Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
File: nmw2D-XITxlWHHrpu89PnPpHi08.mft (raw, json)
Hash identifier: bUGMpb389ZtvPPYI7ZKSzVxGCKMRcdwKjHdf66rVmP8=
Subject key identifier: BA:4F:F1:27:2A:C8:43:DC:F3:E6:D6:95:70:91:40:47:84:80:BD:DF
Authority key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Certificate issuer: /CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Certificate serial: 0196BAED0F839F5126DF4758B539C59D9EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
Manifest number: 07EA
Signing time: Sat 10 May 2025 16:00:20 +0000
Manifest this update: Sat 10 May 2025 16:00:20 +0000
Manifest next update: Sun 11 May 2025 16:00:20 +0000
Files and hashes: 1: nmw2D-XITxlWHHrpu89PnPpHi08.crl (hash: 1BK4iBKncKmn7dK/ZC00hjmccmCnTiz5pAoomQvSeM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:0f:83:9f:51:26:df:47:58:b5:39:c5:9d:9e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Validity
Not Before: May 10 16:00:20 2025 GMT
Not After : May 11 16:00:20 2025 GMT
Subject: CN=ba4ff1272ac843dcf3e6d695709140478480bddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1f:6a:cc:c5:51:bf:8d:1f:cd:ad:0b:13:cc:
6b:c0:0a:cc:5c:33:f9:cd:e2:19:7c:d2:d4:24:2e:
e6:74:7d:26:93:a3:03:2e:b8:e6:de:c6:2b:45:3e:
e3:79:10:b2:1d:73:bc:bf:08:6f:bc:cc:30:11:26:
3f:15:41:5e:13:15:f1:31:f2:88:34:6a:39:4c:cf:
34:42:f1:b4:1a:5e:c1:d9:8a:7c:02:26:06:bb:db:
92:1f:42:57:7f:6b:9f:4b:9e:32:ee:85:30:a6:63:
bf:8a:62:8a:56:f2:02:03:2a:7f:cf:ed:53:97:96:
e9:ab:d6:8d:59:03:ae:e1:42:93:27:0d:c5:fe:78:
80:cc:31:4f:5e:44:c0:c1:20:fc:63:f4:ec:ba:03:
ed:60:07:a5:46:7c:de:45:3f:5e:61:14:10:c1:f1:
c9:f8:40:3b:c2:61:ae:7c:fa:5b:24:d6:6c:06:53:
9c:d3:73:de:89:64:32:b2:ea:dc:72:a1:a5:a1:ff:
74:77:fe:8d:99:e1:c4:b2:98:b0:ad:0c:6f:b8:5e:
49:f3:ca:14:e1:50:8b:58:2f:cf:b5:0c:9f:9d:3b:
ee:9e:13:fb:65:88:83:02:d2:0a:7a:15:4a:e8:44:
5e:36:5b:46:44:56:f4:c6:b6:29:b2:de:bb:59:03:
5a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4F:F1:27:2A:C8:43:DC:F3:E6:D6:95:70:91:40:47:84:80:BD:DF
X509v3 Authority Key Identifier:
keyid:9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e8:73:8e:bf:ad:4b:f9:89:c5:d5:b1:b9:98:a7:66:dd:9b:
33:4c:91:ad:64:29:d7:9d:8f:f2:f2:72:cb:75:81:b3:4e:ad:
42:f3:14:3d:7c:ad:de:90:99:5f:f3:eb:48:0b:04:17:13:88:
94:d0:89:7b:2d:5b:93:a8:c5:a4:f9:20:1e:b8:07:64:14:e6:
4a:80:9a:03:56:f3:57:bc:76:f4:ff:52:98:97:5f:35:7a:b3:
6f:9b:6b:b1:04:e2:c9:d8:30:70:cd:8f:e6:1c:0e:c9:d7:77:
30:90:74:03:dc:c5:3b:8c:c2:20:4c:ba:7b:c7:ea:90:8f:11:
8f:60:79:ce:17:80:c5:9f:5b:db:96:dd:6b:87:82:50:71:75:
7f:34:62:d6:f3:8d:e3:82:7c:89:be:18:63:5d:fe:3a:37:aa:
74:c7:99:91:bb:80:68:10:dc:ec:8d:0f:46:89:57:e4:8f:2a:
a5:e6:77:6c:0d:c0:40:3e:4c:9b:ba:5c:0e:73:f3:2a:72:0b:
ad:ea:e4:61:4d:99:50:93:12:a4:c4:80:bd:52:aa:81:0d:8c:
f5:24:c7:73:f5:73:27:dd:c4:35:7f:15:df:07:bd:31:0d:2e:
d9:83:24:ab:b2:b6:b1:80:f7:ca:8c:59:95:49:f6:ff:fa:2f:
9b:72:29:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:16:41 2025 by rpki-client