Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: 6VFxHkQbaYU6nRn/O5Zp1gHyFfznwH1l9trYA90nnwo=
Subject key identifier: 07:FA:C8:8E:34:E9:58:EE:26:2A:CE:8C:74:39:41:93:7F:63:5C:9B
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 0196041C7BCCF8F2CC281E244F68D18AACF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 14F7
Signing time: Sat 05 Apr 2025 04:01:37 +0000
Manifest this update: Sat 05 Apr 2025 04:01:37 +0000
Manifest next update: Sun 06 Apr 2025 04:01:37 +0000
Files and hashes: 1: 1-ULf-aQJ3fC-9_w7BYQULZHTnNw.roa (hash: A5jmxQDIS4oGLvhKUV0INjhfzuBh6+1jpId+3WjZlWc=)
2: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (hash: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=)
3: 6Jm2eoj9ZSHN-oOUb9pQlIZSyeM.roa (hash: g919cnEgUex9Vq6Cq0vNxzfmvBW8lAFZJ89+7u0kuuo=)
4: LfROe2I71eG6M7Z-gNeANYWPFpE.roa (hash: jYCJfZL3yCQ4hYWioDRR7adhtNmlY65zHqG2PPbV/Qo=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: wLQJogfC1HfWx6lcXU5VQ2+AWfJeqEPlX7nuxtwq8sw=)
6: WB5IR-rncEh5erhRHuCyer1roLg.roa (hash: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=)
7: dkDLfL12Mvt9oOTN814F8r3xyp4.roa (hash: Bf4qm+dtST2tX+x1TcvddLF9nRprjThyue/B71J9XDM=)
8: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (hash: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:1c:7b:cc:f8:f2:cc:28:1e:24:4f:68:d1:8a:ac:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Apr 5 04:01:37 2025 GMT
Not After : Apr 6 04:01:37 2025 GMT
Subject: CN=07fac88e34e958ee262ace8c743941937f635c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2d:50:2e:e2:91:8f:31:5d:43:70:36:2c:6a:
f3:c3:87:29:64:af:f5:1e:d5:ac:fe:c6:a9:9d:f7:
49:95:d9:cb:b1:3d:66:13:67:85:2a:a9:ff:b1:5f:
ed:fc:5b:d9:6a:b0:17:94:24:53:a5:ce:d4:63:d1:
94:62:db:70:5b:e9:39:99:3c:08:f7:59:61:62:40:
06:22:59:90:ab:86:ff:34:f8:89:3d:b3:83:04:69:
78:21:c3:25:b2:4b:e2:0e:01:9e:08:0c:52:13:c4:
6f:c6:2a:2c:d1:0e:4a:6e:93:63:0f:45:5b:52:2a:
ba:66:f0:ac:e2:cb:94:4c:53:60:c3:23:1e:12:7c:
24:5b:62:ae:d2:4a:27:da:24:c6:1e:5d:6b:c2:a9:
59:55:1e:54:04:59:33:5d:9e:14:92:fc:94:15:ec:
92:e5:87:1d:63:1b:ac:73:35:ef:44:6b:d0:5e:0f:
02:b9:51:f9:23:b9:eb:0e:62:15:2c:65:87:62:36:
34:df:01:12:36:cb:6c:50:db:a4:3a:ce:ac:4a:4a:
84:ff:02:62:43:ff:1c:b6:6a:74:e2:a3:64:7e:ad:
09:51:10:aa:f1:e9:0a:c6:89:4c:9a:95:0b:b6:80:
c4:42:a3:48:fe:03:0d:42:bb:2c:e4:7c:37:b4:5d:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FA:C8:8E:34:E9:58:EE:26:2A:CE:8C:74:39:41:93:7F:63:5C:9B
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:31:ae:94:e3:38:00:87:58:26:4a:e7:a7:81:ae:4b:0e:0d:
13:55:db:d1:9c:77:43:c1:3d:67:ea:c5:94:5b:27:71:cb:d9:
62:d5:a4:1c:7a:6f:11:ee:4e:77:9b:22:96:5c:1e:3f:21:92:
bd:a3:be:ac:9c:c8:b5:c0:99:8b:e0:46:73:07:1e:7f:c2:a6:
3c:14:d3:a4:a4:a6:3e:53:84:f5:51:1a:8d:0a:ba:61:4a:ba:
79:4f:b7:fe:0b:1d:7b:07:b8:46:c1:52:79:28:34:af:6f:c4:
8a:f6:f9:66:c4:2e:53:9b:a6:ff:6b:df:72:76:bb:77:88:8e:
34:09:4a:48:ab:3a:69:34:50:b8:47:43:40:56:0e:1d:2f:0e:
66:9e:ba:c5:fe:15:6b:02:78:f0:3d:20:0f:7e:af:a1:c0:c0:
73:4a:54:ec:48:1e:2e:67:06:f9:d8:eb:d7:40:2f:29:80:98:
eb:23:85:06:98:a7:3a:de:b8:96:70:bf:32:91:7d:f2:e8:99:
f1:b4:19:78:19:36:dd:59:45:b6:18:55:e4:94:2b:dd:79:e9:
6a:13:9a:ff:f6:aa:5d:bc:56:3e:d4:a3:8d:1a:87:77:05:54:
e5:ca:1f:36:1f:7f:16:d7:d1:a1:b1:cc:89:f0:e9:fe:bc:17:
cd:3c:c0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:52 2025 by rpki-client