Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
File: NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft (raw, json)
Hash identifier: +aOedbcZ/9oPnFlwWGIzraFCSwk7va+ZuRvsh6yCWvU=
Subject key identifier: 24:E6:BD:60:A0:6F:A1:13:DB:D6:00:B6:8D:77:69:45:88:0D:F4:F2
Authority key identifier: 35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D
Certificate issuer: /CN=35f49b5d505000b909932c6b4f443e7ef81d780d
Certificate serial: 0196A2E50FD5507ECA311549215BB601E737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
Manifest number: 1521
Signing time: Tue 06 May 2025 00:00:42 +0000
Manifest this update: Tue 06 May 2025 00:00:42 +0000
Manifest next update: Wed 07 May 2025 00:00:42 +0000
Files and hashes: 1: NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl (hash: Kp0159pbM5ttytLq11GjG4pPTcYRqsysAIZvPrzW8+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:0f:d5:50:7e:ca:31:15:49:21:5b:b6:01:e7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f49b5d505000b909932c6b4f443e7ef81d780d
Validity
Not Before: May 6 00:00:42 2025 GMT
Not After : May 7 00:00:42 2025 GMT
Subject: CN=24e6bd60a06fa113dbd600b68d776945880df4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:44:66:e0:20:25:1e:36:67:3c:f8:ff:7f:
d9:3b:03:bb:4b:cc:14:b6:81:7f:b3:f9:10:3b:bd:
37:99:e7:cc:a1:d1:80:18:a5:ba:a0:43:81:6b:52:
d9:68:7e:9a:a9:75:61:a1:ad:59:16:e9:ca:39:da:
56:4c:41:68:68:65:1c:fa:30:54:f9:92:9f:1e:e9:
6b:a4:6c:73:47:ee:c3:7d:2d:3e:6d:49:2d:78:df:
2c:a6:15:0c:ee:00:b2:b3:cd:de:72:8a:fd:d4:66:
01:bb:c5:b8:79:28:80:ca:e7:ea:00:32:fa:49:3b:
2d:da:99:2f:6b:1b:3d:82:c7:65:fe:f3:9c:34:75:
d5:b4:bb:01:bf:6e:b8:95:c7:12:f5:a0:d9:aa:cc:
16:7e:b8:ef:52:f4:c2:7b:53:c9:0d:a5:f0:80:fb:
5e:c2:33:84:3f:bf:4a:29:cc:e0:16:6f:61:07:fd:
6b:f3:dc:3e:2a:0a:f2:52:01:89:4d:cc:17:f3:03:
f7:c0:86:58:41:cc:69:3c:68:be:26:24:7b:4b:74:
92:cc:12:65:31:2c:08:65:01:fc:4d:f0:88:00:03:
bd:7b:19:a4:03:ae:b7:3d:17:f5:5d:ca:32:0c:b8:
a1:6e:92:75:31:80:36:77:f0:d6:05:26:a1:fb:5e:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E6:BD:60:A0:6F:A1:13:DB:D6:00:B6:8D:77:69:45:88:0D:F4:F2
X509v3 Authority Key Identifier:
keyid:35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6f:e3:f3:dc:ee:89:5c:5a:ef:59:e0:83:74:cf:0c:14:b3:
87:85:66:af:f9:10:f5:25:f1:f4:0f:74:21:6c:4d:e3:19:95:
e2:92:bc:25:eb:99:3a:6b:a7:8b:0c:62:04:cb:22:f4:ff:76:
5e:7f:08:4f:66:e0:4f:c9:ed:f1:c6:33:6b:d3:10:30:c8:1e:
25:92:11:06:b4:cd:40:1a:43:8a:69:11:ec:f5:85:ed:41:43:
60:a7:59:2d:18:1f:dd:2a:d6:6b:39:6a:5c:8b:8e:9f:f6:f6:
ae:c5:6c:6e:2c:09:70:81:53:90:9a:43:46:45:45:b9:67:4d:
a8:d9:25:76:26:a2:2e:87:50:6f:42:ef:ea:d9:99:5a:43:49:
b3:c0:9f:86:a8:99:ac:7a:4f:d1:20:13:95:91:16:e5:c0:b7:
14:0f:cc:0d:1c:ce:1d:0c:bd:10:2b:4b:25:09:13:64:1a:42:
4f:b5:53:34:23:69:f2:1e:a7:28:d4:2f:a2:8c:c2:7f:a4:aa:
8d:45:89:f0:c1:ef:73:ab:cb:ec:8b:31:f0:f6:c9:38:cb:76:
d9:23:48:9c:48:92:9b:3b:16:24:19:e9:98:c4:93:32:e3:4e:
59:80:a2:ca:c4:a5:8e:07:31:d6:11:b6:d6:6b:7d:b2:ac:2e:
d2:a2:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:26:14 2025 by rpki-client