Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json)
Hash identifier: wiv9nM+WPfO9HdGY0qqU6jygCxslMpmBgkja3kdw3f4=
Subject key identifier: 4D:10:B1:0B:BD:02:7A:9B:B9:16:3C:67:38:B3:79:73:23:FE:54:BF
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial: 0196BAB69125C7BAF7E70AAC0F53D483E388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
Manifest number: 02CC
Signing time: Sat 10 May 2025 15:00:48 +0000
Manifest this update: Sat 10 May 2025 15:00:48 +0000
Manifest next update: Sun 11 May 2025 15:00:48 +0000
Files and hashes: 1: NV-I2foKzHLj-RMxKytozaQe67g.roa (hash: PhlDXyOiHHSXRcXTISte8ar8TbgSTtrPQqIchH8glHs=)
2: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: lmkCy/+jWTKQiNiGgoNAXxaQ6F7JvAkJMuamUkyvpSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:91:25:c7:ba:f7:e7:0a:ac:0f:53:d4:83:e3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Validity
Not Before: May 10 15:00:48 2025 GMT
Not After : May 11 15:00:48 2025 GMT
Subject: CN=4d10b10bbd027a9bb9163c6738b3797323fe54bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:dc:92:4b:a9:81:0a:97:98:e9:2b:a4:fc:
52:a7:e3:70:c4:b0:d6:1f:e6:19:d7:7f:6c:e6:3f:
0e:01:c8:d2:10:39:c8:88:45:fb:03:1e:c6:7c:74:
a5:30:f9:17:7c:7c:05:7c:ac:96:ad:d4:63:e2:af:
09:6b:a0:41:fd:0b:70:24:b4:af:2b:ad:2a:f4:e0:
99:fe:c6:d7:bc:90:13:58:46:da:ce:d0:49:7a:a7:
cb:7a:5e:4d:99:6d:46:22:ba:ed:02:43:fb:dc:ab:
9f:b8:10:61:4c:55:58:1c:a6:2f:4c:71:21:b5:ad:
5a:7b:c3:b0:a9:03:42:05:8f:8a:96:3a:ed:31:ad:
36:8d:8d:49:57:8d:e8:db:6c:bc:dd:bf:88:6a:72:
af:1c:d8:e9:3b:2d:7c:fd:e9:d8:f5:c7:bb:fb:a6:
b3:40:a5:35:0b:dd:d8:10:c9:06:b9:cc:6d:8e:b8:
6c:2b:1f:3c:9e:c5:a8:d0:50:0c:fd:f2:dc:ee:2d:
b2:a0:64:5a:68:ab:08:ec:d0:6b:d3:57:ea:14:e1:
d4:f4:32:73:f6:11:25:c1:e5:32:cc:c9:26:0f:9d:
7d:2a:ad:f8:ad:9b:c1:49:4f:b0:15:9f:d6:ed:d3:
65:6e:d7:f8:f6:fd:1b:e6:8d:da:9c:27:43:f6:8a:
16:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:10:B1:0B:BD:02:7A:9B:B9:16:3C:67:38:B3:79:73:23:FE:54:BF
X509v3 Authority Key Identifier:
keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b8:cc:be:a7:e9:96:0a:eb:80:9a:75:69:88:6d:97:68:49:
da:00:96:21:ba:3f:1a:65:88:f1:d4:11:db:a7:16:08:d8:73:
ba:0a:be:74:fc:3d:4b:39:22:fc:c8:d4:42:9c:9a:12:ad:33:
c0:02:bf:9e:e9:ca:b5:2f:4c:74:e0:99:9c:82:ce:c9:70:6a:
a1:28:1f:7f:63:89:3f:14:a4:16:91:a0:62:fc:2c:64:cf:3d:
84:f1:2d:16:4e:ad:e9:38:24:f7:13:b6:2c:e5:2f:ed:4e:0b:
98:b4:65:51:98:9f:57:30:7f:d3:81:eb:5c:c7:2f:0b:c5:39:
0a:4f:80:95:da:a7:68:d0:37:44:36:8b:cb:f7:ff:36:9f:18:
38:8f:12:3d:71:db:a1:e2:4b:06:82:e9:9c:9d:d6:d1:1a:a5:
90:8a:8f:17:22:9a:49:4f:40:27:bc:a6:9c:a7:da:c1:43:c2:
6c:bb:4e:13:41:e3:07:ac:f2:f5:19:26:3c:f2:c4:69:f6:b8:
83:e5:db:5a:b0:71:d9:83:3b:e4:47:2e:27:23:b7:18:3c:34:
d9:67:55:71:c4:68:93:06:5e:a7:40:81:ac:d8:56:e0:10:9b:
88:bd:a6:47:f8:18:84:f4:e2:ef:83:69:97:69:cc:85:18:a9:
1a:19:17:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:00:01 2025 by rpki-client