Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: vYbBOSoSRA3WouZJ1kklxwIXVzKbAuWwMyDaj4Ki7d0=
Subject key identifier: 55:91:A6:CB:17:E6:BD:9C:60:A7:1B:A4:FB:E1:3B:CC:16:80:B2:FB
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 0196BC6DC2B9B930BD7F7203A184562283F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 9E
Signing time: Sat 10 May 2025 23:00:31 +0000
Manifest this update: Sat 10 May 2025 23:00:31 +0000
Manifest next update: Sun 11 May 2025 23:00:31 +0000
Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: WnD8T17E3Sna0If6WXek1+h1pwjhbiPHQxJYbpFZwVg=)
3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:c2:b9:b9:30:bd:7f:72:03:a1:84:56:22:83:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: May 10 23:00:31 2025 GMT
Not After : May 11 23:00:31 2025 GMT
Subject: CN=5591a6cb17e6bd9c60a71ba4fbe13bcc1680b2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:27:32:0c:8f:b0:94:82:d9:9b:49:02:45:
3b:fb:73:88:e1:ec:6b:5f:2b:19:41:82:94:5e:7b:
d9:28:b3:3a:d2:ac:9a:24:55:92:e5:d3:b2:e1:db:
cc:f4:21:30:08:f3:2a:f3:80:1d:49:1e:96:14:09:
9a:a2:91:5b:e5:66:0a:43:f3:bb:21:a2:f8:bd:77:
2d:03:aa:f5:a6:2b:f7:3f:28:83:69:71:f7:7c:3f:
4c:aa:99:8a:ad:42:e2:a6:16:e2:53:7d:f3:7d:7f:
09:c1:b9:75:c5:4f:85:26:db:9a:8c:b9:b4:69:1a:
af:9f:ec:54:24:ee:0b:ba:87:41:dd:5c:43:62:50:
9f:ae:65:8c:0a:e7:54:f0:34:45:d8:09:33:4e:27:
83:16:fd:2e:c7:49:d5:77:74:81:24:19:68:ab:19:
39:d5:31:72:1c:87:e5:f8:3e:27:79:22:93:8c:5d:
ed:bf:26:d2:12:28:2e:9e:91:f4:7b:be:f2:e6:3d:
e2:09:59:35:80:b2:85:cb:c0:03:45:0f:72:7c:fc:
7a:46:4f:75:96:61:5b:3d:b6:c6:9d:fc:44:30:4c:
de:f5:5a:99:97:7f:9e:24:a5:30:1f:46:0a:79:ad:
6d:4b:07:7d:ac:20:10:9c:1c:37:d9:4b:52:7f:42:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:91:A6:CB:17:E6:BD:9C:60:A7:1B:A4:FB:E1:3B:CC:16:80:B2:FB
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c3:01:53:13:53:9f:f6:d6:91:6f:bb:52:79:11:fb:15:d3:
9f:89:c7:6c:f5:1a:e3:13:f5:e6:40:52:6c:ed:49:aa:dc:8e:
97:71:be:ce:d5:9b:b5:8d:cb:6a:0d:06:05:09:9e:48:f9:be:
37:5d:97:ad:a7:b5:a4:52:ca:e1:e7:bc:a2:7b:c6:ac:d4:1e:
c6:87:2f:3d:cd:54:26:ac:00:ba:e6:b5:71:8f:51:3b:99:68:
ae:9f:34:25:a8:03:65:18:a0:32:be:81:97:f9:fc:8d:f0:88:
d1:0d:35:4c:93:fd:da:14:f2:9d:96:c9:6b:e0:0f:50:98:54:
1d:29:28:fb:d8:d7:09:fa:d2:13:34:74:38:59:52:6e:33:5e:
37:f4:43:62:36:d0:a3:78:e4:45:04:ad:5e:ba:9b:72:fe:55:
08:3d:84:56:5e:69:9b:cf:96:53:3a:34:f7:57:37:09:5e:e1:
0a:5c:94:d1:ef:5f:04:b6:6e:32:0e:b0:24:3e:d1:dc:fd:b1:
74:3a:89:06:d6:20:59:9c:d4:d4:5d:ef:9a:fe:7a:68:67:23:
ab:33:4e:eb:2f:88:29:af:f6:80:2d:fc:27:a0:20:17:73:ab:
d7:6d:0e:29:46:f0:7f:43:2a:08:80:69:49:9d:3f:ff:7f:5d:
16:a9:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:12:23 2025 by rpki-client