Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier: +IVYhbaG3nFb4K44Em0G7OBhXt9c6TqWzi5JRW5E3io=
Subject key identifier: 43:B2:B4:05:5A:6F:07:C1:73:F1:26:A6:C7:A9:C9:06:9D:86:E7:4C
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 0196CC4E9627B750D3073DA14B20C22105D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number: 1540
Signing time: Wed 14 May 2025 01:00:24 +0000
Manifest this update: Wed 14 May 2025 01:00:24 +0000
Manifest next update: Thu 15 May 2025 01:00:24 +0000
Files and hashes: 1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=)
2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: IG/w9PFoAw/mXbvXdgXbl/imaTgUIR4C8wFlKP8Zyr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4e:96:27:b7:50:d3:07:3d:a1:4b:20:c2:21:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: May 14 01:00:24 2025 GMT
Not After : May 15 01:00:24 2025 GMT
Subject: CN=43b2b4055a6f07c173f126a6c7a9c9069d86e74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:8b:f1:09:2b:ef:d1:19:d1:b2:bd:fd:00:
48:4c:fe:3b:75:a8:b8:a2:fb:fa:d4:e8:5d:b1:b3:
ec:84:8a:f2:74:7a:4c:fa:be:16:ca:12:76:d2:15:
c4:4e:e6:0a:8b:6e:f4:f1:1e:c9:5c:fd:19:3f:68:
8d:26:5e:14:53:9e:55:55:d6:16:b3:ec:07:0c:e5:
7c:bf:ce:1c:d3:63:98:ff:50:c5:01:02:ac:65:aa:
fd:b8:d3:08:56:21:af:85:06:f0:fb:3a:6d:00:63:
e5:37:55:49:c9:cc:e6:be:2c:27:cf:13:3c:83:21:
73:f9:ab:fe:a5:af:88:e6:45:41:af:95:da:c5:d7:
a5:34:0a:f3:ac:09:d3:f5:e1:55:6f:80:49:19:33:
73:5f:b3:e6:d9:5a:be:3d:cb:5b:b3:87:c2:34:75:
14:a9:53:e2:0a:df:77:10:3e:99:ff:18:08:ea:48:
bf:00:1f:9b:6e:12:7d:76:d3:98:a1:51:2c:7f:b5:
b7:ca:d9:5a:8c:04:d7:b4:67:91:2d:15:6f:d2:ea:
c2:df:91:7d:19:fe:de:41:f9:8c:4f:dc:93:22:ef:
e3:eb:71:28:bd:1f:b0:12:c2:e9:c3:9e:f0:40:32:
77:51:af:78:e0:23:c0:1a:18:00:9a:79:d2:95:24:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B2:B4:05:5A:6F:07:C1:73:F1:26:A6:C7:A9:C9:06:9D:86:E7:4C
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:03:bb:47:ea:20:78:66:2b:fb:0a:04:65:74:4e:06:68:39:
86:a9:61:85:10:36:da:a7:71:39:1e:8f:1e:c0:f7:7b:ec:62:
36:2f:3d:90:9a:6b:11:2b:2f:f2:13:35:5a:6d:a6:26:ab:9e:
b3:ec:63:0a:e9:ff:f9:ef:ce:12:ec:62:92:95:d7:81:70:ba:
45:ab:73:29:9b:12:05:cc:09:d6:39:6f:66:6e:04:ce:a9:35:
e7:0e:b9:c7:24:89:a2:e9:65:96:bc:2f:44:b7:f0:13:93:d0:
1f:94:28:b2:a5:9a:06:eb:23:1d:34:83:a1:47:07:18:23:be:
2b:03:05:c7:58:92:33:ac:1e:45:be:1b:c7:a3:13:59:6d:71:
97:d6:65:ee:de:1d:54:63:23:9e:87:58:af:f1:11:7f:f6:59:
e4:38:36:1c:88:9f:dc:5a:85:f0:02:a7:e2:94:22:70:c5:ad:
40:40:b1:80:cb:af:e1:67:1d:e6:b5:0d:6e:8b:55:24:e6:d8:
f7:e6:40:af:59:dc:d0:91:b4:c5:8a:45:6e:96:05:44:ba:c1:
4d:5b:30:98:7c:fc:54:3e:d9:dc:e3:fc:e8:1d:10:9e:69:a6:
37:df:a4:59:9f:07:eb:2a:ad:f0:36:79:35:38:05:f8:14:64:
af:35:d7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:15:23 2025 by rpki-client