Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: 9WMFfw6fMm352pJ8bmq/4UXP3ZIn2f+NK0ZIMXSNGZc=
Subject key identifier: EA:F4:7C:35:00:BA:9F:DF:26:A2:25:93:FB:62:37:E9:4F:9E:DC:34
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 0196B8FEAFE8935BFA75457AAC100AF70945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 1031
Signing time: Sat 10 May 2025 07:00:20 +0000
Manifest this update: Sat 10 May 2025 07:00:20 +0000
Manifest next update: Sun 11 May 2025 07:00:20 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: GQmbwdzlgVDesp2NNL1HXWpLNeVz6NJJyVqH6WadrgU=)
2: XPkovunJ2mYG9xru2HKfkrigcMA.roa (hash: ZBoNLDdsfMiH4Qvw9YL8Os7NUZ9E42iEu1OMEgsfl7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:af:e8:93:5b:fa:75:45:7a:ac:10:0a:f7:09:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: May 10 07:00:20 2025 GMT
Not After : May 11 07:00:20 2025 GMT
Subject: CN=eaf47c3500ba9fdf26a22593fb6237e94f9edc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:cc:35:2c:f9:74:53:18:0d:fb:aa:fc:da:
70:53:b1:cf:d9:d8:65:18:40:55:88:92:fa:94:5a:
aa:b3:ba:70:e6:4b:bf:9f:86:95:57:81:9f:82:b5:
fc:4e:fe:d0:d5:4f:d0:d7:60:62:55:c6:9a:52:95:
29:69:10:b0:33:5e:ad:fd:c8:1f:ac:9e:02:00:eb:
df:f4:01:8b:f3:fd:03:ef:d1:b6:f5:72:6a:fb:d2:
3a:45:4f:98:30:18:dc:8f:77:34:b9:67:88:8f:44:
87:51:d4:e9:4e:3f:03:cf:68:ad:c6:1d:bc:a5:0b:
be:03:46:ff:e5:a7:77:98:84:7a:20:6e:1f:58:a8:
ab:17:c6:e9:80:18:59:ee:93:bb:d7:16:6e:7d:0a:
32:0d:01:00:0f:cf:35:84:c8:9a:5f:05:de:a4:3c:
68:d2:f7:c6:24:f3:ef:e2:c8:32:71:53:f7:d0:07:
36:2b:bf:7d:3d:8e:ad:b0:20:2b:0d:9e:03:c0:bd:
06:15:cb:84:59:75:b7:e1:a6:2a:e1:b7:f7:97:fc:
31:0e:3f:4a:fa:16:35:94:b3:c1:b1:a1:a1:6a:5d:
ac:84:66:65:b5:31:23:04:6d:5a:fa:6a:7a:11:62:
98:6e:32:11:e1:b5:9b:76:b0:74:f2:c1:ba:aa:87:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F4:7C:35:00:BA:9F:DF:26:A2:25:93:FB:62:37:E9:4F:9E:DC:34
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a6:4d:77:8a:ad:7a:6b:e2:69:75:62:2f:ad:67:9e:43:56:
3c:53:87:9b:d5:d2:f7:12:cf:37:a8:95:2e:e8:61:9c:e1:71:
49:a5:84:e2:dd:9a:46:65:50:3e:b0:b3:9b:a7:91:2f:b6:9d:
12:ea:80:ab:13:9c:8c:d8:be:3b:79:b7:fe:d5:80:8d:0f:93:
9a:d0:37:a5:c3:72:87:07:59:0b:ca:a3:d1:db:75:44:4b:b9:
5e:88:0a:c0:37:f7:a6:3b:ec:b4:c6:00:81:69:b1:f8:1d:6f:
d8:39:e6:8f:73:18:1f:8c:1f:5a:1f:cc:9e:0f:88:e8:0b:53:
fd:91:b1:34:67:6b:dd:a5:59:98:58:c9:4f:17:5d:19:60:b5:
93:68:3d:33:ab:86:7d:a8:e2:06:9d:4b:cc:f4:37:92:f0:db:
64:24:7a:fa:6c:85:d5:67:af:da:e3:92:2f:8a:01:06:e3:37:
0a:e3:dd:e3:30:b1:b1:fb:72:e4:ae:c0:4e:95:12:f7:b2:8e:
78:72:39:93:b2:0a:d0:40:ac:c4:c2:94:99:66:e6:ed:67:b0:
87:9a:f0:9e:e5:f8:ad:96:6e:3b:5c:b8:e6:36:51:ff:89:ef:
bf:73:30:93:ce:b6:c7:3a:dd:d6:99:a2:49:7e:e3:08:a1:50:
bb:2e:ba:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:16:51 2025 by rpki-client