Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
File: NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json)
Hash identifier: XwcXr0IEMT46InvKYyZhG8t1i5AAf2QZrKYO2czKdvI=
Subject key identifier: D4:48:19:B7:E4:17:3A:12:C0:6B:F7:77:4C:9E:C6:B3:3D:E9:61:F4
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 0196C615F38C1FE6E1112513171220CF5D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
Manifest number: 0EFF
Signing time: Mon 12 May 2025 20:00:49 +0000
Manifest this update: Mon 12 May 2025 20:00:49 +0000
Manifest next update: Tue 13 May 2025 20:00:49 +0000
Files and hashes: 1: IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa (hash: fyR22c3qbngtIbooNJXlmC6fXpgIjnWVTMNZ/hhGG0A=)
2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: SkcjbTcuG/U6UXgq4DJrQJhclW4O/rnGilYq6CD24Nw=)
3: SAAncdb2H87xzD0WkojsMdkjI9E.roa (hash: bzjggaHNN8SzirhLiuBFGlBjgMu/vnVg8ZfnlYMY9GY=)
4: _E9iapjx7rmdCjMi6lOxJAzw41c.roa (hash: XzeBU1MqaK56hZttRGiRoj2k5rsX6aCywVY+pFC+b8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:f3:8c:1f:e6:e1:11:25:13:17:12:20:cf:5d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: May 12 20:00:49 2025 GMT
Not After : May 13 20:00:49 2025 GMT
Subject: CN=d44819b7e4173a12c06bf7774c9ec6b33de961f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:f7:b8:33:bd:07:85:f3:1f:14:af:34:6e:
7f:0a:44:0d:65:b4:11:ed:44:1a:cd:68:78:94:8c:
a4:60:a2:27:87:9f:ef:cc:0d:82:93:2b:4c:aa:07:
9d:75:89:38:54:24:c6:cb:2b:7a:af:8b:f4:83:32:
18:43:32:4b:03:02:87:8b:c2:12:7d:ce:79:32:78:
5d:14:2b:ca:85:0f:5a:ad:1c:a3:58:15:86:39:ae:
e5:9d:46:a4:6c:0d:74:a0:67:62:8f:48:8b:9e:43:
3c:db:a0:94:8a:59:04:0b:08:6e:33:24:8e:01:5f:
3d:07:bc:3a:20:b9:60:ce:fe:c6:f3:0b:f0:63:81:
33:90:f9:c5:e5:5b:2d:f9:c5:0e:39:be:12:6f:f7:
d7:9e:59:3e:95:3a:3e:33:c0:c0:e3:af:2f:d2:03:
10:7c:6e:45:d6:89:04:bc:67:d8:58:b7:e0:17:1f:
9f:7c:fd:45:a8:aa:24:2b:94:e3:0a:b9:ed:42:00:
ea:08:06:e0:c3:22:97:2c:77:74:cd:06:7d:15:9e:
a0:26:81:a4:a6:60:16:9c:fa:b3:08:fa:79:0b:ad:
e6:73:a0:4c:93:09:04:81:28:49:20:2b:66:48:a9:
c5:93:cc:9c:5e:72:18:24:8b:03:4a:5e:3a:82:39:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:48:19:B7:E4:17:3A:12:C0:6B:F7:77:4C:9E:C6:B3:3D:E9:61:F4
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f4:cf:9b:7b:07:c6:fc:0f:49:92:30:a9:69:50:e1:d8:27:
86:26:80:42:d1:7d:0d:a3:da:30:a0:2f:ae:4f:7f:06:a8:80:
c9:76:f2:31:78:2a:f9:a8:be:ce:64:5c:13:9b:7a:be:9b:1e:
21:d0:77:d4:11:e7:c1:ce:93:20:73:db:52:8f:b0:12:ba:37:
7b:df:9d:d9:1e:8c:03:ba:e8:3a:7f:cd:71:15:c8:f4:0b:da:
e3:73:b5:33:64:0e:0b:06:95:c3:2b:90:33:20:c8:eb:21:fd:
74:62:c6:d1:85:36:0c:ae:9c:ee:5f:d3:e8:a2:53:a9:e3:03:
82:09:04:3d:9d:fa:fc:6e:0d:3a:7b:82:e4:5e:21:d4:00:1e:
e0:49:2c:7a:2e:c5:d8:55:a4:2d:05:5b:04:96:31:ad:9e:7f:
06:3b:42:9e:04:77:c4:29:f5:b3:7d:ef:67:f2:42:eb:a8:0a:
a0:f8:a2:56:07:86:72:24:b5:ed:d7:9f:8d:3b:22:5c:9a:75:
b2:1f:03:f9:f8:29:f5:4d:e3:25:79:87:61:b4:08:53:a3:6c:
3b:77:8d:80:63:16:a7:c5:1d:56:11:a4:0b:a1:4b:c7:ef:f8:
a1:06:0b:f1:67:6e:85:26:9f:c2:50:25:ac:cd:61:44:24:98:
39:23:b9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:17:15 2025 by rpki-client