Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: 0HPT/OcievkNcqnVjR10G+i3gP2M5S91AiBaEzg7a+Q=
Subject key identifier: 78:C9:86:F8:E8:38:A2:97:F3:AE:4D:38:1B:58:BB:6B:40:3B:19:0C
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 01965191892CFDDCA4000F31C0FD65A5F227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 05:00:14 +0000
Manifest this update: Sun 20 Apr 2025 05:00:14 +0000
Manifest next update: Mon 21 Apr 2025 05:00:14 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: JK2WGCZ7sjT8uXRqt/ol5wQG5yPy5/WOa4DCLricE98=)
2: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (hash: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:89:2c:fd:dc:a4:00:0f:31:c0:fd:65:a5:f2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Apr 20 05:00:14 2025 GMT
Not After : Apr 21 05:00:14 2025 GMT
Subject: CN=78c986f8e838a297f3ae4d381b58bb6b403b190c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:46:17:93:3f:03:24:71:2c:28:89:30:0e:
71:6c:3d:d9:dc:09:73:36:a2:3b:86:5f:97:7d:52:
8a:07:c4:89:84:f3:7b:c2:68:01:02:de:91:df:50:
be:19:72:d0:90:2b:fc:05:8a:93:5b:a3:e0:d6:2d:
c7:e8:fc:d7:8d:7d:30:2a:aa:ce:42:59:b7:a8:79:
e2:0e:b4:3a:e6:b8:1e:f9:3c:78:4a:6e:13:66:b5:
13:96:5b:6a:be:0f:5e:9f:95:79:74:88:38:5a:70:
5c:60:7b:d8:6c:51:36:24:64:64:29:13:31:64:ae:
72:ad:04:9b:bc:70:69:94:bb:ed:ee:90:63:06:b1:
b8:00:90:23:07:4d:37:bb:07:9c:c9:b0:b9:0f:f8:
8b:bf:f6:cc:ff:43:64:e9:21:94:85:24:13:37:67:
05:44:49:d3:d8:c0:1c:a3:73:74:5e:99:d0:04:2b:
9e:a5:26:35:a7:aa:78:ae:07:56:7a:5a:9b:8a:5e:
7e:af:32:1d:62:88:32:8b:77:aa:c0:2d:03:a3:70:
8e:74:4c:d6:5a:6f:0e:4a:db:b0:fc:96:76:c1:92:
0b:bb:8f:eb:45:20:10:80:07:17:62:66:85:d4:14:
b1:3f:44:72:f2:d0:2c:1c:a6:c7:04:ab:ca:56:b0:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C9:86:F8:E8:38:A2:97:F3:AE:4D:38:1B:58:BB:6B:40:3B:19:0C
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f9:5d:34:a3:d3:c8:b4:53:92:60:c8:96:f0:c5:41:2b:c3:
d0:1e:5e:ab:cc:7e:d9:99:df:fc:13:e3:40:38:0b:b0:ba:57:
d1:4d:34:be:fb:68:67:83:c2:ec:84:25:c6:2e:09:92:5c:ce:
b7:1d:0f:79:03:73:e8:bc:45:a4:b3:9c:5e:de:99:1c:a6:12:
04:12:f4:a6:81:d6:8d:48:ad:3b:49:88:cd:b8:90:f2:d1:2d:
e6:b9:4a:82:28:a1:af:05:65:d6:56:87:5f:17:f9:f6:81:d9:
fa:dd:ae:e1:17:4d:85:cd:68:14:ff:6f:e2:3c:2a:03:cd:4a:
41:f9:16:4c:bd:6c:93:9c:99:6e:83:36:14:17:91:c2:4b:40:
1e:59:9a:b6:58:49:59:e2:f1:dd:eb:b7:fd:c8:85:e2:4f:09:
2b:90:35:ca:2f:0b:16:f9:23:79:96:a6:88:ac:bd:4c:b5:1c:
bf:8e:f3:d4:00:5a:85:48:8c:62:e4:98:76:d7:11:59:f0:ce:
4f:ac:16:66:18:7c:95:dc:2a:83:32:db:59:18:1d:95:aa:2c:
fc:39:31:f0:dd:45:f3:9f:04:d7:54:f9:31:46:f5:1f:f3:b8:
c3:56:db:7f:75:55:4d:73:1f:ae:a0:b5:1d:f8:6c:da:df:da:
32:f4:97:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:23 2025 by rpki-client