Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: 4mdv9njTpWzBqGii8L8A+zQPjQ7RXA+JKbzNEZrxJeQ=
Subject key identifier: 9A:6E:BD:3D:05:CC:DE:5C:AD:7D:B7:8A:C7:8A:0E:9F:FC:7A:65:90
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 0196A8B09D11A662649004671718B12D3984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 03:01:08 +0000
Manifest this update: Wed 07 May 2025 03:01:08 +0000
Manifest next update: Thu 08 May 2025 03:01:08 +0000
Files and hashes: 1: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (hash: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=)
2: Cefp2MinUNICkZh50zBZ0en6wPE.roa (hash: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=)
3: IUaglXMoCfWHYoEHDvfMOLW0gCo.roa (hash: SIDwg/N1xEcZG6CVXI1MxQJ23X7MPqohUnh5tpikeYs=)
4: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: jzW+5ZT1V3mAST69+0CPSP+YLNCwfPs3XMFru3AnNow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:9d:11:a6:62:64:90:04:67:17:18:b1:2d:39:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: May 7 03:01:08 2025 GMT
Not After : May 8 03:01:08 2025 GMT
Subject: CN=9a6ebd3d05ccde5cad7db78ac78a0e9ffc7a6590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:5a:f4:f4:b3:67:38:03:db:07:42:f5:0e:
15:62:cf:e7:6e:72:21:42:75:d1:e9:81:2c:04:94:
2d:28:cb:81:fd:df:52:4e:94:ed:d7:b7:2c:18:a7:
37:31:85:5a:bc:e2:71:a9:df:a1:a4:f6:22:f9:92:
13:a9:05:e9:58:f9:89:8d:34:bc:bd:1b:bf:bc:36:
38:35:62:1b:ea:12:75:32:c6:ce:18:9b:43:ef:2f:
37:a1:91:0c:74:50:7f:b8:b5:34:d5:d9:59:9e:62:
d5:39:2c:92:df:a6:d2:e2:be:46:c0:52:1b:83:19:
d2:10:e2:bb:95:00:f3:11:54:93:db:6d:1e:73:7c:
fe:23:eb:31:2e:a5:6f:ee:14:41:0f:70:6c:b6:08:
5a:f7:86:38:cd:08:b2:6d:9a:f7:47:44:5c:57:b1:
f7:f4:13:85:8c:cb:68:16:cc:86:70:57:1c:87:b7:
34:31:1e:a3:de:02:8e:cc:bb:52:a8:9b:4e:79:11:
df:77:42:c0:37:ac:ad:71:fd:97:c0:64:f1:08:d5:
69:8a:18:3a:26:b0:8e:17:66:8f:ce:79:08:cb:46:
8a:8e:39:cd:e4:a9:8c:87:84:13:8b:33:c7:bb:e5:
29:7b:3e:dd:70:ec:07:b5:3c:b1:54:73:ed:2e:aa:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6E:BD:3D:05:CC:DE:5C:AD:7D:B7:8A:C7:8A:0E:9F:FC:7A:65:90
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4a:e0:ef:e6:b9:7c:95:a4:51:dc:38:db:c1:75:6b:0f:69:
a9:7f:d1:d9:b7:e0:9e:14:eb:00:db:7c:dc:5a:c4:93:69:5f:
89:45:8e:cd:0f:32:80:82:9f:6c:6b:a0:43:de:c8:d1:35:eb:
98:94:11:4e:fd:4b:11:5b:11:27:a6:84:f4:5a:c3:a0:e4:75:
1e:e5:e0:02:75:ad:11:46:4a:99:f5:27:5f:90:90:6a:ed:f6:
cd:2a:f1:65:a1:60:ff:8e:8b:9c:7b:fe:9d:ba:cd:30:8d:92:
a3:50:c0:ff:8d:21:49:fd:b2:06:77:6e:1b:8d:03:3d:c8:30:
91:a2:8a:2f:9e:e4:99:93:66:be:35:51:40:1f:a5:64:86:e0:
ae:56:b8:2b:1f:39:27:e3:f9:85:8d:28:29:97:af:5c:66:34:
78:6d:ae:01:7a:28:06:cf:fd:2a:21:01:e6:65:bf:6c:8a:12:
13:56:b7:74:47:22:8e:2b:5e:bb:cf:76:8c:10:78:5d:39:19:
60:36:c3:35:68:17:6d:d9:c4:28:51:f9:3b:13:c8:61:17:87:
f6:34:67:7e:19:af:c8:8e:21:61:47:d2:6f:bd:3e:4a:72:9d:
2d:26:3c:b1:69:4c:af:4b:98:7a:4b:8f:31:ec:5e:15:8c:cf:
47:47:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:37:01 2025 by rpki-client