Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: TUoGrYvNGvb/WxQzHnoTYxtCEUNomGoXfBcE10ULAu4=
Subject key identifier: 49:73:40:24:8F:A7:C1:06:B1:45:1B:96:76:AE:4F:04:A5:56:28:C8
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 0196AB4380CDFCF6157DADDDC139F38CB520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 0DA9
Signing time: Wed 07 May 2025 15:00:49 +0000
Manifest this update: Wed 07 May 2025 15:00:49 +0000
Manifest next update: Thu 08 May 2025 15:00:49 +0000
Files and hashes: 1: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: JJjTM1j45zAp0vH6AC7uylf3natKqrFRtrQbfj/JOy8=)
2: ZIEntIvRdoyNG_9f7umqM8GaOP0.roa (hash: fyIclvXxfmafIM00Oljz1bkGgUIAKrrEkFW8CDlF9q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:43:80:cd:fc:f6:15:7d:ad:dd:c1:39:f3:8c:b5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: May 7 15:00:49 2025 GMT
Not After : May 8 15:00:49 2025 GMT
Subject: CN=497340248fa7c106b1451b9676ae4f04a55628c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:91:6b:ba:60:cd:e0:0a:04:45:24:36:f4:
32:94:70:db:f9:1a:a5:a7:49:3d:3a:80:23:f7:5e:
fe:e3:fa:81:09:05:54:b8:f2:de:58:14:64:9c:35:
60:bc:53:1b:57:be:d2:47:cd:d4:d1:63:95:64:38:
cd:29:e4:7f:92:2c:fb:ae:d2:87:dd:02:ba:b4:e0:
f3:08:02:b1:8f:e3:ff:76:6a:0d:fb:bf:d5:76:7b:
23:0a:9f:e3:7c:5d:04:0a:aa:b5:ab:f7:d7:51:57:
f6:cf:7a:8c:5e:17:49:ec:c2:a1:f0:bd:e0:83:90:
2c:06:d6:86:ff:e3:a1:ab:56:e7:ac:cf:e5:18:06:
04:93:d6:fa:42:9b:9c:b2:e1:4a:ad:33:f7:8f:57:
94:46:9d:b2:b8:d9:03:d5:41:a2:84:f8:ce:f0:ce:
e0:a0:a0:59:e6:ee:94:da:65:29:bd:6f:c8:37:6e:
fe:22:06:69:86:92:ad:ef:23:25:96:46:68:9e:84:
90:f0:6e:e0:83:89:7b:bf:46:43:b2:32:01:43:be:
0b:6c:a5:3f:8d:bb:60:0a:3a:d0:f6:7a:2a:ce:97:
bc:6c:ce:e6:b2:80:58:1f:1d:8d:6c:9f:09:26:f7:
82:57:59:e3:be:0d:ca:4d:9e:1b:f1:4e:8f:ec:cb:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:73:40:24:8F:A7:C1:06:B1:45:1B:96:76:AE:4F:04:A5:56:28:C8
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:80:47:b6:91:d0:60:79:76:88:e6:74:e9:d1:29:86:ff:49:
98:b3:63:9e:ca:29:c2:e3:a0:57:73:ac:22:2a:f6:69:60:56:
41:2f:62:bf:da:cd:89:ef:88:29:db:31:a3:fb:a9:1d:67:27:
d6:e8:75:fb:70:cb:6d:e5:7e:51:6b:04:a6:9c:f7:1c:bb:86:
85:b7:1c:3b:0d:fb:81:af:d5:e6:fb:54:a0:f6:de:77:9e:ae:
8e:c8:a3:f9:9b:70:78:52:cc:ac:23:59:5b:c7:cb:1b:6f:41:
10:88:74:b6:a3:ab:a5:64:7d:1c:d5:73:0b:75:18:35:54:8b:
36:99:40:49:01:b3:0b:ef:28:f3:22:bf:28:8c:db:cb:52:02:
bc:59:b1:bc:f6:19:af:2d:5a:ac:cc:5f:d2:c4:06:b8:6b:29:
91:dd:83:48:77:cd:08:4d:f5:93:1a:cc:1e:bd:b5:29:4f:80:
31:bd:89:8e:1f:47:04:3b:9d:e3:a1:73:6a:8b:4c:d7:3f:08:
78:4b:9c:f8:c9:6e:e6:9a:a0:71:70:6d:38:8c:45:d3:be:f6:
70:3b:76:d6:2a:af:91:d9:84:c1:40:3b:06:67:84:bc:ec:34:
50:6a:a3:3d:0b:42:59:76:1b:ad:0f:0d:68:d5:a6:f5:23:9c:
f4:04:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:42:37 2025 by rpki-client