Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: AirJG6Nn35Nj9jKTMAq4KwM/H6+IYGOVAcl5prBYG5Q=
Subject key identifier: 19:AC:EA:80:D1:4F:AD:B3:34:DC:2E:4C:CB:F9:38:8A:20:5C:AD:CC
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 0196B7B5D1F9356324EA23D62F211518FB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 0F2C
Signing time: Sat 10 May 2025 01:01:08 +0000
Manifest this update: Sat 10 May 2025 01:01:08 +0000
Manifest next update: Sun 11 May 2025 01:01:08 +0000
Files and hashes: 1: BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa (hash: t+OljMW5uOHxrHIlucZj5mZPbb09wnIuaUx+FWzOywc=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: wR/mE4DaYhBbcPqIow1uNyFzpOecoNrrH/DwRYsIFS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:d1:f9:35:63:24:ea:23:d6:2f:21:15:18:fb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: May 10 01:01:08 2025 GMT
Not After : May 11 01:01:08 2025 GMT
Subject: CN=19acea80d14fadb334dc2e4ccbf9388a205cadcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:f6:77:1e:5b:fe:d5:e2:0f:9d:2b:fd:db:
0e:a6:be:4b:7e:4e:7e:08:de:84:e1:fd:55:84:7d:
42:43:89:8d:e5:f6:1e:f0:e7:32:40:26:d5:ba:11:
f5:af:5b:76:8d:ea:2a:e0:07:9f:3c:84:1b:97:48:
e7:fb:50:64:04:31:16:f5:1c:75:ea:f9:2a:11:7f:
f0:ab:bd:de:d0:46:96:2b:16:4b:05:5b:43:f1:15:
0d:14:7a:1b:1e:c9:3e:d1:e9:95:4b:be:fa:6e:39:
a4:ea:d3:d6:61:b6:17:2c:3c:39:59:66:cf:60:6a:
1b:03:1f:f7:dc:0d:05:01:8d:f4:8c:51:a3:91:fd:
aa:dc:f0:a0:4b:b0:ad:08:6b:66:17:83:1e:f6:75:
17:93:a6:24:dd:7f:79:22:f9:81:3b:87:65:a3:44:
42:e9:e5:d8:78:30:54:1f:56:35:71:23:50:8b:75:
ba:40:52:e2:51:22:9d:d9:ea:c7:53:df:fd:1c:73:
cb:66:5c:ec:7d:47:6a:3f:1b:ea:d8:61:1f:2c:1e:
be:6e:6b:ee:83:be:97:6b:4e:b7:b1:bf:ef:ec:a8:
23:26:88:64:5e:db:95:79:e8:db:e1:3b:e6:61:3c:
f2:a3:da:a3:44:07:a8:b8:33:80:10:f6:ad:9d:4c:
02:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AC:EA:80:D1:4F:AD:B3:34:DC:2E:4C:CB:F9:38:8A:20:5C:AD:CC
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:20:63:13:bc:4a:25:9b:72:5c:b0:67:84:05:34:e3:34:c3:
fb:0b:12:00:31:87:86:3f:15:6f:9f:b0:49:fc:8a:e8:62:b8:
dd:99:41:9a:48:bf:d8:04:de:49:63:e4:b5:c8:a8:c5:5a:e8:
bc:60:0a:1e:8a:27:4c:21:b4:e0:13:0d:37:b2:6d:7d:52:27:
9e:32:6e:98:dc:81:d2:fc:40:97:5f:af:c5:8a:9b:f3:62:18:
e3:95:a2:3c:ee:f3:88:56:5f:c4:e2:5c:ac:fe:7c:3e:b0:46:
ed:bf:30:b6:dd:26:96:19:37:cc:7f:87:e0:05:45:88:09:ac:
41:3c:40:dd:0a:6b:4f:e0:11:24:29:cc:9b:fa:39:55:21:cd:
6f:7c:de:f4:95:7a:52:08:5c:20:87:31:7f:80:07:1e:6a:6e:
a6:ef:31:9e:67:a5:ba:ed:75:2d:82:d9:d9:fc:32:d0:88:27:
ea:67:8a:53:5e:9d:29:84:a9:c6:86:e1:e5:66:0a:e2:04:cc:
25:b2:53:20:24:ed:b6:49:c8:18:f6:47:36:85:11:3f:26:89:
10:73:84:59:49:8a:8a:40:bb:9e:c1:98:36:ad:5d:28:ab:69:
0b:ae:c2:0c:1f:70:d5:44:cd:81:64:12:f1:d4:26:79:6c:59:
69:b6:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:35:24 2025 by rpki-client