
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: 406bjeAYXTNCeWb7H7IX761M7pVOutvshpfIjJKkgSc=
Subject key identifier: 81:0B:0E:DB:BD:9A:D4:F6:A6:17:73:4C:87:7C:6D:5F:C6:F1:85:C1
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 0196C2DDDC226D87B2589CB384443FBE43DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0A1B
Signing time: Mon 12 May 2025 05:00:41 +0000
Manifest this update: Mon 12 May 2025 05:00:41 +0000
Manifest next update: Tue 13 May 2025 05:00:41 +0000
Files and hashes: 1: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: 5/LOUU09qcSfK4RH7HSDfYZERo+INvbZh4uNetTPRQ4=)
2: Zk0y4tHHB8Yu3r49IrGLEovlzps.roa (hash: Z8BlFARu3PiIVKgAzCmvXp/n3Elo4eu1cJ/tXUB0sZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:dc:22:6d:87:b2:58:9c:b3:84:44:3f:be:43:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: May 12 05:00:41 2025 GMT
Not After : May 13 05:00:41 2025 GMT
Subject: CN=810b0edbbd9ad4f6a617734c877c6d5fc6f185c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d9:59:ad:d2:e5:ed:82:f3:25:25:df:2f:5f:
09:1f:35:4e:c3:fc:81:3f:3e:94:24:fe:e6:60:05:
86:57:09:cb:8c:5e:36:e0:92:26:d4:80:ca:4e:98:
45:f6:34:2e:d0:22:fe:6f:58:f8:a5:e5:ef:38:fc:
c7:4f:22:fc:ac:df:17:8e:28:7d:9b:d0:c8:9b:a3:
44:81:1b:5c:c1:5d:f6:e0:ab:68:0a:8f:cc:cc:de:
da:ff:2b:5c:c1:a8:9f:d3:35:a7:96:83:47:f7:62:
0e:ee:c9:ab:f2:4b:db:3a:8f:9d:bc:3f:40:45:e2:
b9:ce:b7:d6:8f:a9:63:db:9b:a1:2e:60:f9:5b:26:
d9:42:84:4f:0d:b4:57:ad:f3:d3:6f:25:08:e1:51:
ba:72:67:36:a6:8c:eb:af:9c:64:cf:da:75:2c:4a:
de:fb:f9:b3:dc:75:33:79:3b:8a:5f:3d:0e:f3:19:
41:97:eb:4d:b8:20:b5:ab:3e:e1:7d:37:e8:3a:8b:
12:2c:0d:ef:fb:f4:c0:be:5b:dc:64:37:0a:53:a5:
cc:31:d0:a7:8c:72:41:d4:ba:d8:ae:92:98:5f:62:
7d:7a:d2:d4:42:b5:c7:d6:38:9d:83:ba:74:b0:eb:
43:7f:08:8a:07:44:d5:80:65:2b:61:ab:29:0b:aa:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0B:0E:DB:BD:9A:D4:F6:A6:17:73:4C:87:7C:6D:5F:C6:F1:85:C1
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a3:21:df:ba:db:ba:96:47:85:00:78:4d:3d:a2:6e:38:eb:
dd:02:88:12:d7:0f:bf:f9:1c:c1:82:98:1d:e6:59:01:41:ff:
51:0f:db:1e:04:62:d5:48:4e:ea:f7:76:b4:3d:7e:a5:ec:77:
79:1c:64:ae:81:3e:78:6f:f4:24:f9:a6:1e:d4:6f:55:60:f9:
05:68:1e:64:e0:a4:ce:fd:33:21:fc:db:3c:6a:6d:ef:3c:6f:
90:c3:4e:68:bc:ec:b0:db:bb:9e:82:59:eb:e5:08:89:7c:ba:
31:86:84:3e:7f:38:80:0b:0b:03:5b:64:ea:58:8f:36:0a:f0:
d4:fc:da:f3:9f:75:71:3a:49:8b:d1:2d:48:22:98:ce:d8:9b:
fb:95:f1:5c:c1:ec:91:4e:2e:49:f8:89:6f:27:49:c9:6d:11:
ce:17:95:8b:be:48:68:07:bc:74:bc:ee:72:75:c1:2e:e7:f4:
6d:74:be:aa:a0:b6:c0:5d:1f:f1:84:3f:ef:35:06:8d:fa:07:
fc:8e:97:93:4c:bf:0c:0f:f7:a2:70:5c:c5:4f:ff:94:47:09:
12:dd:f2:01:b4:05:c3:d9:13:95:f6:26:fb:a0:b7:86:e8:25:
9a:0a:8c:99:0c:a7:65:1b:e1:dd:fc:c0:95:e3:23:8d:b9:06:
db:68:45:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:49:29 2025 by rpki-client