Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: GPR6tOG/Srg2YRPYWRrOG+7gaO+rB3kA6KzwuZANT/c=
Subject key identifier: D9:3E:34:61:7D:06:83:85:2A:66:00:FE:EC:1E:4C:65:29:6A:C1:61
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 0196B0D7BA78C4D1901D4B211AE0CE1A399D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 1536
Signing time: Thu 08 May 2025 17:00:50 +0000
Manifest this update: Thu 08 May 2025 17:00:50 +0000
Manifest next update: Fri 09 May 2025 17:00:50 +0000
Files and hashes: 1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: dOAkpZh0wLD3AMcx4fwBkrdtqT+15jTX7Y1XhtoFNV4=)
2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=)
3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:ba:78:c4:d1:90:1d:4b:21:1a:e0:ce:1a:39:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: May 8 17:00:50 2025 GMT
Not After : May 9 17:00:50 2025 GMT
Subject: CN=d93e34617d0683852a6600feec1e4c65296ac161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f3:0f:94:1e:2e:05:4d:72:c6:b5:1d:af:87:
aa:fe:b2:f4:92:cd:1a:ce:4d:16:b1:de:b6:ee:f7:
72:b4:8a:18:2b:e2:3f:56:c6:6f:88:1d:aa:9d:96:
b1:fb:50:b6:70:bb:3d:66:c1:f1:25:d3:35:4b:f1:
89:76:19:8b:05:5b:1f:64:2c:50:4a:5c:51:ea:92:
34:e9:41:6a:7c:a9:a9:b5:bc:cf:a6:52:79:3e:fb:
78:68:d7:1d:a6:10:1f:87:c6:7b:11:3b:bd:b8:17:
9b:8a:ff:0d:92:05:48:a2:04:d1:8c:d9:9b:a6:99:
a7:69:5a:94:73:a0:b6:0c:fc:f6:dd:4f:2e:21:79:
ce:13:8a:98:af:cc:c8:b9:8f:b6:15:93:c0:36:a1:
82:64:f6:a7:91:10:63:3f:fb:46:20:d2:b5:58:69:
9b:3b:9e:7b:93:e4:67:82:c4:1f:fe:0e:12:24:81:
61:36:2f:ea:6d:d1:69:58:07:39:ba:93:48:6e:e1:
f7:01:98:12:90:61:0b:ea:99:5c:67:ff:9c:48:5c:
9a:1c:87:c3:e6:af:85:e5:16:3a:73:cf:d6:23:e1:
a3:26:1b:db:02:59:8e:6d:5f:74:e2:15:9d:51:06:
bd:8b:eb:86:76:7d:15:33:57:13:20:c3:b5:8e:df:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:34:61:7D:06:83:85:2A:66:00:FE:EC:1E:4C:65:29:6A:C1:61
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ce:fc:d4:f8:ed:f5:f9:c4:f9:2c:ca:b6:aa:d1:cd:74:85:
d7:85:84:8e:4f:50:c0:f5:8c:86:63:1d:81:aa:d1:ff:a3:93:
ce:c1:51:56:18:68:84:01:c8:4c:e5:2d:5a:27:30:58:2c:e3:
3d:88:e6:96:fc:08:bd:9e:6a:51:ef:f0:f6:d5:9b:f2:04:b6:
42:37:40:db:31:59:0b:ec:ba:57:ca:8c:32:74:30:01:2f:4e:
a7:0f:1c:e6:6a:f7:3f:97:7c:54:f2:6d:24:b8:41:d8:0a:e9:
41:6f:1a:4d:22:4b:be:c9:55:92:6b:b8:dc:34:aa:23:c9:9d:
a3:27:a7:7f:de:a5:6c:d5:b0:ca:62:38:de:ee:d9:4d:af:40:
c3:c8:4c:b3:22:de:ce:d3:9c:40:67:5e:4a:42:f8:b5:b8:ab:
a6:ab:c0:9a:11:54:1d:de:b7:93:ad:3e:09:9d:77:0a:e3:b8:
57:ed:20:10:46:f9:55:64:08:bd:2a:ca:08:85:c0:b9:3f:84:
9e:ae:56:92:bf:8d:0b:22:93:87:fd:bf:76:82:94:e2:aa:2a:
83:e4:eb:68:31:77:bc:1a:d0:95:d7:ef:fa:db:5a:b9:9a:90:
df:62:f0:ba:ba:00:e9:ac:e1:af:8d:34:71:e4:08:8e:cd:09:
60:fc:1c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:48:41 2025 by rpki-client