Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: iCFwmK3/9V/JkPEVHjrQE7wj+9wDTectfTYocPOnJNg=
Subject key identifier: E2:B2:01:53:2B:D3:80:10:8A:89:36:DE:07:54:01:00:B5:7B:D4:20
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 01969ED1133EEE8395B550A51E6077DC4E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 05:00:24 +0000
Manifest this update: Mon 05 May 2025 05:00:24 +0000
Manifest next update: Tue 06 May 2025 05:00:24 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: /o5BlQGscY+zxiNXg70jiR0gexGBLhtIVYWvfYOy67Y=)
2: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (hash: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:13:3e:ee:83:95:b5:50:a5:1e:60:77:dc:4e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: May 5 05:00:24 2025 GMT
Not After : May 6 05:00:24 2025 GMT
Subject: CN=e2b201532bd380108a8936de07540100b57bd420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:de:c8:43:55:4d:c4:4a:e4:64:8b:5f:e1:
be:90:cf:09:e5:ad:28:2c:e0:26:44:b3:e9:96:2f:
45:14:dc:ff:9b:90:45:05:5a:2f:a6:6b:24:71:16:
c8:54:6a:20:c0:46:01:11:34:b2:ad:90:c9:fb:d5:
4f:fc:87:2a:fe:cc:09:05:1a:aa:70:3c:34:35:70:
b2:2a:43:fd:23:0f:92:23:54:98:a9:69:9a:21:df:
48:07:04:86:8f:fb:68:77:95:c8:6f:ed:fc:2b:be:
c3:b8:17:5a:f2:18:17:ee:86:57:af:6a:f0:23:d5:
64:6d:78:f1:40:70:ea:68:1f:ac:e4:39:b5:d6:c1:
fc:5f:83:d6:8a:a9:9f:09:3c:63:15:a8:04:70:64:
42:c3:70:a9:a3:79:99:b4:74:7b:07:36:d0:0a:de:
74:ef:a2:ec:61:64:73:53:0e:6b:0a:72:f6:35:40:
3a:54:42:4f:21:cb:46:37:9c:09:74:ef:fa:f1:14:
b1:5a:c2:a7:7b:e5:b2:b7:87:14:d2:4b:cb:42:88:
83:ef:39:14:45:66:11:b7:7e:f3:20:e3:f0:57:99:
31:bc:5f:b4:b6:60:88:15:8c:0e:08:2a:5c:60:fa:
63:a9:e5:e8:4e:a4:b8:00:24:48:b2:d7:b4:11:a2:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B2:01:53:2B:D3:80:10:8A:89:36:DE:07:54:01:00:B5:7B:D4:20
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:08:4d:31:01:26:1f:9a:2b:80:cd:0f:3b:e5:46:cb:51:80:
6b:e9:04:25:c1:8a:69:c6:3d:dd:1a:81:ea:dc:52:3b:e6:bd:
43:bb:03:c5:23:3a:15:2f:cf:18:fc:c5:ee:c6:4f:d2:d5:0f:
c1:d8:01:03:bb:2f:b5:22:f9:92:5f:48:25:05:04:ac:7b:88:
20:61:45:26:dd:8e:0c:be:36:0f:ea:58:8a:17:76:6f:36:14:
53:8d:22:18:ed:c9:9a:26:dd:ed:e4:66:85:7a:c0:73:e0:99:
5a:86:6d:2c:c2:1e:21:44:b1:5e:1d:5c:d3:92:89:30:69:98:
65:09:a0:50:9d:d8:82:bf:98:dc:8f:ab:bd:c9:09:e1:fd:97:
96:23:5e:aa:36:d6:87:d9:f1:a3:a7:77:22:3b:34:12:f0:6a:
37:26:18:b4:ee:82:de:eb:6f:41:e8:b7:82:b2:6e:51:6d:fe:
e4:2d:0c:d9:dc:20:ae:8c:24:b8:1e:fa:36:0d:bf:44:15:af:
6e:9e:66:82:48:52:ab:ed:87:0a:2a:18:31:0a:4d:2a:51:46:
16:14:3c:f0:09:cb:54:e6:08:9e:b0:cd:b4:0d:37:0a:5b:e5:
d2:a5:3e:aa:f6:50:78:f1:2f:63:b2:d4:26:1f:31:1b:cb:d1:
ca:c6:11:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:18 2025 by rpki-client