Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier: j53CSVx4pb/SYqCPhaHWsd4sz0HT0uWxi2oi5YpA6PE=
Subject key identifier: 08:44:CA:5A:1C:37:7C:02:9C:A7:39:CF:54:B5:46:E0:7D:C0:49:0F
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial: 0196B36A7FF4044E2B2CBB208E587551EAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 05:00:23 +0000
Manifest this update: Fri 09 May 2025 05:00:23 +0000
Manifest next update: Sat 10 May 2025 05:00:23 +0000
Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: fUE323vxUq5x10R6blzJlqebvHskHlpSvpjpsqgKuao=)
2: aDRwFZp3Ye9nOga6oqU2-HxOi5Q.roa (hash: 55fN/khKAT7BHMTfK9zjOz/iWjkXrLDgvWhFUwURpbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6a:7f:f4:04:4e:2b:2c:bb:20:8e:58:75:51:ea:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Validity
Not Before: May 9 05:00:23 2025 GMT
Not After : May 10 05:00:23 2025 GMT
Subject: CN=0844ca5a1c377c029ca739cf54b546e07dc0490f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:32:be:17:86:8a:0b:b5:8a:da:eb:97:49:
bd:89:83:07:fd:d8:e0:38:99:6f:e5:53:d7:79:4b:
02:05:8f:31:c9:c5:5d:1e:ef:43:01:eb:27:78:e2:
af:78:a0:82:b2:fc:76:76:1f:20:21:24:f8:b5:5e:
7a:46:2b:6d:19:fa:35:24:cc:0b:b0:ea:14:78:36:
a4:7d:e2:38:bc:b9:ed:74:54:bb:0e:6e:ac:46:85:
1f:c8:40:7d:d4:f3:03:62:d8:d9:c5:6a:9e:76:f6:
39:23:88:f4:36:42:dc:c2:02:fe:d1:7a:53:e5:d6:
78:bb:c4:85:6e:0e:d1:31:e6:35:f8:d3:50:33:f5:
1b:d8:4a:bc:be:36:1c:57:f2:29:66:66:35:6a:de:
18:bb:32:bd:47:65:23:0c:d0:ac:78:4a:bc:3f:f9:
b9:fb:47:9d:74:5a:80:4b:99:82:64:3c:8f:a8:fc:
e3:87:da:cd:37:6d:61:16:5b:ac:9c:22:27:29:1a:
34:a5:08:86:2c:80:8a:22:7f:6a:17:bd:90:89:ba:
4e:23:80:c3:96:d2:03:55:f2:58:a6:20:55:50:7d:
2f:b6:c9:9e:3b:27:c3:d7:ae:2a:92:e6:ff:3a:0d:
99:92:22:d3:44:ef:3d:51:13:e5:a7:71:f2:c3:38:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:44:CA:5A:1C:37:7C:02:9C:A7:39:CF:54:B5:46:E0:7D:C0:49:0F
X509v3 Authority Key Identifier:
keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1d:09:45:84:5b:54:bb:c2:37:01:44:ff:d1:ee:c9:d3:fe:
79:e3:1f:7f:3a:9d:cc:f3:ba:a0:30:32:08:50:2f:2b:4b:a5:
1b:e9:3a:c9:d8:b6:ce:69:b3:ba:36:63:78:98:5d:76:bc:5f:
9b:ea:f6:ea:9a:31:98:20:79:28:88:1a:8d:a5:25:57:3a:20:
69:1c:19:33:9c:a8:e1:d2:22:db:6f:42:01:88:53:7b:1c:71:
ed:0a:1a:73:dc:1b:4b:46:13:32:dd:6a:29:02:02:a6:e2:fc:
45:05:f2:91:38:b0:11:ed:6f:3f:e8:0b:cf:2c:c2:b0:21:94:
40:91:79:4d:fa:7a:23:ef:d3:bd:44:d4:1e:1f:78:87:1f:bb:
45:08:65:4c:bc:8e:d7:c1:ee:4e:fd:f7:59:28:03:62:ed:81:
f4:a1:14:d6:88:af:5c:e6:c1:8f:15:6b:f6:4b:1a:37:50:31:
97:ba:18:cc:53:30:27:7a:9a:23:63:37:6d:8d:c4:f3:f7:6e:
55:4c:04:26:9d:a2:5f:df:28:9c:e1:4a:bb:c0:9b:85:3f:82:
67:09:5e:69:96:ce:44:39:eb:be:8b:f0:75:f1:36:a6:e5:28:
ea:38:42:90:fc:3d:d6:23:0c:7c:d6:b1:b0:13:1f:84:33:c5:
20:79:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:16:50 2025 by rpki-client