Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: vuOBExhXgPL1D7CX+8bkJPam+O9Tw8rG3Haaui2ORKs=
Subject key identifier: 7D:5F:96:48:F4:15:8A:8E:80:10:41:8F:47:A1:D7:B2:5C:77:54:DE
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 01969D1A4633A8F03FE132C4FE0824534E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 0951
Signing time: Sun 04 May 2025 21:01:06 +0000
Manifest this update: Sun 04 May 2025 21:01:06 +0000
Manifest next update: Mon 05 May 2025 21:01:06 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: JijLpYrYQ51Lb3FnHugu0j7KWMVdeGgsjpeYl3+f3ok=)
2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:1a:46:33:a8:f0:3f:e1:32:c4:fe:08:24:53:4e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: May 4 21:01:06 2025 GMT
Not After : May 5 21:01:06 2025 GMT
Subject: CN=7d5f9648f4158a8e8010418f47a1d7b25c7754de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:a7:c7:92:1f:77:37:cc:f6:fd:75:9f:9a:
68:c9:65:62:87:25:7f:49:be:c7:69:ac:5f:f2:aa:
43:be:37:4b:2a:9c:d1:5e:1a:df:e7:97:ff:90:4e:
78:3b:d4:df:c4:c8:66:19:ce:ac:5f:d8:2f:08:73:
92:d7:7a:d2:1c:08:f1:e3:3d:09:ca:65:a0:2f:9d:
69:0b:04:3d:2c:b7:f6:97:c0:79:61:d4:8a:1d:74:
4f:b8:0d:32:98:31:97:e4:f0:6f:8d:47:a1:2b:57:
f4:0a:3c:51:de:3b:ab:19:c3:66:b3:57:a3:a9:19:
cf:b4:b7:eb:a0:d6:5d:b9:93:e0:b7:07:8c:ff:9f:
1c:99:b0:0d:62:1d:dc:62:7c:67:05:bb:4b:57:32:
3b:b7:66:92:0c:89:2d:79:44:1a:e8:d0:c9:a8:60:
93:03:37:4a:ae:2d:a1:87:3c:91:cf:b3:d3:61:7b:
ff:f5:39:50:ba:d7:75:c5:0b:6f:57:1d:90:e2:df:
36:77:3d:2b:d2:86:9d:a9:9f:20:fa:ba:58:7e:32:
f6:c0:28:02:be:8e:a6:38:d1:7e:1a:e1:be:4a:06:
18:b3:36:8f:a4:66:9e:8a:cb:8e:c6:48:0f:ec:c9:
66:fa:99:02:23:37:2f:e8:be:35:3c:2c:76:b5:56:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:96:48:F4:15:8A:8E:80:10:41:8F:47:A1:D7:B2:5C:77:54:DE
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:47:38:8f:7f:e4:fb:7d:69:66:1a:05:a4:bf:4d:65:33:ca:
60:15:cf:b1:f8:38:bd:7c:a6:f0:ab:00:a9:94:56:2d:b1:68:
71:36:6d:5b:ba:3d:85:3b:02:67:49:ff:5a:fa:88:d2:3a:64:
e6:89:27:e7:74:c4:fa:5d:62:6e:6f:0b:1f:17:50:f0:67:12:
12:36:5a:7f:4d:bb:5c:de:ec:c9:64:6a:93:78:ba:ce:af:d8:
bf:22:9d:52:51:54:0d:ec:dd:b1:f4:47:47:76:25:77:f7:31:
09:ad:17:f2:c7:b0:1d:36:55:2e:e3:6d:dc:6f:1e:e3:1f:fe:
5c:09:eb:7e:e8:c7:bc:ea:5c:0f:3b:09:28:3c:fd:ea:57:87:
7f:62:52:fe:d5:99:d5:46:7b:e9:71:76:1d:ab:61:4d:a2:b8:
16:94:09:40:ae:27:a3:30:3c:02:99:2b:ac:92:bd:2c:e9:d7:
e8:27:9a:75:08:8d:b4:5e:18:5e:a0:ea:ef:19:35:d3:c8:d9:
61:f4:9f:ff:32:c1:80:a9:94:fa:73:5d:b5:2c:72:70:d7:49:
07:3b:e3:a9:ae:1d:60:4e:5c:e2:33:83:70:bc:d1:ba:79:56:
db:db:a4:82:95:3b:83:98:1e:25:24:27:82:4d:df:19:2a:2c:
82:f9:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:56:56 2025 by rpki-client