Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
File: NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft (raw, json)
Hash identifier: 2RMVkUUYS6Y/R6S1Z+af7q3BUpocDFuKTLs9bv+K7M0=
Subject key identifier: 2B:DB:40:B4:55:1A:CB:C6:97:CC:AF:98:90:87:1F:8D:CF:22:F9:17
Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877
Certificate serial: 0196BDEE74F954773A03B564EFFE3594723D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
Manifest number: 1036
Signing time: Sun 11 May 2025 06:00:43 +0000
Manifest this update: Sun 11 May 2025 06:00:43 +0000
Manifest next update: Mon 12 May 2025 06:00:43 +0000
Files and hashes: 1: 64AufSKo0ctGsskBfGJHYgegDUM.roa (hash: TxQbijMyiwaYhEgR6gv3I6pa/f1D2b/JYXZHussR2b4=)
2: NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl (hash: 1NjcO1on15wYfSWM9q3ILfwGQhu07it999lFWuZXT7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:74:f9:54:77:3a:03:b5:64:ef:fe:35:94:72:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1a573915153de82890eae1303067fa68b2877
Validity
Not Before: May 11 06:00:43 2025 GMT
Not After : May 12 06:00:43 2025 GMT
Subject: CN=2bdb40b4551acbc697ccaf9890871f8dcf22f917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:c6:84:35:d0:5a:40:6b:e2:c7:66:92:cb:
14:95:db:45:1e:37:09:0a:d0:10:55:a3:89:72:38:
94:56:5c:28:34:b3:95:49:d1:d6:b6:bb:92:64:33:
c1:6d:1a:49:75:73:45:90:b4:d4:e1:60:10:aa:a7:
64:94:f0:8e:14:e6:96:87:20:45:bf:e4:f5:a6:be:
1e:14:c9:60:11:17:25:54:11:56:3c:3a:6e:1f:55:
ff:ae:bd:6d:e7:c1:57:c4:0a:a2:02:a2:35:12:f0:
b2:13:76:a4:23:00:52:51:0f:86:06:6b:82:cd:35:
cb:4d:5b:d1:e7:45:c7:0d:02:d4:55:28:2d:9a:c0:
62:06:3e:f5:f4:a4:2a:d6:19:07:f8:03:d9:bd:50:
ae:79:1e:47:16:02:8b:a3:de:0d:cc:1e:21:bc:af:
bf:4f:0f:ce:5d:f0:21:09:43:25:2e:f5:bc:69:ac:
0f:2f:8b:d3:68:9c:1b:1e:3a:1f:2f:53:a8:a2:1f:
c8:04:db:5b:3d:3e:5d:da:17:e9:3e:94:b3:64:e3:
d4:73:58:5c:c5:8e:ad:9a:2d:84:5f:61:e7:d7:5c:
4a:8a:f0:15:af:48:15:1c:e6:dd:5a:15:a3:a5:c8:
48:f7:b5:ff:9e:99:79:26:7b:48:e5:a8:97:a6:1b:
62:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:40:B4:55:1A:CB:C6:97:CC:AF:98:90:87:1F:8D:CF:22:F9:17
X509v3 Authority Key Identifier:
keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9c:82:34:6a:a8:a0:cf:dd:76:98:00:a3:cb:ea:28:64:90:
a5:27:e7:3d:bc:e9:e8:97:6e:46:04:3b:ba:1a:dc:bf:6f:d4:
ea:b9:bb:90:e1:29:7b:a4:6d:62:0b:bd:61:b6:2e:13:f4:c5:
d9:d7:66:50:15:66:f4:bf:65:28:79:74:a1:02:ce:a9:7a:cc:
cd:33:d8:5b:c9:7f:e3:56:61:1d:bd:77:22:e3:2a:f3:19:3f:
13:0d:67:70:a0:a0:b5:88:76:b1:33:4f:1d:e0:9b:9c:49:fd:
9a:21:62:85:65:0f:f9:69:ae:e0:6b:cd:28:ae:b6:5b:bf:7b:
41:25:27:ba:4e:20:d6:1a:cf:96:5c:f6:0c:9e:2c:67:c4:60:
25:94:39:aa:6d:a4:5f:42:72:65:a6:f2:88:40:52:22:06:dc:
ad:9d:ce:70:b3:72:c0:8b:15:e6:2c:ee:35:3c:95:bd:ed:e1:
13:9f:15:22:f9:cd:7a:15:85:be:0e:86:e7:e0:4a:ab:1c:6c:
7b:72:e3:9b:11:a5:40:b5:38:47:3c:ae:e4:b7:3d:76:7f:1c:
a5:22:c7:b9:6f:ff:a0:21:60:ed:3a:ae:66:ff:79:4a:17:d1:
23:a8:b3:1b:16:ef:6a:a4:4d:9c:05:dc:a5:bb:f8:c7:47:c4:
68:e2:25:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:52:23 2025 by rpki-client