Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: VzF+5ouTT3z1McIDrH75QQy52QUiPKhweY6Ixz6apZc=
Subject key identifier: 23:5C:FE:42:3A:B7:51:40:E4:66:FA:30:E8:8B:F6:55:92:1E:E4:AA
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 01964C6BE804858CC8169E9614494AB0AAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 10FB
Signing time: Sat 19 Apr 2025 05:01:02 +0000
Manifest this update: Sat 19 Apr 2025 05:01:02 +0000
Manifest next update: Sun 20 Apr 2025 05:01:02 +0000
Files and hashes: 1: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: XIEX3qy8lYYGwmSPj7Ot3v8qBR6tn+jJ43sbCgtW3WU=)
2: xbEhFMe96Lq98oM2kaTSxYoflQo.roa (hash: TG0r6adK5rxJjOXHHJZ61hb/iZXi4XWRAs1u1uQ8odg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:e8:04:85:8c:c8:16:9e:96:14:49:4a:b0:aa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Apr 19 05:01:02 2025 GMT
Not After : Apr 20 05:01:02 2025 GMT
Subject: CN=235cfe423ab75140e466fa30e88bf655921ee4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:69:0a:88:67:ae:07:27:3a:55:4e:80:9c:
55:04:97:2c:3d:2c:e5:61:81:86:c1:11:22:04:6b:
0e:61:63:fa:ef:99:d5:5d:3e:0f:34:5a:95:b3:21:
1c:7a:ec:d7:09:68:4d:1a:dd:da:7a:53:b5:9e:a9:
51:3e:ff:0e:1e:ef:12:5d:68:fe:c1:c7:d7:9f:9c:
7c:f1:d2:8d:1e:15:aa:76:79:4e:ca:b2:a4:3c:94:
b5:d6:84:13:97:ec:3e:5c:b3:89:04:08:cd:2f:fa:
2e:20:56:ae:d6:39:a9:62:a2:36:90:03:97:2e:c7:
05:cc:e4:09:d7:68:d0:41:c3:27:33:5b:7a:d3:3e:
74:62:1b:97:71:e3:ca:82:20:76:c7:8c:30:18:ab:
e3:31:55:cd:c2:73:e7:19:cd:e6:f8:59:c3:78:67:
9a:15:9b:0f:76:35:8e:bb:6f:a9:78:48:38:52:f0:
d8:8d:75:67:99:dd:8f:22:89:29:8e:64:35:6c:71:
cf:26:50:d6:83:f2:4e:7b:1b:7a:a0:1d:a6:86:8a:
5b:33:12:cc:3b:d9:fd:c1:3a:7a:6b:71:8a:47:f5:
a3:65:43:f8:68:a0:39:16:f0:0b:d5:f1:28:72:8e:
b7:c0:c7:9b:a7:fd:4e:22:56:b5:2b:c8:9d:11:8c:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5C:FE:42:3A:B7:51:40:E4:66:FA:30:E8:8B:F6:55:92:1E:E4:AA
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2c:6a:00:08:2e:b5:00:23:c4:f2:cb:6d:41:47:6c:db:69:
03:c8:a4:55:a7:c1:3f:08:55:83:98:98:6b:47:08:dc:e4:9d:
6b:f6:34:74:dd:bb:ae:31:19:be:1d:59:e9:3b:29:a2:27:9e:
69:16:b9:fb:10:de:7c:45:74:d4:4d:15:f6:47:3a:69:54:50:
9e:4d:9f:64:34:93:19:71:27:53:a3:d5:99:5f:90:d7:70:c4:
5f:8f:d8:d1:0f:99:25:9d:b7:ee:76:96:cd:77:f1:3e:c3:bc:
c7:b1:1e:9a:c9:42:90:60:f7:32:b7:c6:c4:30:0c:db:9d:63:
d7:be:48:00:bd:af:7d:69:de:68:75:d2:47:66:29:a5:53:9f:
27:f2:ab:2d:c1:ec:28:16:71:30:2f:23:35:ee:d4:be:d8:1b:
8b:e1:6e:f9:f3:48:c4:b0:f4:a1:0e:5b:29:ec:7c:46:6a:82:
d3:f4:fb:57:04:78:3a:c3:db:26:07:6b:46:db:1c:ff:1f:b9:
94:64:28:07:72:bc:da:13:70:2b:93:e6:91:4b:ca:69:17:86:
c5:dc:23:bb:3d:e5:45:92:7d:34:56:ec:d2:c2:fc:c3:23:ca:
c4:1d:27:08:e3:29:8d:94:5e:db:c8:ba:c0:6d:89:2f:f5:9b:
93:e8:26:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:08:58 2025 by rpki-client