Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: 6Vr7+xwfHk4tt4pSkOHKqjtB6HkD82ikYCkwXNF+xoM=
Subject key identifier: B7:E1:5A:3C:14:D4:C6:13:0F:A0:E8:5B:8E:45:23:B4:92:11:96:04
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 01969E2CA134A20E929276F2BC3C0CEF7E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 02:00:46 +0000
Manifest this update: Mon 05 May 2025 02:00:46 +0000
Manifest next update: Tue 06 May 2025 02:00:46 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: m7kD3aoqrJ9mpH7cU1srMUVH6tyL/IE3/GGwgN4Fz60=)
2: n9slDOW816oCeV0oI8sGph9zEHY.roa (hash: qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:a1:34:a2:0e:92:92:76:f2:bc:3c:0c:ef:7e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: May 5 02:00:46 2025 GMT
Not After : May 6 02:00:46 2025 GMT
Subject: CN=b7e15a3c14d4c6130fa0e85b8e4523b492119604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:fb:83:34:36:56:e0:40:f1:3c:e7:3d:78:
bd:14:81:b7:dc:ca:a6:2a:2a:ae:f6:dc:ea:98:f8:
9b:d2:18:98:f3:28:c9:f2:f6:18:35:2f:49:20:97:
1a:a5:9e:1f:df:0d:8a:a0:1e:f7:b8:f1:2a:eb:54:
91:af:e1:c5:8a:0a:77:9f:a6:08:f6:e9:9e:18:81:
23:17:49:ec:84:48:84:88:fa:7f:89:84:d1:83:ab:
b1:39:bf:8d:8e:22:0b:69:cf:b5:b8:85:6a:cf:db:
a6:e5:42:4a:c8:79:3a:1c:ee:5c:48:d3:ff:21:cd:
50:25:6b:24:d2:8a:12:64:ac:f2:e0:db:d6:d5:6f:
cc:6c:2e:de:02:d7:7d:bc:70:24:24:d7:9a:c5:3e:
db:87:ba:54:f8:36:4a:45:e4:90:0e:38:36:2d:be:
3d:11:1d:13:56:dc:aa:9a:f6:a8:ea:9e:44:98:b8:
ed:fa:c2:0c:1a:40:3e:c7:1a:65:4d:8a:ee:fc:c6:
d7:b6:cf:a9:ac:b8:c3:28:22:c9:c4:19:c3:f3:1c:
04:93:bc:bf:71:ec:dc:5a:89:64:3e:8f:c2:4e:e0:
e1:a4:50:ac:0a:02:f3:ae:06:ed:22:6e:23:48:fb:
e3:9f:1b:8a:27:d1:ab:ae:84:76:8f:73:4c:7d:97:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E1:5A:3C:14:D4:C6:13:0F:A0:E8:5B:8E:45:23:B4:92:11:96:04
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1c:32:2c:08:a5:1b:d1:0d:8b:bb:d5:d3:50:b5:7d:cd:f2:
a3:b7:45:2c:4e:36:b1:7d:1f:37:6a:c0:09:30:f3:42:79:a7:
8f:a9:51:2a:a4:e6:f8:96:ca:14:c2:46:2c:6a:ed:64:88:1e:
48:8d:4f:a3:04:9f:b9:f9:fd:86:81:15:2f:54:1d:66:2e:30:
ce:66:76:8f:b8:c5:b3:58:1c:7b:c1:40:65:c9:88:5d:3a:97:
f5:d6:9d:1a:ba:84:61:af:04:c2:b4:99:b7:fe:5f:a9:4c:72:
e8:1e:f6:f0:45:5b:b5:05:c3:c0:87:e5:10:24:de:4f:22:75:
ed:09:87:42:55:eb:23:e0:d9:21:ea:0f:c0:11:93:5c:60:ed:
05:e8:4a:f7:aa:77:99:3e:d3:fd:d3:6e:e3:5e:43:6d:3c:1e:
09:93:d0:fa:87:d9:9d:c3:f8:e3:71:11:94:12:54:9c:fd:ad:
df:b5:8f:8d:cb:f9:73:f7:50:3d:e8:db:a9:eb:af:0c:e4:b3:
3d:e8:39:01:24:5b:25:08:38:f5:42:7c:df:c7:33:5c:45:92:
51:cf:60:62:db:51:87:bb:73:9f:b3:15:b7:f1:e7:60:10:90:
7b:27:44:55:c8:0f:9a:ce:00:92:4d:03:d3:6c:42:aa:7e:f5:
d4:0b:b7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:05:01 2025 by rpki-client