Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier: hjDPiHnSWvLi0OkFwNUtevxdwWkCiCVvfseKwOY044Q=
Subject key identifier: C1:E0:98:B7:63:37:92:3B:69:96:A7:DE:47:8C:A4:3A:C8:15:B7:49
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 01974930F91C71A6F0CF5E76DC6C70C98610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number: 04A5
Signing time: Sat 07 Jun 2025 07:00:35 +0000
Manifest this update: Sat 07 Jun 2025 07:00:35 +0000
Manifest next update: Sun 08 Jun 2025 07:00:35 +0000
Files and hashes: 1: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (hash: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=)
2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: yT7k+0+C2QOI8L8hDZYbaElVoouPpwkcPM4gLCQ3cy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:30:f9:1c:71:a6:f0:cf:5e:76:dc:6c:70:c9:86:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Jun 7 07:00:35 2025 GMT
Not After : Jun 8 07:00:35 2025 GMT
Subject: CN=c1e098b76337923b6996a7de478ca43ac815b749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:29:ff:b4:f9:49:75:a2:2f:ee:91:ef:22:
f0:53:b0:48:21:c1:98:eb:85:e4:bf:c4:c9:9a:c9:
75:0a:41:b3:14:34:26:45:c7:63:c7:58:92:6f:45:
61:84:04:96:44:b9:29:cf:47:0b:b9:8e:ec:7e:d7:
ca:26:f8:e2:b6:fb:c9:c0:44:0d:a3:7d:b9:83:ad:
71:58:b2:66:1d:cd:99:2a:38:47:e5:f8:b0:d4:12:
f4:5b:a1:8f:3a:8d:11:f1:b5:54:2b:2e:50:02:53:
6e:e3:bf:64:46:82:ca:8b:93:dd:a5:f2:ad:f2:14:
9c:a0:38:e6:90:a6:a9:e4:f0:d9:42:58:8d:82:3b:
df:99:53:25:d5:13:e8:88:96:4d:22:32:da:3b:cb:
8f:98:1d:1d:bc:54:40:0c:c9:08:0e:1f:7e:ca:39:
54:3b:42:b1:d0:f7:32:d1:af:43:e8:62:df:31:60:
35:8d:7a:ff:6a:d7:40:9c:fc:1c:68:ea:7f:6d:88:
63:6c:8c:b3:13:8c:79:bd:f0:98:d3:fd:ae:01:2c:
f2:4f:aa:65:f5:f6:fc:23:bc:ff:c2:67:58:8d:dc:
f2:e3:02:fd:7b:95:04:b3:69:79:d5:1b:00:59:6a:
b9:5b:5e:38:72:66:76:1b:3d:8e:23:72:ed:0a:50:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E0:98:B7:63:37:92:3B:69:96:A7:DE:47:8C:A4:3A:C8:15:B7:49
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cc:45:3f:e1:7a:89:99:99:94:3f:b0:69:1a:60:53:9f:23:
82:aa:b1:38:14:ad:f5:8d:86:ca:b4:b5:c1:38:b3:a3:73:0b:
c3:a8:bf:3a:8f:77:75:87:9e:7f:e5:b8:c3:5c:25:76:9c:eb:
78:a6:a9:20:9c:41:45:51:6b:92:bf:3d:f0:47:f6:34:e3:55:
90:8d:1b:31:fb:b4:2e:51:f1:31:9a:a6:de:12:ae:7c:ef:fe:
ae:37:17:c4:b6:e9:34:77:59:73:53:d3:b1:56:6d:4d:ad:45:
e0:16:f8:67:81:2d:e0:27:ed:32:2a:8d:c8:13:5c:56:19:5f:
f2:63:dd:f2:c1:98:47:a4:d2:20:4a:87:8a:af:53:db:64:08:
d9:0f:5c:ba:48:87:d0:93:79:6a:a3:62:68:e9:ac:15:b3:ec:
c1:83:8e:40:a4:3b:ac:e3:f5:84:47:54:16:7d:e9:b7:4b:01:
1d:8b:3d:75:61:a4:aa:77:8f:49:44:33:76:0b:6b:51:a6:5b:
25:23:a2:05:48:70:94:50:0d:f3:16:ad:a3:0b:08:bf:63:56:
b2:a6:09:77:20:cd:09:88:18:c7:02:d9:5a:39:a2:20:4f:17:
f9:9f:c7:ac:0e:fb:49:53:79:57:06:77:9e:3e:5f:8f:eb:29:
45:fb:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:22:03 2025 by rpki-client