Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier: 31WhQgsd8QDo38k6lGabMHxOWOm3YKBkUMIGJXIgiXM=
Subject key identifier: EB:09:7B:28:00:A3:A1:E9:F7:25:D5:2C:67:07:07:D1:E8:45:50:EE
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 01964E22FF0673314BC503A462F0D4A234EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number: 0423
Signing time: Sat 19 Apr 2025 13:00:38 +0000
Manifest this update: Sat 19 Apr 2025 13:00:38 +0000
Manifest next update: Sun 20 Apr 2025 13:00:38 +0000
Files and hashes: 1: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (hash: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=)
2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: BUKZ3AZ3cDgweMP3GJ6ySzPokkqK1Oyhu5P8dm0QjeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:22:ff:06:73:31:4b:c5:03:a4:62:f0:d4:a2:34:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Apr 19 13:00:38 2025 GMT
Not After : Apr 20 13:00:38 2025 GMT
Subject: CN=eb097b2800a3a1e9f725d52c670707d1e84550ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:05:d9:30:66:c4:80:99:35:4b:6c:a2:ff:
ff:9c:1f:df:ff:b0:2a:56:25:d3:b3:25:e9:75:b5:
e3:31:3f:e8:57:96:be:6e:f1:6c:a3:09:c5:ad:b5:
e8:7f:39:13:af:c7:94:2b:fa:15:fa:fa:54:6b:aa:
5d:44:77:cf:40:a8:48:84:9d:8a:cb:8f:bd:d8:a2:
29:2e:26:14:d1:2b:a4:e5:20:8a:26:aa:e5:38:c4:
ec:e1:30:37:c5:61:9e:5d:43:d7:32:0c:9f:85:cb:
cb:34:1e:a2:39:aa:bf:40:e0:b2:d2:a7:aa:cd:73:
f6:bc:8d:a3:a0:98:92:00:39:29:54:f0:7d:8f:6f:
79:e2:ed:34:23:d9:9e:d3:e1:04:77:e1:1e:79:27:
5e:2e:41:89:40:0e:a9:63:78:6c:c9:d2:52:a4:c1:
6a:45:2a:04:00:1f:5f:d0:3e:45:3a:ee:98:f1:d4:
a4:4a:25:c1:23:49:a1:5b:ce:d9:72:27:8c:9b:e7:
7c:32:78:45:51:0b:f7:10:0e:47:80:26:03:e0:5e:
7e:65:64:b2:fe:b1:1f:76:0f:11:b1:dd:91:e0:c1:
34:48:1e:5a:50:21:35:ff:0c:3e:c4:af:0d:9b:c1:
61:93:55:00:bb:2c:aa:bd:64:53:6d:6e:ae:e4:96:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:09:7B:28:00:A3:A1:E9:F7:25:D5:2C:67:07:07:D1:E8:45:50:EE
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:af:5c:31:3a:79:0d:16:a1:5a:f2:93:c1:bd:a7:66:96:54:
72:10:3c:58:e4:9f:f9:dd:c3:5f:dc:a0:c1:c9:4e:d8:78:c3:
62:e5:e8:31:ab:ad:2c:c2:fd:07:e8:7d:b2:6e:13:ef:e0:70:
31:5e:60:b5:07:d5:37:b8:a7:49:f7:14:37:11:49:23:ad:71:
86:e2:fe:7a:80:68:77:13:93:5d:b3:72:ea:3b:6b:1b:62:af:
2a:08:16:0c:69:67:86:6e:b1:c0:20:e0:90:29:4d:4b:6b:0b:
b5:60:c0:87:13:8b:dc:51:9d:6a:cb:a8:cb:d0:95:96:8f:7e:
4a:cb:b5:96:f7:c8:a7:e2:2a:f3:1d:c4:17:8e:32:37:c3:be:
87:98:43:84:30:e5:46:47:9a:b4:43:07:6f:a9:f3:07:0d:26:
57:7d:fa:bc:60:6c:d2:ee:47:16:70:79:f1:ed:ca:81:86:75:
f3:3e:b6:31:00:22:a6:7b:01:89:e2:c5:2b:0e:63:b5:ee:9f:
25:77:a0:be:2d:5d:e5:e1:13:47:bd:bb:be:e9:26:21:8b:f6:
2c:ab:3f:13:c8:17:07:2a:27:d6:66:da:89:0a:58:ec:8c:24:
d2:70:39:c9:62:99:00:e6:49:6f:c6:76:2b:b0:7f:d2:52:42:
2c:40:5e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:59 2025 by rpki-client