Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
File: Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft (raw, json)
Hash identifier: ieZeS9tPtxTcyu9TUEZfqkTnxiLYv6hbCQHSZ5M+cw8=
Subject key identifier: 69:C8:D7:48:67:36:6A:AD:09:8A:37:7B:D6:06:62:F2:E2:6D:2F:F0
Authority key identifier: 36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44
Certificate issuer: /CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
Certificate serial: 0196DAAED8842498DA13DBB4FE34C4F2C153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
Manifest number: 0C2B
Signing time: Fri 16 May 2025 20:00:13 +0000
Manifest this update: Fri 16 May 2025 20:00:13 +0000
Manifest next update: Sat 17 May 2025 20:00:13 +0000
Files and hashes: 1: 84tG8i7AzsbcSC45wc7jZshEjRw.roa (hash: WTaqS+mbYOTiyd8Z/4uN3P2O0v0Yj8od2qxY4V4ByWg=)
2: Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl (hash: Q77Hl8fS8UGMhrdv8udALahTR7uRV25PTfJ2CAnMeiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:ae:d8:84:24:98:da:13:db:b4:fe:34:c4:f2:c1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
Validity
Not Before: May 16 20:00:13 2025 GMT
Not After : May 17 20:00:13 2025 GMT
Subject: CN=69c8d74867366aad098a377bd60662f2e26d2ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:b7:67:05:c0:4f:6c:5b:f2:f1:d5:60:50:
39:21:d7:ff:49:e7:45:f4:ae:78:57:12:fe:8d:32:
bb:16:f7:8b:09:07:3d:ff:5d:2d:18:57:3a:0f:60:
24:28:14:35:69:69:24:e7:7b:6e:53:a5:ad:06:61:
9d:0e:63:a0:2d:dc:1d:08:23:f7:df:07:0f:d6:13:
6b:fe:35:44:3e:9e:90:f0:15:d3:3c:11:40:5d:f8:
02:e3:e0:23:e2:9c:fd:5b:48:25:bd:0e:c8:f9:db:
1e:7a:7e:4f:6b:0a:d7:e8:74:48:9a:50:b0:07:92:
73:99:cd:f3:a8:c1:a3:13:fa:23:dd:5b:d4:a7:ef:
d8:eb:9a:4b:df:68:a2:f5:87:39:49:75:e7:b3:9e:
03:e9:e9:6a:e2:70:2e:3b:14:03:1e:95:e4:6d:d2:
10:fa:b3:5d:71:83:20:04:0f:eb:31:73:e8:ff:0d:
ea:0a:81:18:e6:65:14:ac:fe:ee:f1:c3:1a:82:f3:
39:91:d8:db:ff:29:17:77:2d:7e:7b:9d:ed:31:7c:
3f:a7:a8:6a:ce:95:a7:7d:cd:ec:e8:39:51:15:c3:
05:7c:72:ae:bb:77:22:2f:0b:f0:fd:b0:83:e6:e3:
36:27:f5:bc:79:0a:e2:1e:b7:0e:fd:51:5c:b2:86:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C8:D7:48:67:36:6A:AD:09:8A:37:7B:D6:06:62:F2:E2:6D:2F:F0
X509v3 Authority Key Identifier:
keyid:36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:29:22:ea:05:74:9c:62:39:30:cc:e4:ec:a5:f3:d5:b3:5f:
ca:55:d6:2e:0a:b1:e6:d3:7f:aa:5d:ef:84:9b:75:f5:e0:35:
a9:c7:d7:0c:7a:47:39:b7:d9:fb:3c:a4:15:f0:88:63:90:47:
ec:a5:83:c2:c8:24:e2:f5:08:a0:35:82:c9:ba:56:14:68:43:
92:c3:b4:0e:8e:61:a9:a5:03:fd:cc:e9:6b:65:da:09:57:94:
3a:81:3a:86:b1:fe:3c:8a:c5:33:9e:ac:00:8e:12:3b:63:59:
00:52:dc:a4:07:c0:66:20:7b:64:3b:8c:28:64:4c:4b:d0:de:
20:91:76:44:53:f2:79:46:e9:c3:33:b5:84:0a:b6:bb:dc:eb:
61:c0:8c:29:3b:c3:d0:42:4e:79:68:42:88:b1:d4:f0:ae:bc:
46:18:87:84:15:4e:ea:2e:5d:d8:16:9d:3e:89:dd:9f:2a:4c:
cf:0f:e2:6f:87:79:df:2d:b2:39:72:fa:6e:22:26:4a:86:b1:
54:8c:fa:cb:73:5d:61:e7:bd:27:7f:35:b3:5f:a1:d4:8e:37:
8b:8f:ed:fa:3c:dc:31:62:71:3b:6c:d4:7c:11:e1:d1:a7:9a:
4d:37:29:9c:be:30:b7:c8:5a:ff:e2:3d:c4:67:94:9e:80:2e:
79:92:1d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:26:02 2025 by rpki-client