f6:41:
87:08:43:3d:c2:83:7e:41:4a:94:c2:b4:91:d8:56:79:fb:65:
9c:82:d1:15:39:54:45:60:0e:f7:c7:ea:8b:34:97:86:24:12:
e8:7f:c9:29:53:3b:17:ce:84:1f:9c:f3:f1:12:64:96:4a:67:
14:18:80:d8:3e:fc:0e:39:d7:c1:bc:1d:20:d9:f4:ec:28:a8:
0b:65:ce:77:e0:0a:f6:8e:4e:26:15:7b:f9:71:8e:04:9b:cb:
a1:62:e9:d3:ef:72:a9:4f:5f:ff:97:ca:67:1d:7a:af:9e:95:
50:c3:af:6e:0e:1d:24:58:c5:57:41:c6:00:94:29:64:10:1c:
86:c7:c4:9f:5f:b3:e6:80:ad:67:36:b7:76:70:f4:55:9f:80:
16:a7:3a:65:bc:1f:fe:35:23:d2:d6:34:10:f7:49:bb:8a:95:
04:0d:0b:90:bc:e0:c1:a8:36:fe:b0:9a:0c:91:64:65:f6:92:
c5:9a:86:ec:dd:e8:09:22:40:f8:23:93:77:fa:b0:98:2d:d9:
d5:04:75:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:57:10 2025 by rpki-client