Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: wiRnbxlC0qLEp3/X9bblNhAUWouCJe8afxyFBtzQf/o=
Subject key identifier: E5:E8:EA:E3:FF:4F:E5:44:41:AC:4F:23:85:4A:5A:21:52:13:8D:A2
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 019654C9E0FEA89243CA8991510A481B4F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 20:00:38 +0000
Manifest this update: Sun 20 Apr 2025 20:00:38 +0000
Manifest next update: Mon 21 Apr 2025 20:00:38 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: XGqXDommhVscmM5nbKo1jNRLEw01LYMdlEk3eBI934g=)
2: WTiY2Qk1x-geaQsrR6enC5adAMQ.roa (hash: jOYBpT27U7g6ol8yiuxnI6V37MSFQ9qLOBM0L34PdCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:e0:fe:a8:92:43:ca:89:91:51:0a:48:1b:4f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Apr 20 20:00:38 2025 GMT
Not After : Apr 21 20:00:38 2025 GMT
Subject: CN=e5e8eae3ff4fe54441ac4f23854a5a2152138da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:af:15:88:98:70:6d:0e:25:2e:c2:da:10:
f2:0f:77:ca:aa:cb:54:60:5a:94:dc:e9:68:22:9f:
56:b3:9f:81:f7:30:99:c7:48:5e:4d:1d:91:83:f1:
42:42:d4:e2:a8:0d:ed:8f:ee:aa:e0:d7:9a:3c:97:
a9:71:1a:e6:fc:93:97:90:6d:59:5b:20:b9:10:79:
fb:9d:04:11:4b:85:24:e4:eb:90:bf:df:c9:97:bb:
51:eb:e2:6b:6f:e9:c1:b3:3a:3a:26:2d:b8:1c:e1:
12:7f:b3:2b:69:47:a8:3c:93:aa:78:41:48:5a:7e:
16:8b:7e:91:1f:7a:b1:1a:9c:27:77:a8:88:8c:15:
5c:03:17:56:db:71:0e:d6:70:e3:55:3f:ef:35:93:
81:92:c2:ce:e5:7a:be:ab:05:80:f1:82:c6:c2:5a:
ce:cb:a0:7d:d6:66:a7:6c:e3:a3:35:60:64:22:ba:
c9:b9:b5:d4:0f:02:64:2b:df:b6:79:55:43:6a:c5:
55:44:18:e7:41:c4:18:16:d7:b5:bb:e1:b3:d0:08:
bd:76:5e:ad:32:cd:62:e0:09:2e:5b:a2:8a:f9:a3:
fe:00:a5:c5:31:0a:f3:ef:51:43:4a:58:a2:a8:bc:
ab:6b:75:a1:99:a1:83:50:7f:88:f9:77:5e:31:b3:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:EA:E3:FF:4F:E5:44:41:AC:4F:23:85:4A:5A:21:52:13:8D:A2
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ba:18:45:af:52:c0:de:1a:99:3a:7d:cc:b4:d3:72:a8:d2:
d0:5f:36:d3:1f:0d:cc:5d:9b:1a:25:3e:31:d7:b4:58:28:0c:
24:fe:45:cf:b2:11:1b:1f:96:70:44:33:fc:36:c4:7b:d8:d6:
bf:38:76:ed:19:1e:5a:d8:e9:e5:10:b4:ae:21:37:79:a4:9d:
b1:db:28:43:26:9c:04:e5:10:28:8c:ea:f1:86:0f:ae:8f:0f:
0c:eb:48:8a:7b:b5:ed:21:20:da:5d:19:01:4d:2c:f5:e1:7f:
74:95:99:56:96:b5:0e:c1:73:e3:e6:ef:fb:2b:a9:21:fb:ae:
a6:4b:fd:cb:63:f9:2d:4d:eb:ed:7b:dd:db:ca:ad:58:4b:90:
44:15:b2:ff:56:2a:25:ea:a0:4d:88:e3:8b:95:2e:45:d2:9a:
ca:45:36:d5:1e:ee:3f:0e:69:81:26:92:d6:8c:f5:32:47:92:
4c:c8:ea:bf:5f:f8:a0:83:a5:63:27:94:1b:4a:4c:a5:18:e8:
aa:a4:16:4e:60:8b:b5:e1:7c:26:08:f3:5f:e8:5b:63:ec:59:
45:06:27:99:88:f6:a4:eb:34:e3:c9:ee:cf:ac:81:8d:70:75:
ed:2e:9b:65:df:b4:a6:77:9c:d0:1a:2f:ac:4b:8e:4b:24:e6:
cd:01:77:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:28 2025 by rpki-client