Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
File: NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json)
Hash identifier: vFKnLKyDS50aLvf4vxUYTDDMGPXvs7ymdDpmN4Zp2EQ=
Subject key identifier: E2:C9:95:5D:CD:E0:D0:4B:E9:0B:76:D4:4D:65:35:06:91:44:04:B3
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Certificate issuer: /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial: 0196BDEE1759A985DF919B0AB54D64C96744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 06:00:19 +0000
Manifest this update: Sun 11 May 2025 06:00:19 +0000
Manifest next update: Mon 12 May 2025 06:00:19 +0000
Files and hashes: 1: 1-gyxFvtsdFvYTZX0Y9fbT2PSGFM.roa (hash: EABdk5cioKlboVX+5roxKxOS78qf+VdGIdGNtobQ0pE=)
2: KArVYyPO9fBEhTTRJ1tDthlJCOw.roa (hash: a0gp1BPnbKmQpx9TqJhgPqer5KuegL1mEbSjNdCn0ek=)
3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: 7kdAimq+4GhzmZV5pdn6WR24Agiy3QEsMzgBcR/Yi0s=)
4: SErRHgSbJegvTKQp5_vKPuL-I0M.roa (hash: 5izdqURGD+Gcq0q1le3LSPtQmkAtZ+szcc8AfWWlrxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:17:59:a9:85:df:91:9b:0a:b5:4d:64:c9:67:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
Validity
Not Before: May 11 06:00:19 2025 GMT
Not After : May 12 06:00:19 2025 GMT
Subject: CN=e2c9955dcde0d04be90b76d44d653506914404b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:d1:b4:53:80:e5:64:4b:f1:aa:c1:9a:30:
08:5c:53:00:55:54:9a:46:1b:67:19:29:08:e9:1d:
ce:b2:f9:7c:fc:92:17:03:d0:44:c7:02:11:05:83:
20:b2:09:59:ba:ef:65:a4:dc:84:0d:d2:51:b8:96:
fa:fd:42:81:23:3b:10:2c:7f:bb:6b:a3:3d:3c:9a:
53:f7:e8:f7:7c:b4:dc:a3:4d:0e:84:bd:98:86:0d:
2f:a7:56:3c:b7:db:4a:0e:b9:53:3b:72:98:02:f7:
d4:6e:a7:a1:89:3e:dd:69:d8:ff:68:fe:c0:dd:02:
69:15:11:54:3d:bd:6d:83:d9:07:78:08:78:9f:f6:
96:05:e7:8c:ad:da:92:8c:29:17:80:1f:1d:c5:4a:
72:70:52:47:33:52:05:14:cc:c9:6b:1e:27:50:96:
be:f5:2b:b4:93:94:80:07:ef:50:d1:dd:73:82:b1:
e4:dc:6d:ad:67:62:70:0e:24:db:cc:d5:4c:2b:6b:
93:8f:e9:e2:8a:2f:c4:9f:aa:c5:fa:ed:43:24:06:
ec:07:7b:bd:9b:61:35:d4:52:45:6c:be:d3:b7:ff:
34:ad:9f:27:27:91:e3:0d:5d:fa:56:4f:30:e8:ae:
95:87:d1:5e:97:f4:c9:30:05:3b:c2:4a:37:e2:1f:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C9:95:5D:CD:E0:D0:4B:E9:0B:76:D4:4D:65:35:06:91:44:04:B3
X509v3 Authority Key Identifier:
keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:50:93:f8:23:92:5c:17:eb:93:6a:ec:94:8f:93:10:16:12:
e4:b6:81:60:2d:11:98:b4:db:a7:32:95:cd:e2:0d:eb:38:26:
c6:77:b3:e4:57:87:de:61:e0:58:ab:2f:6d:99:47:ea:95:8d:
e3:21:36:ae:47:fa:cb:f1:b3:80:5d:64:8f:bd:78:92:d0:16:
ad:77:dc:f1:e8:73:7a:47:c3:9d:1f:c6:c6:ec:47:a3:d3:69:
74:6d:e1:72:6d:f9:f4:e5:fc:09:52:e4:ac:53:7b:6c:5f:e7:
8f:5f:88:a7:12:91:9a:bc:0d:f1:3a:79:64:1d:80:f5:a7:f7:
f4:49:02:af:6d:3d:84:63:63:d4:ed:a8:26:2e:74:85:dd:a6:
e9:3e:e2:bc:2c:8b:fa:02:3f:87:5e:01:f3:57:16:ec:d0:f8:
67:3c:38:3d:d3:bb:ca:a6:e2:6e:d3:dd:39:5c:db:ac:9f:f2:
85:3c:97:66:e6:6b:87:a4:5f:d8:19:1f:cf:c6:41:19:fe:53:
63:bd:26:b7:eb:79:82:62:af:b3:5c:06:55:d5:51:27:b4:ce:
04:ca:63:a7:4f:28:a3:c4:16:f3:44:64:fc:25:a5:08:85:64:
15:1c:99:b1:d0:9b:14:64:df:c4:94:17:78:b2:b7:f0:cc:5e:
89:a9:4d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:38:03 2025 by rpki-client