Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
File: NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft (raw, json)
Hash identifier: hWneesyjTAMu5aGwr/WnUu6TOzdpeyp41XvWGzgpK84=
Subject key identifier: ED:12:50:DE:DB:69:EC:D1:71:8B:99:AF:04:12:C0:7C:12:21:32:6A
Authority key identifier: 34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
Certificate issuer: /CN=34012343a62f3f09b55cdbc01e75c38212a235df
Certificate serial: 0196C570E3DDA3FFEF7ADF12DC72F81CACDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
Manifest number: 0D3D
Signing time: Mon 12 May 2025 17:00:31 +0000
Manifest this update: Mon 12 May 2025 17:00:31 +0000
Manifest next update: Tue 13 May 2025 17:00:31 +0000
Files and hashes: 1: NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl (hash: bMrQRya6ZbM8gLWVSMaTyZ2NePYyGXh/HsTaMcIls+E=)
2: hRAHaXw08T46yQXdPdRGo5FEyKc.roa (hash: kanS0GeR3i8daBZU7h/NZ29VRbj73ZfNj0diMdbJ7lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:e3:dd:a3:ff:ef:7a:df:12:dc:72:f8:1c:ac:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34012343a62f3f09b55cdbc01e75c38212a235df
Validity
Not Before: May 12 17:00:31 2025 GMT
Not After : May 13 17:00:31 2025 GMT
Subject: CN=ed1250dedb69ecd1718b99af0412c07c1221326a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:ae:32:30:69:68:26:8d:95:69:d1:ef:e0:
d1:54:6e:a8:59:ef:d9:d6:73:18:b0:e7:1e:02:24:
ea:e4:37:26:df:4c:ad:7b:c5:fc:a7:4f:0a:65:29:
6c:d9:e0:c8:16:4d:3f:b1:de:eb:68:1a:7c:c1:9c:
54:51:a4:ae:16:53:1e:50:bc:c8:7e:e4:d9:dc:2a:
a2:f9:1f:c6:b6:42:2f:26:f4:f9:4d:bb:e9:0f:93:
c4:d7:4f:1e:17:71:87:19:f9:9d:b3:6f:04:a8:76:
6c:ba:8c:ca:cd:ce:6c:b1:72:79:57:23:99:34:1c:
6a:03:3b:94:93:79:8f:c8:7c:cb:1d:e5:31:1a:a8:
9c:70:da:f5:b4:86:1b:c0:35:5f:c2:63:2b:31:f0:
ed:66:5d:a3:74:1c:75:1e:6a:f6:fb:ab:e3:1a:38:
dc:14:5a:2c:32:2c:2d:60:b8:9c:79:d8:07:8b:1a:
78:00:98:6d:3f:bf:e6:c4:6a:0a:91:9b:16:74:48:
79:25:07:d3:8b:45:c3:4b:0f:22:79:2a:ae:ec:c5:
ea:0f:d3:6d:08:b2:6a:bc:98:0a:05:b6:90:c5:23:
44:3d:7a:fc:d8:d6:f6:79:fc:e5:d3:13:90:ef:e2:
58:80:7e:48:3b:d9:ed:71:1e:66:ab:10:fa:c9:dd:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:12:50:DE:DB:69:EC:D1:71:8B:99:AF:04:12:C0:7C:12:21:32:6A
X509v3 Authority Key Identifier:
keyid:34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:21:f8:60:19:be:31:ff:ca:bd:d9:0f:6b:28:18:73:2c:1a:
40:b6:a5:a2:60:5a:31:cc:32:8d:bf:d1:b2:ce:83:4d:c3:8c:
7d:99:44:c5:29:65:c8:0d:ae:29:44:1b:1d:67:6c:44:2f:1c:
43:45:43:26:2a:5b:27:fb:f3:63:ee:26:86:13:50:e9:15:f0:
d0:0c:1f:a5:44:16:cc:8a:f9:2c:63:bf:3a:3d:ce:96:8e:07:
19:bc:5c:8f:c1:7b:5f:ca:a2:bf:de:dc:a3:bc:d2:57:7c:95:
e0:55:b4:e5:84:78:03:55:bd:6c:16:d4:72:e1:3f:61:f9:a8:
53:e9:ee:0a:13:20:e2:6d:f4:43:ad:f3:97:6b:6f:b6:8b:e9:
0d:aa:77:75:be:b6:0e:3d:b9:6b:fd:b4:d1:78:bb:94:fd:3d:
8a:21:18:fb:72:3d:0f:a3:23:05:82:ae:6d:0f:27:5e:ef:43:
b4:2d:3f:83:02:8e:c1:d3:9a:18:ab:06:c4:eb:db:03:12:b2:
65:da:00:60:20:85:d7:39:bd:65:99:2d:91:52:e2:9c:34:17:
18:d4:53:20:fa:6f:33:d4:cd:8a:ec:b1:2e:97:78:8d:e3:47:
cb:4a:97:83:40:cd:e5:1e:58:94:ba:56:8d:98:36:d0:02:0e:
01:df:1b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:06:37 2025 by rpki-client