Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: WKkbuls19unsA4eYTNQ26WXxlUkdboTnRjMfaTcn7eY=
Subject key identifier: F3:A7:32:ED:42:32:75:8E:37:49:AA:D2:E4:60:FF:98:85:EC:5D:38
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 01974A7B1BF580A2F4915CE4C3A243BF45BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 13:01:11 +0000
Manifest this update: Sat 07 Jun 2025 13:01:11 +0000
Manifest next update: Sun 08 Jun 2025 13:01:11 +0000
Files and hashes: 1: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: s88aHyT12Z9mqlLWnJjPs8guh9LcOEt8GCM2SjsbbRw=)
2: VMysSyLNDVGWd0vcTeYPwlMA5rc.roa (hash: 6+DEgCnpiKyTQCIOlcuNMISjTH2qj/1LJFyn3yXus8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:1b:f5:80:a2:f4:91:5c:e4:c3:a2:43:bf:45:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Jun 7 13:01:11 2025 GMT
Not After : Jun 8 13:01:11 2025 GMT
Subject: CN=f3a732ed4232758e3749aad2e460ff9885ec5d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:38:0f:b5:3a:03:32:34:7b:27:0a:b7:d6:
c3:6f:e6:00:6e:c0:7f:db:dc:79:bc:5e:7a:8a:d0:
a6:fe:a6:0a:db:58:0e:25:b5:3d:60:da:db:03:b4:
98:e2:47:d0:57:c6:50:e8:24:1e:c1:a5:61:8c:a1:
1b:94:e0:17:b5:32:44:18:03:a6:90:42:9d:16:1c:
48:ca:c9:c4:71:f8:23:51:f8:e8:d4:bf:6b:9d:b6:
1b:71:66:a4:8a:d8:ee:fe:18:44:c9:f8:e3:a5:ee:
1b:52:37:19:d0:c7:88:b6:8c:25:87:d1:69:0f:a6:
02:89:84:25:77:da:1c:80:ad:c8:b1:39:ba:93:08:
de:d4:cf:33:d1:35:ae:99:c0:ec:5d:43:9e:c4:c1:
f9:e5:24:87:9e:3c:b7:8f:4a:e7:49:ea:c1:40:fa:
7d:e6:c2:98:88:88:31:87:e9:61:04:36:ea:e4:6e:
eb:3f:6a:1b:67:25:91:1b:85:5a:c7:98:0e:94:6e:
7b:35:36:c8:73:2e:14:b5:54:02:07:50:ab:40:42:
7c:97:ac:31:a8:ed:ee:99:54:9e:5e:85:a2:a5:e0:
78:e5:48:3a:5f:29:8c:18:3c:8b:f1:30:9b:e4:07:
14:68:a2:d6:03:27:05:01:15:39:af:a8:16:aa:31:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A7:32:ED:42:32:75:8E:37:49:AA:D2:E4:60:FF:98:85:EC:5D:38
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:66:3c:28:f9:33:64:29:e9:a7:61:6f:ee:d1:6f:23:35:0e:
c3:ef:85:9f:b1:81:78:b0:0e:0a:83:27:b4:83:f5:40:0b:1a:
2e:4e:8e:59:d5:1e:71:2a:53:1b:e0:b4:a3:3c:a5:ad:30:75:
20:df:0e:a9:0c:b4:da:44:83:62:4f:b8:42:7b:ad:67:54:52:
1a:d3:c9:c4:a6:fd:07:95:64:89:59:7e:79:7b:1d:3a:56:a4:
36:d8:73:42:f5:ae:df:aa:87:ce:e0:75:b8:f0:50:9d:43:58:
d0:2d:b3:7a:df:85:6c:0f:ae:84:24:bc:9f:48:f4:d7:3c:73:
00:81:40:5a:c4:6e:56:86:25:b1:d2:32:34:1b:35:2a:ab:c3:
19:37:58:4c:52:67:c5:14:e5:a9:d3:60:3b:f8:00:2c:c8:8c:
bb:7c:95:0d:10:78:a0:4f:a8:84:a5:6f:11:9b:3b:80:04:fb:
67:72:4a:c2:6e:52:74:24:22:74:77:05:fe:52:8c:ed:0d:a6:
94:e2:dd:27:96:cf:66:9f:51:2b:20:1c:1d:10:38:be:ba:d5:
95:f3:6d:e5:2c:fe:09:8e:d2:1a:4e:a8:ed:dd:b5:75:0c:63:
13:48:23:61:c7:ee:df:81:27:aa:97:e4:e2:79:d3:37:f2:6b:
bb:10:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:29:56 2025 by rpki-client