Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
File: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft (raw, json)
Hash identifier: FsNTWFF0okrN46HxwGb4gnSLuUcji4cQ+VBziZUh//0=
Subject key identifier: 75:6C:74:AF:7F:52:99:FC:17:22:A3:F4:C8:CA:05:97:81:A4:5C:D3
Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
Certificate issuer: /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Certificate serial: 01969F08174A18FC767F5A604DA32456FD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 06:00:29 +0000
Manifest this update: Mon 05 May 2025 06:00:29 +0000
Manifest next update: Tue 06 May 2025 06:00:29 +0000
Files and hashes: 1: 94wGpzC6dKW4wCyBuNwgbCmu0YI.roa (hash: HmlUsbHYgnjwmvm0Ep06MITWSKS8pcY785u7DkFvmwU=)
2: N1_eJlCZb3ETGGXcyIle3qD0zxM.roa (hash: ZUSIabtzDxcJVnD57wreF1I3FajQaelaynE8r9qpwLA=)
3: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl (hash: wCV/NwDSK6GxP1NI+o4D3nbUzTHvaetF894x4fpaz2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:17:4a:18:fc:76:7f:5a:60:4d:a3:24:56:fd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Validity
Not Before: May 5 06:00:29 2025 GMT
Not After : May 6 06:00:29 2025 GMT
Subject: CN=756c74af7f5299fc1722a3f4c8ca059781a45cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:02:b9:17:a0:d4:d3:73:2c:ff:ef:ad:53:
83:17:bb:dc:74:22:98:be:44:80:63:a0:48:43:69:
21:e8:89:e5:79:63:47:30:9a:87:b4:5c:95:f7:19:
5b:e9:7e:9d:c3:0b:f2:79:7b:4e:0d:59:af:15:c7:
5e:19:57:c7:63:3c:97:3b:f8:e9:d8:7f:08:66:eb:
74:a3:3b:e4:c4:22:9d:d3:94:df:db:50:a3:4f:6e:
51:56:a6:5b:5f:be:cf:aa:c2:f7:6f:40:37:3a:f3:
9f:57:95:53:38:ee:11:16:48:75:79:e2:e3:6b:a6:
51:25:44:df:b9:3a:97:36:22:45:56:e2:d1:bd:dd:
15:07:bc:91:45:93:b4:3e:64:65:71:31:2f:f5:51:
15:9a:23:db:bf:ff:b9:bd:2a:40:d5:ba:d1:13:16:
6d:07:cb:d4:de:a9:9c:dd:a2:bd:e0:77:f1:39:94:
fb:12:0b:c1:4a:22:5f:44:4f:5f:36:94:3d:05:53:
1c:b9:dc:ab:4d:7a:0c:92:f0:ab:f2:46:cd:0c:00:
59:b6:7a:b6:13:73:11:bf:6f:1c:c9:40:fe:8d:6c:
f7:87:b1:33:62:52:e9:29:94:7f:ba:ea:0b:72:25:
cb:18:cb:36:7d:6c:d7:07:f3:86:a7:39:b5:1e:5a:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6C:74:AF:7F:52:99:FC:17:22:A3:F4:C8:CA:05:97:81:A4:5C:D3
X509v3 Authority Key Identifier:
keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a3:b2:48:48:1d:24:c2:10:56:dd:55:08:b4:6e:9e:ae:bc:
85:28:1a:ca:56:5b:db:75:62:1e:4f:78:5c:8d:05:dd:6d:47:
d6:8b:0f:3b:84:2c:ab:01:21:a0:da:c9:bb:0b:0c:a1:a4:0e:
5d:7b:0d:09:c4:fe:fa:da:7d:fb:dd:24:cb:12:1c:a6:5d:ed:
e2:5a:ab:bd:74:bc:f2:f0:49:51:f3:e6:a7:00:ec:40:b6:27:
32:0c:d0:1c:0b:a2:36:03:6a:cb:86:27:b3:4a:68:d4:e2:83:
b8:12:13:e2:45:73:d1:59:f1:e7:b5:0b:46:16:fa:19:02:d9:
93:92:4d:06:df:df:68:73:eb:8f:bd:ec:56:22:9a:61:be:53:
4a:ee:bb:24:ed:58:bd:51:9f:9e:d0:0b:1c:2b:ad:35:ce:14:
d7:ba:29:e8:01:1d:19:39:2d:66:8f:4d:03:be:f5:37:2a:39:
70:73:97:d2:e7:e7:b7:32:53:81:96:66:17:31:13:3d:7f:25:
92:1f:8a:d0:72:7c:a1:21:10:ce:7f:cc:03:7f:38:8d:57:60:
49:b9:de:fe:da:b3:d8:2a:46:ba:95:96:f1:8d:c6:8a:63:2e:
51:ab:27:31:7b:18:48:55:a6:81:f2:f2:54:66:f1:ec:e7:da:
c9:63:56:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:17:44 2025 by rpki-client