Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
File: npWhGdnBpdbj8-Ifb6hj2HouSw0.mft (raw, json)
Hash identifier: 4xVHv7jOWyLrjKN7w2mOdE7mo8rX9wTevltgOAGDErE=
Subject key identifier: 2B:5C:83:73:9D:94:1B:43:8C:74:ED:F7:0F:D4:C8:45:D6:6A:8F:86
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 0196C3B9C0FC5A4C30A273B8829EC8A0648F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
Manifest number: 1138
Signing time: Mon 12 May 2025 09:00:52 +0000
Manifest this update: Mon 12 May 2025 09:00:52 +0000
Manifest next update: Tue 13 May 2025 09:00:52 +0000
Files and hashes: 1: NZjfqu9x3wDiLJo6GWe02XnKyKc.roa (hash: qGIOcPlEtKKS51xxkiaAUzuK860Uixd+cejLEfWAaRA=)
2: npWhGdnBpdbj8-Ifb6hj2HouSw0.crl (hash: Spsgkbf+WvszAhj/Gmofci9XEnrW/Rv8rQ5xl4Ezohs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:c0:fc:5a:4c:30:a2:73:b8:82:9e:c8:a0:64:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: May 12 09:00:52 2025 GMT
Not After : May 13 09:00:52 2025 GMT
Subject: CN=2b5c83739d941b438c74edf70fd4c845d66a8f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:1f:39:9d:00:40:61:30:22:6b:4d:99:bc:
7f:c9:7b:88:de:b5:2e:e5:4d:0c:47:50:d9:7a:e8:
c7:80:46:c2:d6:03:22:57:78:a3:d4:c0:3d:4d:44:
85:7d:28:68:0f:e7:ce:86:e6:74:d5:c9:e1:27:cd:
9b:1c:a1:30:13:73:5c:d2:6b:ce:af:58:a2:3a:9e:
2b:14:00:db:65:94:25:e1:92:5c:75:05:9d:f3:2e:
50:c7:04:58:a1:52:0b:ac:ab:53:3f:45:76:93:22:
e5:24:54:dd:e6:de:17:e9:a1:45:5e:70:ac:d2:d4:
13:83:fb:c9:ca:ce:78:f7:ea:17:62:92:f5:ca:0f:
12:6b:37:09:5c:63:a4:ab:8c:d0:70:e7:30:09:90:
63:51:a9:50:a8:0b:67:e1:de:94:a7:ff:82:c6:57:
ee:c6:1b:e5:ba:3b:07:02:8c:a1:46:b5:02:0b:ee:
1f:55:a7:bb:bf:04:61:d6:c5:6d:a9:5f:b4:25:93:
56:6a:cc:c6:79:07:b3:24:f2:41:80:c8:60:0a:dd:
2c:b3:47:c4:5e:70:94:6b:2e:3f:69:46:53:fe:82:
9f:4a:6f:53:10:69:67:b7:22:23:9f:57:48:12:df:
31:f5:95:63:ff:55:f0:e1:a1:67:08:84:d8:bc:03:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5C:83:73:9D:94:1B:43:8C:74:ED:F7:0F:D4:C8:45:D6:6A:8F:86
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:18:f8:28:d2:49:65:4b:f9:8f:ed:64:21:e1:bd:6f:19:1a:
67:39:a8:af:0d:19:f0:85:7d:92:3d:7c:82:03:7e:ad:fb:91:
ab:55:19:f5:f1:e1:99:45:af:03:fa:51:cb:1d:3f:70:18:b1:
46:48:7c:1c:9a:a1:bc:ec:54:f5:b1:1f:90:72:00:f0:c5:cd:
1e:9a:35:81:1e:95:a2:fc:5e:a9:ec:60:ef:d0:7e:b4:3c:c0:
4e:45:68:32:68:11:2d:0f:d4:0b:eb:82:c1:8d:81:e1:d4:6a:
8d:81:3f:6e:2f:a6:9a:0d:b4:52:58:e1:0a:cb:c7:e5:8b:db:
eb:a9:98:a6:3a:c3:de:b9:97:5b:b5:bc:39:8b:0b:63:ee:b1:
d4:8c:8b:77:09:27:f3:4b:fe:b3:53:e0:23:9e:0e:61:d5:eb:
1f:df:78:fd:c2:8a:8f:29:66:6b:3b:24:d0:41:b4:ac:d3:a5:
8e:17:cc:f5:75:bd:78:4f:0a:97:14:78:f0:d1:0e:d8:8d:a8:
dc:20:06:df:ef:22:47:f8:05:0d:9f:27:d0:6c:ff:a4:2e:c5:
2f:fc:62:5a:ec:26:9c:27:fc:a8:32:3d:e8:1a:0c:f4:c5:17:
ee:d5:ee:6a:37:eb:2a:3f:c4:80:34:35:e9:95:fb:7a:16:89:
aa:24:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:12:56 2025 by rpki-client