Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier: RUMYFLzF+sepXuVGLU12A0NwDaUxYYVpZHTxy+uHUIE=
Subject key identifier: E2:87:D2:49:A6:A0:09:21:5F:C1:E4:8E:46:D1:BA:8A:7D:74:40:A9
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial: 0196C94D618D7A1C3F3020603372729D00EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number: 014A
Signing time: Tue 13 May 2025 11:00:13 +0000
Manifest this update: Tue 13 May 2025 11:00:13 +0000
Manifest next update: Wed 14 May 2025 11:00:13 +0000
Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: SnRFJk00mHvOLbYUR/tfZEuviCx5oo64TViDzSZNK6w=)
2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:61:8d:7a:1c:3f:30:20:60:33:72:72:9d:00:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Validity
Not Before: May 13 11:00:13 2025 GMT
Not After : May 14 11:00:13 2025 GMT
Subject: CN=e287d249a6a009215fc1e48e46d1ba8a7d7440a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:c7:68:9d:e8:1e:ad:2f:ac:30:cc:5a:08:
ba:60:ef:39:fd:54:97:5d:47:e4:82:3e:d8:bd:df:
88:dd:12:60:82:a5:6e:61:3f:6f:db:25:f1:63:71:
43:a5:7d:21:07:c7:cb:2f:6c:41:92:13:b6:cb:fd:
6e:09:af:9d:81:a3:d9:a4:2f:9f:64:e8:d2:ed:a2:
df:59:07:83:a7:99:d6:ee:0b:51:92:5f:ba:04:56:
93:ba:79:09:1c:a4:38:ec:af:ab:c6:70:5e:c8:ef:
d2:df:c6:d2:d9:88:81:b8:fd:e1:e8:93:d7:5d:7e:
5c:92:fe:4d:fe:01:4b:2d:47:1e:39:9a:bd:a3:2f:
f2:5a:de:96:44:56:1a:dd:27:bc:84:60:da:a5:56:
83:4c:f6:e2:80:4d:fa:85:56:52:cc:2c:ff:bd:84:
c1:c3:09:69:af:44:a5:ab:79:cb:fe:ef:05:69:68:
00:66:9c:d8:92:f1:c7:40:3e:8c:7e:68:d4:27:86:
46:91:e2:06:1e:76:80:42:da:8b:73:c9:7e:33:48:
83:56:75:43:9f:54:88:bd:fa:56:da:72:f8:79:8f:
c3:ff:0e:dd:ef:55:1e:d9:c4:1f:c8:27:ef:62:a0:
14:ed:51:0e:39:0b:ed:d4:97:70:67:2f:ad:a4:d1:
be:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:87:D2:49:A6:A0:09:21:5F:C1:E4:8E:46:D1:BA:8A:7D:74:40:A9
X509v3 Authority Key Identifier:
keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:23:65:bf:b6:61:fa:5f:29:44:82:2a:1c:dc:3d:dc:f5:27:
15:d8:bd:20:4b:c6:88:d5:73:89:8a:72:49:a4:83:ab:ba:e5:
3d:1e:c2:9b:2d:90:7f:df:c6:75:bf:84:ad:09:77:b5:fa:e4:
28:32:60:1d:83:3f:33:16:ce:62:04:14:cd:b4:2e:d0:fc:f0:
a4:cb:ef:15:42:d1:5f:2f:a2:a3:42:99:df:d1:5c:31:94:d0:
ef:a8:0c:9f:f1:4c:68:63:00:93:18:5f:24:fe:13:5a:de:0d:
9c:e8:dd:6c:10:94:d8:34:a4:82:fe:e0:a1:13:43:77:1d:4f:
76:61:80:a8:4b:22:37:cf:ab:d1:fd:2c:22:7d:fb:fc:df:6d:
ff:5f:2e:06:72:b5:ac:e1:ca:07:e2:70:6d:0c:8c:63:fa:69:
27:6b:24:6a:81:2f:d7:2e:12:88:3a:f5:33:6d:f8:58:0e:0c:
bb:37:e3:38:5e:8f:69:34:78:4f:38:cf:de:40:3d:8b:92:22:
fe:ce:3d:7a:4e:7e:42:67:8d:0c:3d:ad:41:2a:b8:9b:bb:21:
5e:d5:47:ce:55:98:8c:0b:48:bb:07:39:66:55:62:20:4e:50:
14:57:4d:86:33:a3:a5:54:2d:e3:ae:22:c5:af:11:b1:e4:72:
87:ef:21:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:20:05 2025 by rpki-client