Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: GNYpkEnIRJqphs+OlNalx+qVa3emRAqrWw3rxW3NJIg=
Subject key identifier: D9:7A:93:77:87:A1:DB:61:FD:84:A2:4F:DD:AB:D5:3D:47:48:D0:87
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 0196B2584FF392CD78D22B701821B2D43664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 00:00:54 +0000
Manifest this update: Fri 09 May 2025 00:00:54 +0000
Manifest next update: Sat 10 May 2025 00:00:54 +0000
Files and hashes: 1: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: /V48cd/3hXAqdUaj/DaFiJBsOuLn3rZdEICtsXG8tiE=)
2: O3Kl40jGDsPRJGH1EFnf65-hUj4.roa (hash: aMzq4HH1WAeogtvzS32mERsBxOMZNMYLSy3wIuq38+8=)
3: fCTecUt77UHhtXHXll1piF7Zd6c.roa (hash: q3pUeUA6qW+DpXb5gimft6PsFNA4pETS9zhmS0g+5v0=)
4: hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa (hash: pY371ydI1VeBW+n9ngZnpHGBKKkDLyF2vNs37egLERQ=)
5: pFZVBmgqiU0csf9W43g6FIWRCTM.roa (hash: eUwZvrYwb50UrEhmGEwgTxwUKEPb4F3y0cFhI/MdzLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:4f:f3:92:cd:78:d2:2b:70:18:21:b2:d4:36:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: May 9 00:00:54 2025 GMT
Not After : May 10 00:00:54 2025 GMT
Subject: CN=d97a937787a1db61fd84a24fddabd53d4748d087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:be:8b:84:e2:da:2b:10:9c:88:3e:a8:e5:
47:df:79:fc:a1:8a:30:6f:7e:5e:ec:01:26:a9:85:
b1:12:c2:5f:3c:0d:95:64:5d:ea:71:ed:c4:73:ef:
ac:f3:b4:f2:28:8d:5f:40:d1:5d:23:c5:b5:ab:31:
c3:1f:0d:dc:b3:9d:c3:1a:f8:04:84:9c:d1:f4:14:
5c:93:1b:11:33:eb:c9:b5:b6:4d:fa:6c:97:ce:34:
17:33:cf:ac:dc:c0:58:d2:a8:69:db:a8:a1:df:02:
e6:e2:ef:6f:1b:10:22:50:8f:d0:49:f5:57:a5:01:
b5:01:77:10:c0:93:61:df:ac:71:3b:5f:f7:c4:51:
07:a5:fa:1d:08:09:9b:f4:c2:7c:cd:74:99:82:17:
1e:ff:4c:ec:58:71:e2:a4:1c:7e:3a:e6:c8:36:88:
41:fd:e7:b3:e0:77:60:74:be:4d:80:45:19:14:0f:
9d:91:21:63:59:ec:c2:53:84:8c:ab:b7:6c:2a:d9:
fb:77:e3:84:51:b1:2c:ff:85:c7:97:77:cb:82:0d:
7c:35:fa:6b:ef:c7:c2:70:84:2c:5a:3d:e5:83:55:
36:17:dd:05:e8:bd:3b:7b:db:fc:c0:e5:fb:73:ef:
4b:fa:e4:a0:47:a2:09:79:90:65:f0:ed:b2:d9:03:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7A:93:77:87:A1:DB:61:FD:84:A2:4F:DD:AB:D5:3D:47:48:D0:87
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a9:f2:b5:93:ed:84:d6:37:9e:f8:88:e8:b6:88:45:bb:7b:
4d:9e:81:d8:45:6e:c9:e5:31:58:07:25:00:a0:f1:68:2a:83:
01:1c:1e:be:01:0d:f9:7e:95:7d:9f:61:09:1d:77:0d:23:3d:
e3:a2:08:5b:fd:39:77:f7:ff:a2:ab:3f:08:6f:6f:3a:05:3b:
67:4f:fa:5b:46:bd:0e:10:3e:25:ed:b4:35:cc:3f:5c:b7:27:
77:f2:b4:33:14:74:09:8e:70:12:e4:80:26:ed:eb:33:e0:0b:
8c:4a:0f:d0:1e:84:cb:07:9b:1f:73:32:a8:89:c2:07:a9:05:
23:f3:81:55:f6:b7:e9:51:7b:40:e4:94:19:e1:53:b2:e4:7e:
2a:38:e9:9f:33:b9:46:5c:ae:a6:96:1a:9c:3f:30:8d:3b:a9:
67:b4:a2:9e:6a:85:6a:12:4a:c7:de:8a:6a:3f:aa:9e:aa:89:
a1:cc:78:77:da:03:06:6b:74:b5:f1:d7:51:d7:eb:62:50:a4:
5e:a1:6e:5d:ee:e9:da:74:9b:a4:23:d1:f3:bf:1f:64:b9:f4:
96:e5:09:38:94:d0:b3:ac:9f:b4:62:9c:dd:3b:4b:58:5c:38:
aa:94:9b:e7:2a:11:ea:de:5a:f0:88:db:f8:0f:ff:ee:ba:2b:
1d:a2:e0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:30:03 2025 by rpki-client