Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: te84TI/x78fYA5swVqfOIq9KZa6VprPAo8owGSkxA7Y=
Subject key identifier: 34:57:A6:A2:5A:46:6E:CA:15:2E:CD:74:D7:C7:3E:D8:50:74:FD:BD
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 0196D4E3A8727F7E942BD7AC0C6E1CEC52F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 153F
Signing time: Thu 15 May 2025 17:00:11 +0000
Manifest this update: Thu 15 May 2025 17:00:11 +0000
Manifest next update: Fri 16 May 2025 17:00:11 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: wAXCLdeYXADiH5A9AFBwrrDr+KV/iIDdocX64HaBKWE=)
2: QIqKLnFZSvkIdztpTOrghmndfqs.roa (hash: wHBtvNsb06U7COg9JhFFEVNmIo0CSx+CQSOErCnUsO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:e3:a8:72:7f:7e:94:2b:d7:ac:0c:6e:1c:ec:52:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: May 15 17:00:11 2025 GMT
Not After : May 16 17:00:11 2025 GMT
Subject: CN=3457a6a25a466eca152ecd74d7c73ed85074fdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:a8:4c:f4:00:ba:c7:c9:c8:2b:6d:f4:43:
94:f2:2b:ba:3f:53:1c:04:ea:41:6c:6b:df:ad:fa:
27:c2:5e:b7:66:5b:d7:e6:99:3e:38:40:d8:55:90:
b2:85:e6:5a:1d:46:87:6f:2c:9a:3b:ff:ef:63:9f:
15:3f:17:67:ae:95:59:eb:16:2f:1e:d9:98:ac:d4:
eb:e3:f6:85:77:3f:ca:c7:91:80:55:c7:03:93:7b:
36:a6:a7:01:aa:9d:75:78:e6:71:c4:3d:54:15:b9:
ef:3d:a9:9a:e3:9e:18:91:4d:2a:44:09:2d:5a:61:
b2:33:d7:6c:f1:cf:b7:67:88:ab:e3:c8:df:86:e1:
86:2e:81:c4:c8:ef:cd:0d:99:fa:57:4c:b0:c4:d8:
20:37:10:84:89:da:e3:8d:52:56:48:84:43:08:b1:
42:9b:12:2e:e5:0c:98:00:69:48:56:fe:0c:e8:29:
c3:dc:29:86:6b:5e:f4:65:69:fe:2b:c3:18:af:a7:
8a:17:7b:08:56:d8:24:b4:41:76:45:0a:eb:ea:7a:
b3:83:26:6d:54:6b:1c:9e:2c:e3:8f:f0:17:9e:1b:
a9:dc:99:f6:f1:c0:b6:f9:27:aa:78:d9:bb:e9:5a:
43:63:e2:ae:6f:ff:49:93:46:25:74:69:ac:2f:c6:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:57:A6:A2:5A:46:6E:CA:15:2E:CD:74:D7:C7:3E:D8:50:74:FD:BD
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:01:ba:b2:40:fd:1a:c1:b2:b5:63:20:e9:41:c9:36:36:d1:
98:d3:13:4e:b9:69:f6:1e:8e:73:94:b1:ea:ae:38:b0:fa:0e:
6e:63:09:ee:ea:ce:6f:d2:23:c7:77:a7:10:0c:22:43:bf:bf:
50:ec:97:2f:2c:bc:69:c9:84:ee:62:0f:f6:54:39:26:56:62:
b5:df:b9:a4:2c:1f:c7:b6:f6:b4:42:62:af:e4:06:71:80:d2:
f3:c7:ab:72:04:7d:82:a6:03:54:44:a9:50:cd:a1:f7:90:39:
80:9f:5a:bd:c1:e4:fb:c1:27:d7:2b:40:d4:85:51:ec:c2:41:
17:25:c5:da:e7:e8:ad:a0:41:38:3f:2f:11:84:40:c1:81:a3:
f6:60:b5:a3:ab:17:f7:ba:89:c3:42:37:a9:71:05:a3:cc:4b:
6b:16:bb:96:2b:e2:66:f8:9e:be:58:f2:4f:bd:49:47:1c:3d:
db:1b:00:61:12:93:87:29:7d:cd:ba:3a:d5:b4:2f:5c:85:60:
6a:39:06:f2:fb:83:2f:2f:23:16:b1:d4:11:1a:de:ca:f8:e8:
fb:0b:57:6a:3e:95:da:ab:70:5c:86:ef:ff:e5:5f:d4:ad:fe:
08:7d:ed:f6:5b:83:1d:ca:ad:71:4c:af:90:bb:f5:1a:81:a7:
af:67:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:19:55 2025 by rpki-client