Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: S7A/06OhdtFMonpNG3EzBN4DzHTjJ7P1vq5b5STjuyw=
Subject key identifier: BB:FA:FC:0D:CC:72:A6:21:0C:05:90:B4:DD:14:17:97:8F:7C:6B:84
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 0196A842514B2945749482EAE682E27ADFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 1527
Signing time: Wed 07 May 2025 01:00:40 +0000
Manifest this update: Wed 07 May 2025 01:00:40 +0000
Manifest next update: Thu 08 May 2025 01:00:40 +0000
Files and hashes: 1: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: kUnNltLz3RWRkhs/XHjzQItQkB9QSDFL4mBmvBEFS5s=)
2: VMysSyLNDVGWd0vcTeYPwlMA5rc.roa (hash: 6+DEgCnpiKyTQCIOlcuNMISjTH2qj/1LJFyn3yXus8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:51:4b:29:45:74:94:82:ea:e6:82:e2:7a:df:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: May 7 01:00:40 2025 GMT
Not After : May 8 01:00:40 2025 GMT
Subject: CN=bbfafc0dcc72a6210c0590b4dd1417978f7c6b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:be:b0:ad:0e:5a:06:fc:a9:42:45:84:74:
52:19:d8:34:66:5d:93:0e:a4:36:cf:60:6c:14:cb:
88:dc:89:f0:21:e8:6c:19:53:2a:cc:0b:40:6f:da:
3f:93:8e:d0:22:d5:35:9e:7b:73:49:55:43:f7:6e:
82:5d:4a:af:6b:60:53:62:c3:13:6e:38:62:fd:95:
55:73:a5:b2:a2:52:33:1b:95:6a:ed:79:ac:35:4f:
f8:d1:82:cf:91:80:2b:78:b3:5b:bb:b6:46:82:5f:
de:5b:13:e2:b0:b6:eb:cf:05:49:1b:b8:be:43:0e:
ac:5c:2f:c4:5f:38:32:17:20:65:5e:42:d3:41:08:
8f:98:50:8c:2f:9b:c2:b6:58:f2:84:8f:00:14:2c:
53:be:ec:ea:b8:76:d6:3e:cb:f3:7f:f1:41:43:3d:
ab:c5:82:af:bd:a9:ee:de:cd:81:33:5c:36:3a:85:
d7:74:87:b1:ae:80:91:3a:cd:8a:20:07:89:3c:76:
ae:7e:78:f9:71:7b:b1:bb:17:97:04:42:37:b4:2a:
ff:1c:3b:87:ca:aa:20:a9:ed:f2:67:d8:02:9a:b6:
ce:ab:73:0c:aa:a6:89:b4:13:ea:df:57:1d:e1:2e:
e3:5c:8d:bb:9f:f6:5e:dd:bf:3e:5a:9e:eb:8c:b6:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FA:FC:0D:CC:72:A6:21:0C:05:90:B4:DD:14:17:97:8F:7C:6B:84
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8b:e9:5b:a9:cf:3a:2e:bd:d2:0a:aa:7f:01:05:48:8a:e1:
2d:9d:e6:dc:a6:67:9b:fe:fa:a2:ff:08:ab:7a:cb:44:6b:6c:
1e:04:a6:f9:ee:ed:f9:af:fb:aa:56:53:56:0f:06:ed:01:46:
f2:6f:82:b5:a9:3f:72:da:b9:41:62:47:97:0a:c1:41:cb:ae:
00:48:fb:5c:45:2b:91:f6:85:95:26:57:f3:a9:e6:15:46:42:
a3:3e:72:71:fa:9d:ce:84:55:e1:5b:92:35:84:d9:28:2c:6c:
8a:dc:b4:11:a6:b7:52:da:de:6d:05:c5:52:ea:ac:88:a9:bf:
2b:20:22:8c:2c:da:06:4f:7c:22:ef:76:b4:e9:5f:01:21:a0:
9a:f8:c0:ed:9e:7c:5a:86:78:3b:9e:c4:38:fc:1f:17:78:0f:
fa:ec:70:79:a8:99:7d:bd:93:33:e1:c5:7f:76:fc:8c:35:b0:
31:70:15:f3:8d:ba:cb:21:f9:96:e8:cc:56:90:92:0e:fd:d2:
6d:ca:1b:74:2b:25:e5:ce:d5:19:7e:03:fd:e5:2c:dc:94:27:
0d:d8:29:67:fb:94:91:54:84:4d:21:ae:4e:69:57:32:77:13:
cd:51:3f:2e:a8:2a:0c:b7:65:a8:f4:0b:ee:61:4b:e6:0b:35:
65:00:ac:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:00:18 2025 by rpki-client