Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: 2kKFGZ0u/0Z4awpPPUNSI3rNRHw3k28ck+/r0KMlHWg=
Subject key identifier: 74:14:0C:57:7D:DF:FA:90:26:20:22:AA:34:03:3D:90:3E:9C:89:FD
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 0196C61622FBDFBA51038F00B3D941AF16B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 13EE
Signing time: Mon 12 May 2025 20:01:01 +0000
Manifest this update: Mon 12 May 2025 20:01:01 +0000
Manifest next update: Tue 13 May 2025 20:01:01 +0000
Files and hashes: 1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: y3kEB3FcczfxmJ9nK5uolLBClCXp15ulPoTkA+lZpmU=)
2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:16:22:fb:df:ba:51:03:8f:00:b3:d9:41:af:16:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: May 12 20:01:01 2025 GMT
Not After : May 13 20:01:01 2025 GMT
Subject: CN=74140c577ddffa90262022aa34033d903e9c89fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:34:6f:8f:72:4e:45:8e:d7:f3:e9:e5:60:
4d:ef:ab:87:ff:07:9e:b4:38:9c:ca:90:80:05:53:
0e:32:db:ef:8b:29:7c:28:66:83:a5:0e:da:35:3f:
21:61:e5:99:91:eb:53:c3:d3:46:9a:69:e7:9e:0d:
f4:54:7b:13:61:68:f6:1c:74:25:a7:4d:e4:45:ce:
aa:62:0c:61:ef:e8:f5:10:28:79:db:83:13:ab:b3:
a3:11:a3:52:7b:aa:07:71:01:19:cc:50:eb:b1:1d:
fb:3a:cb:23:a0:ee:a6:7a:97:91:3c:61:55:07:78:
47:ea:8a:3c:e4:e7:26:50:a0:4a:a7:d6:ef:21:e7:
c0:64:e3:b1:1e:24:dd:6a:f5:83:f8:f1:dc:ab:db:
42:a6:2b:32:20:1f:76:23:33:53:ce:ab:09:8f:af:
d6:4b:cf:8c:4a:bb:63:80:5a:74:00:a7:36:cb:5f:
84:3b:cd:d2:d7:90:3d:aa:0c:ea:4b:98:41:79:5b:
d9:25:16:ba:50:ba:aa:3e:c8:94:e2:30:49:0d:cd:
e5:6f:be:77:a0:72:c2:68:9d:28:da:3e:97:52:99:
48:f3:75:e7:04:07:37:20:89:74:e6:23:14:6a:bd:
0c:31:0f:0f:d7:57:24:52:8e:66:43:f4:27:8c:e3:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:14:0C:57:7D:DF:FA:90:26:20:22:AA:34:03:3D:90:3E:9C:89:FD
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:85:17:73:b4:e7:c4:9a:a9:2e:06:00:d3:1c:e8:fd:7b:9e:
4f:29:54:ab:30:91:95:4f:6d:92:04:f8:82:be:93:a6:ce:9a:
2a:f2:48:2b:3a:82:fd:07:21:ba:fb:24:2a:82:fc:c2:46:03:
01:fa:d2:9a:36:2c:40:04:ac:90:e7:90:83:b0:3e:82:97:e8:
2a:f6:59:d4:be:1d:28:70:3b:6d:17:ce:8a:fe:ef:9f:29:98:
10:e6:e2:49:41:58:f6:ae:49:62:dc:f8:3d:36:67:2a:de:a9:
6b:d2:26:c4:aa:80:da:20:4e:a4:4a:a1:c0:65:bf:ae:4b:b9:
b5:80:44:0e:e3:c6:27:e7:cc:5d:ab:b9:ac:53:47:22:00:7a:
e3:dc:1f:fb:40:82:67:03:66:80:8f:06:61:06:31:ae:fa:05:
96:37:91:72:18:4e:75:b6:db:67:94:a2:39:4a:da:bf:fe:25:
8c:5f:bf:46:6d:bb:da:18:83:1b:93:e9:b1:7f:12:cb:ec:90:
e9:50:3c:2f:71:95:64:99:14:e8:6e:45:d8:e4:6e:40:09:98:
a6:cf:18:27:d5:c8:c2:a3:dd:bb:0f:ac:f1:3b:69:f1:8a:1c:
f1:e3:c7:00:84:9d:d6:88:75:d6:37:0c:e2:7a:34:3a:9a:67:
63:1e:73:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:19:28 2025 by rpki-client