Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
File: NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft (raw, json)
Hash identifier: LzJBwzcjz8PyFf//a+ZRsZjF+oP1pPKdrqzm37+no+k=
Subject key identifier: 9D:B2:53:60:2D:A5:20:DA:40:33:7B:E5:2D:B0:01:47:B5:27:E4:49
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 0196B7EC4C530534D327B06AAEBFDBE099AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
Manifest number: 05F3
Signing time: Sat 10 May 2025 02:00:38 +0000
Manifest this update: Sat 10 May 2025 02:00:38 +0000
Manifest next update: Sun 11 May 2025 02:00:38 +0000
Files and hashes: 1: 1e-R_RVRVy4XvdCy2aS6EF3_EtI.roa (hash: BQhqOOFjoi+Ex8s0CUIBtj7pTDkrOo0Z4PQBLWx35W8=)
2: NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl (hash: KFVs0XTNb+LIewBMJKB7oZbapRKoxZUhNMcujdB4Jh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:4c:53:05:34:d3:27:b0:6a:ae:bf:db:e0:99:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: May 10 02:00:38 2025 GMT
Not After : May 11 02:00:38 2025 GMT
Subject: CN=9db253602da520da40337be52db00147b527e449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:80:98:04:7e:84:b7:c4:67:d4:72:df:27:
52:c6:62:29:ff:83:11:51:ca:8c:55:8d:77:48:3c:
34:53:05:3b:e8:fe:f5:fa:33:d8:fe:a1:23:74:4e:
dd:8b:e7:eb:23:59:ec:15:ea:49:22:2b:68:4c:12:
24:2e:87:ab:20:97:38:40:3b:90:59:70:d5:ec:09:
04:3c:52:61:ef:8f:5c:80:51:91:f2:45:af:31:f6:
84:17:18:45:34:d4:fd:92:91:6c:67:64:91:ed:16:
36:4c:5e:0b:ff:97:30:e3:5e:76:bf:bf:74:5a:4e:
f5:d9:94:af:6d:f7:a4:d9:d8:44:c1:26:7b:5c:de:
af:7d:af:14:fd:4b:a1:d1:45:d6:ff:91:f0:17:2b:
9a:85:b5:fb:64:9f:eb:8e:82:fc:53:bf:42:dc:eb:
d5:78:ef:73:ab:b3:35:64:43:32:66:b1:e3:c8:c5:
08:4c:b2:85:74:6a:23:05:36:db:06:88:b3:1e:45:
2d:49:c5:3e:d2:37:0b:09:0f:e2:24:ad:65:83:a4:
0a:4e:f3:1c:c6:75:01:b4:c0:fe:17:18:02:6c:d9:
97:ed:90:d0:cd:2c:76:c8:d8:8a:8a:ae:14:c7:08:
3d:9e:4f:36:af:18:4e:79:76:66:67:46:11:02:0d:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:53:60:2D:A5:20:DA:40:33:7B:E5:2D:B0:01:47:B5:27:E4:49
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:58:73:d3:76:3f:29:84:6b:d1:8f:81:91:3a:87:63:3e:fe:
86:81:d0:10:b1:76:11:38:d9:b9:04:2c:6c:43:21:54:45:70:
8d:29:eb:53:0a:82:ac:3d:be:20:33:64:9f:fa:c9:94:93:e0:
2d:f4:1f:59:20:2f:c7:6e:ca:89:2f:3f:7c:d6:25:a8:c4:c7:
ae:1f:31:85:91:8e:30:d9:5d:4e:1a:74:65:27:f8:6a:00:fb:
3b:76:00:63:5c:21:e2:0d:6f:e3:dc:9e:f0:b7:71:a2:83:15:
69:8c:47:b2:a0:f3:e0:df:be:d1:dc:6e:c7:e0:3c:2f:42:96:
38:68:8a:2c:fe:31:cd:4d:ef:66:47:7c:19:57:43:1b:0d:b9:
46:80:1a:71:70:57:d9:5b:74:b8:18:65:13:c8:73:7b:20:eb:
22:5d:2e:6b:2d:4b:61:24:40:d3:7c:8f:cd:6f:85:b6:2a:1c:
17:8d:ff:9f:85:02:5f:e7:41:9d:b6:a5:3c:70:90:3f:d0:ba:
d3:b4:1f:5b:a9:7c:02:88:9c:24:71:90:c9:66:64:26:be:b9:
a6:07:b3:d7:07:c2:e1:24:76:13:17:18:6f:52:ad:11:77:06:
8e:6c:b2:0c:e0:66:7a:df:e6:dd:8b:90:af:b0:e1:da:0e:f7:
12:8f:9e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:13:07 2025 by rpki-client