Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
File: NwLYaw5xBmjqZtp9zRsUDeweDD0.mft (raw, json)
Hash identifier: P+6bbw9cW8J2vsNovUf78gwyIg1eiq0y9tn2lj7kkGk=
Subject key identifier: D5:71:99:1F:25:53:6F:2D:FE:98:8E:9A:75:93:64:5D:E1:C8:E6:CD
Authority key identifier: 37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
Certificate issuer: /CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Certificate serial: 0196C83B2EA9BDBCEA52031D24D3A8454971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
Manifest number: 123C
Signing time: Tue 13 May 2025 06:00:43 +0000
Manifest this update: Tue 13 May 2025 06:00:43 +0000
Manifest next update: Wed 14 May 2025 06:00:43 +0000
Files and hashes: 1: 1-S9axjiECoFVFbxoTLP7k8hUrKw.roa (hash: +KpSmdQY0uaMjR1ylAxprXZXg3kf0ZtjvDy8OppLqso=)
2: NwLYaw5xBmjqZtp9zRsUDeweDD0.crl (hash: OY5Bf+n4yyNDo8eTldQE7eH86paX4BXWMFG8stETNJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3b:2e:a9:bd:bc:ea:52:03:1d:24:d3:a8:45:49:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Validity
Not Before: May 13 06:00:43 2025 GMT
Not After : May 14 06:00:43 2025 GMT
Subject: CN=d571991f25536f2dfe988e9a7593645de1c8e6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:71:d8:f6:49:a6:dd:46:f2:a0:b0:13:83:
c1:2b:05:67:25:62:17:a5:54:53:a5:d0:6e:07:e8:
01:a1:23:14:ad:f5:02:9a:9f:e9:ab:c0:33:d3:67:
90:c9:b7:b3:54:29:ae:4e:0e:08:3e:c7:4b:4b:ad:
f2:62:be:eb:1e:f8:4c:8c:df:89:cd:cb:33:b3:af:
b5:97:e5:0b:fb:82:3e:a8:90:3d:e2:ed:62:7f:f8:
cb:20:d5:d6:28:5a:72:a2:6f:9e:1d:48:24:55:ab:
c6:44:ea:1a:a5:df:6b:c6:38:19:b1:eb:ad:a0:e2:
66:77:50:cb:15:83:2e:c9:d2:ec:e7:cc:9c:e0:12:
c4:e6:6d:12:4a:9c:89:ad:9d:73:49:af:0f:c3:ec:
10:79:f4:ae:42:1c:77:bf:31:25:1e:dd:88:ab:2a:
fe:55:e0:25:59:84:bf:94:66:ca:f9:cd:b1:81:09:
83:ec:0c:39:c9:a5:2e:0e:e3:db:87:d7:87:2b:c3:
89:47:88:16:d2:19:9f:bb:5f:fa:21:4f:fc:9d:fe:
15:c9:89:49:00:85:a5:da:18:2d:d7:08:12:08:84:
8c:bf:2b:0f:b3:08:6f:dd:b1:0e:7b:fe:96:5d:40:
20:99:62:26:4b:c4:45:1b:26:3d:f5:34:cf:17:22:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:71:99:1F:25:53:6F:2D:FE:98:8E:9A:75:93:64:5D:E1:C8:E6:CD
X509v3 Authority Key Identifier:
keyid:37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:22:c5:59:45:8f:78:55:69:9d:e4:3d:fa:24:7a:16:7e:ef:
71:5a:d4:48:81:77:92:41:97:b8:e8:b0:4f:e6:85:41:4a:f1:
a2:8d:0c:f2:ab:e4:02:06:16:f1:82:b8:ea:94:ad:f9:28:03:
58:31:d8:79:8c:f6:f5:f9:06:da:bd:58:96:24:7e:bd:a2:8e:
9b:83:c8:96:00:01:03:86:de:21:ce:ac:14:5c:ed:9c:28:41:
28:af:9d:d8:08:58:d6:7d:dc:b7:9f:32:c3:4a:25:0a:a8:e6:
c0:08:c9:60:d1:32:f9:d6:97:33:9c:40:eb:af:ed:95:fb:80:
3c:f5:a3:62:b9:96:44:2e:5a:01:94:81:7d:73:64:64:f8:b5:
9a:57:b4:1a:15:fa:e5:4d:f6:35:0e:56:b1:23:53:20:44:12:
49:2c:c5:0d:ff:94:1f:d1:9c:59:de:50:1d:86:b8:f8:bc:a5:
42:61:24:5b:53:77:b9:d6:ed:79:1e:ce:2d:1e:e3:c2:6b:d6:
b3:dc:a1:88:fe:39:50:15:cf:47:c9:c7:5a:f3:38:17:62:9d:
2e:56:63:98:6c:04:e6:43:bf:bb:eb:eb:d5:f6:eb:eb:eb:07:
7c:f3:af:ac:17:8f:73:2a:22:9e:83:6a:22:d9:10:8a:e2:f7:
39:6b:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:00:27 2025 by rpki-client