Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier: 0z1WU3KDHrFi9gpxeuTJkSxgAMeHdGnFitVz/QMavXU=
Subject key identifier: 2B:FD:C6:16:8C:89:0D:BC:EA:2A:41:66:5C:A8:22:D0:9B:2B:DC:7D
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 0196C1942C8CC4E4DE5123F7DA3060B155B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 23:00:35 +0000
Manifest this update: Sun 11 May 2025 23:00:35 +0000
Manifest next update: Mon 12 May 2025 23:00:35 +0000
Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: GYDesaTgVhso8EeUmFyUoEFtaa0zVs709nUcqMXkDu0=)
2: imECYFGKC-3y-aw_FjEqqGuMgCg.roa (hash: W1gRIBzxFMrRJWBGFPIeo4wKyMzv3I/ninZ6Px3gAlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:2c:8c:c4:e4:de:51:23:f7:da:30:60:b1:55:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: May 11 23:00:35 2025 GMT
Not After : May 12 23:00:35 2025 GMT
Subject: CN=2bfdc6168c890dbcea2a41665ca822d09b2bdc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:7d:0b:6a:59:fe:ab:6e:77:a7:f8:50:db:
32:10:6f:1d:e0:26:7e:41:5b:4d:a0:c9:a5:ce:8e:
39:38:65:b8:12:c5:ef:73:b8:cb:ca:1a:bb:3a:e1:
af:38:5b:b6:7a:9a:0e:51:79:02:0c:7e:90:9d:40:
f0:74:3c:88:e5:dd:6e:4d:3f:31:6e:0e:5a:79:48:
f0:43:3f:b6:97:5a:7f:cc:26:aa:4b:9b:01:30:bb:
b3:c9:ee:58:37:75:64:b2:1d:8f:88:0c:75:3a:4d:
95:b2:a1:f6:43:48:89:ed:81:d5:a0:c5:bb:25:b9:
b8:d3:c7:33:d7:7e:85:c6:f3:8a:8b:06:21:47:ac:
5b:c2:91:ac:a9:61:59:f5:80:84:96:fc:34:37:b3:
d8:22:97:30:90:bd:e7:f8:10:1c:85:b1:b2:d4:bb:
f6:e2:b1:67:f5:5e:ea:c7:32:50:09:a3:03:d7:50:
16:67:22:cc:0b:a4:1f:49:39:7e:97:d7:40:fc:3e:
7e:c6:8e:76:2a:73:97:14:55:bf:2b:e0:6f:02:34:
e6:44:90:69:9d:09:97:4c:8a:01:17:8c:65:cc:23:
72:8c:65:b2:26:e7:85:32:52:1b:87:0d:20:bc:61:
5a:af:28:15:f8:56:af:17:c2:1c:45:cd:0c:40:d0:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FD:C6:16:8C:89:0D:BC:EA:2A:41:66:5C:A8:22:D0:9B:2B:DC:7D
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d7:31:98:2f:7a:72:a0:8a:3e:0f:be:e1:4d:1a:44:c1:32:
fe:ac:2e:6f:34:e5:6c:4c:3f:5e:fc:d2:7a:4b:7f:16:8d:54:
d0:58:ae:2e:9a:ee:2d:d3:fe:28:2f:7d:20:41:da:21:ca:40:
c2:fa:1a:30:1c:ad:05:d8:24:ac:54:78:43:18:12:37:56:17:
e6:46:f6:f9:86:b2:13:b5:ae:d2:dd:89:91:8a:14:b1:6f:d7:
2d:53:05:de:58:02:1a:a4:4a:81:6b:8a:f6:c6:ba:15:35:1b:
97:5f:9b:2f:3e:86:4c:9c:48:56:5c:bf:58:0a:be:55:ce:cc:
11:5a:44:20:dc:96:7e:a5:58:ab:90:da:5b:ef:10:60:8e:60:
0e:5a:30:11:c0:f7:f7:85:bb:e0:45:31:c9:44:82:df:fa:a6:
21:94:8d:ac:c4:20:74:ce:c2:28:1e:94:58:dc:4e:db:3f:fb:
ea:57:e2:8e:3d:7e:ac:70:a8:79:30:ca:78:f4:32:d1:83:0e:
8d:6e:43:7f:d0:f5:3a:5f:07:8a:81:fa:c9:3c:91:07:0d:af:
c1:0d:6d:b4:be:eb:69:f3:b2:a1:6b:e9:9b:8a:72:65:ca:df:
c3:fc:ce:29:15:0e:44:54:18:e5:97:2c:44:e1:dd:9b:17:02:
32:e5:e6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:29:40 2025 by rpki-client