Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier: KiwEUFcG4MONNIOgzaICYSXN9au0doUj3TTZas79lTc=
Subject key identifier: 41:C5:A8:7A:40:E6:22:6C:B3:4C:06:A6:4A:29:D1:33:42:0D:79:80
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 0196BA11FD1FE16E9232AD89D4BD784B11EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number: 0D76
Signing time: Sat 10 May 2025 12:01:03 +0000
Manifest this update: Sat 10 May 2025 12:01:03 +0000
Manifest next update: Sun 11 May 2025 12:01:03 +0000
Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: RxFag7OK/G+xPnC+VO4bkeRsKnOl0ywfCXfRGSpN9lg=)
2: PmVcb6mc4PNxZC_ptgP_O-XbGLI.roa (hash: pKGXoSvQeFa7SbcSS7sBYIQ1DYaO2+BzF5Gj11hr5Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:fd:1f:e1:6e:92:32:ad:89:d4:bd:78:4b:11:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: May 10 12:01:03 2025 GMT
Not After : May 11 12:01:03 2025 GMT
Subject: CN=41c5a87a40e6226cb34c06a64a29d133420d7980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:41:96:17:5f:54:a7:ba:e5:16:3e:25:78:
16:72:cf:12:74:a1:75:76:c4:99:c9:5b:d3:0b:4e:
57:12:40:84:58:40:d4:a9:e2:10:f5:cb:a0:3a:1f:
da:07:bc:c9:4e:df:84:ab:46:1e:59:bf:05:ab:d7:
8d:e2:88:79:10:69:ee:ec:de:fc:7a:78:23:77:08:
bb:77:c5:75:08:e2:df:f1:1f:2e:f4:42:8b:34:43:
1b:8b:53:fb:86:5b:e4:45:93:9c:78:22:35:93:f2:
7e:15:b4:9d:ee:c1:44:63:1f:ec:f4:f6:77:bd:89:
5a:3a:55:cd:9a:d5:b4:db:16:db:1a:86:09:c5:88:
3f:9f:09:68:66:9f:dd:60:dc:03:e4:5a:e7:53:fb:
30:06:57:67:ad:9e:d4:86:64:77:85:f0:6f:89:c3:
c2:d4:d0:55:50:6f:74:32:2c:af:05:bd:16:8b:08:
41:06:fc:8e:5a:09:71:b7:b2:b1:27:a1:85:f4:71:
68:ed:9f:f3:bd:08:f8:90:58:f8:8c:33:ed:fd:01:
e2:2d:f0:f5:50:5d:10:f3:a5:99:04:d9:ca:d5:ae:
1c:07:03:a9:5b:88:60:a9:b4:a8:cd:0b:c6:91:c6:
04:fc:43:c9:cb:a0:7e:05:89:c6:22:32:0a:81:db:
9a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C5:A8:7A:40:E6:22:6C:B3:4C:06:A6:4A:29:D1:33:42:0D:79:80
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:20:c8:83:87:a9:5f:43:cb:5a:7d:e2:0a:31:2a:48:ed:c0:
81:e1:80:ef:39:41:dc:63:ab:ab:69:b0:c3:02:02:4d:02:c0:
ae:40:4e:4f:2c:12:7e:b1:b4:f3:65:f6:1b:9f:b3:a2:4a:7b:
71:eb:25:d3:14:4a:16:a7:37:da:f7:61:12:15:54:de:e9:f7:
25:7d:dd:c6:da:1e:f0:ab:ce:09:ee:a8:fb:ec:31:20:01:b0:
96:46:ca:c7:78:27:7f:ce:d7:4f:61:4c:8c:11:37:04:ff:99:
6a:b1:8a:43:7e:b3:b1:49:ee:cd:40:50:22:75:10:86:07:6b:
2c:db:12:10:74:af:ee:1c:d1:a1:27:46:56:98:14:00:11:b2:
0e:c5:d3:e4:2e:fa:75:f2:9c:cb:2b:e3:d2:91:e3:ba:fb:c2:
a9:9f:91:57:e4:b0:67:cd:ce:64:42:cf:57:76:79:ac:34:c2:
73:9c:59:e4:78:55:d4:3f:3a:e4:27:ed:44:d9:2e:4c:e9:c0:
fa:86:2a:cd:c3:b5:9d:bb:22:bf:ea:bf:ff:cb:1f:6b:05:9e:
65:d7:00:b0:9c:a5:b5:8a:42:89:8a:5a:da:7c:e2:99:d6:21:
d0:ec:4f:7d:df:fe:ba:bc:ef:f3:89:f6:bb:9f:01:03:5c:49:
0a:e6:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:07:56 2025 by rpki-client