Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: XNs1UBLNgyraXe6lDXaWV8/OzkXzTIJ7k90hdNtMWAs=
Subject key identifier: 3C:AA:68:69:3E:AC:B6:37:D8:0C:60:98:41:43:69:19:AE:2E:71:98
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 0196A164731F2ACAE66E3ED6A9474E463DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 17:00:36 +0000
Manifest this update: Mon 05 May 2025 17:00:36 +0000
Manifest next update: Tue 06 May 2025 17:00:36 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: eNvL0ncBMrD12KsrK1XIr22kvx0dgOftHi8OxrLPpiI=)
2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:73:1f:2a:ca:e6:6e:3e:d6:a9:47:4e:46:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: May 5 17:00:36 2025 GMT
Not After : May 6 17:00:36 2025 GMT
Subject: CN=3caa68693eacb637d80c609841436919ae2e7198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:e4:ef:50:5d:eb:bf:71:fa:a3:9f:48:ff:
87:78:4e:9e:73:bd:fd:e2:e3:f0:c4:99:d4:2b:f9:
0e:9b:11:7f:2e:f6:d7:1f:48:b0:1b:af:e9:f9:fe:
c3:12:0d:b4:69:c3:17:a4:65:b1:42:ff:34:14:23:
3c:de:c0:3e:db:f8:07:eb:97:33:f9:c3:eb:2b:30:
b7:db:14:78:d8:5b:32:d1:26:e8:4a:31:c1:a6:e1:
d3:b4:d3:ef:53:b2:3e:68:b6:48:8a:cd:ab:19:94:
67:22:9b:9b:8f:26:2d:f9:66:23:01:e4:96:68:c1:
d5:7c:49:1d:87:69:d1:11:c2:ee:15:29:06:36:64:
c9:60:86:b8:eb:2f:42:ee:cd:cd:be:7e:f6:56:29:
45:33:7b:d3:68:38:65:d1:60:15:51:47:65:09:28:
55:22:29:84:05:d7:bb:1a:33:eb:a8:0d:1c:a3:94:
4f:c0:5f:ad:e8:bb:b6:1b:0e:a6:c4:6a:d4:be:2c:
36:8d:53:78:e1:f0:1c:15:18:af:8d:e3:2c:4c:4a:
bd:b3:17:3f:f6:98:93:bf:4f:24:e2:6a:9d:de:19:
8d:99:c8:6b:13:ed:6d:b1:d3:3c:50:6a:66:ae:d8:
43:52:45:c7:e8:bf:3e:53:8e:8a:7f:c2:fe:2a:7f:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AA:68:69:3E:AC:B6:37:D8:0C:60:98:41:43:69:19:AE:2E:71:98
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:51:2e:98:0f:6e:ce:db:d7:f8:ef:92:a7:ae:86:b3:d0:
8f:e5:26:3f:15:8d:af:c7:39:2b:d1:48:f7:d5:89:d6:32:87:
62:cb:5f:1b:36:2c:88:4d:7f:1b:4f:c5:44:9e:7b:d0:bd:19:
90:8f:5d:8f:37:ba:07:15:fc:f0:55:7b:9f:80:c1:fe:52:05:
72:5f:6d:a5:3b:33:54:a2:00:39:35:e8:3c:3e:b5:72:43:2c:
42:8c:9a:1a:a9:8e:c4:92:ea:9c:3c:54:c9:6e:c5:92:1c:2c:
db:dd:6f:cc:6a:4f:3d:dc:de:16:bc:16:08:8c:39:2a:8e:73:
21:94:18:72:88:91:89:ac:f5:17:44:12:cb:4c:e4:0f:09:3a:
09:95:df:a0:bf:2e:2f:ea:ef:c5:d2:f4:d6:fa:44:08:77:21:
35:de:83:1f:84:a7:47:78:e2:d2:37:2d:07:df:28:16:94:fe:
ab:19:a0:b9:97:8d:91:59:6a:78:ce:ec:c7:a2:5b:9c:64:dd:
fd:f1:18:48:dd:1e:84:2b:92:d8:3f:4f:d5:bb:1d:70:a3:dc:
07:3e:b2:b9:23:d9:db:1a:6b:e0:80:89:4a:47:c6:e9:a4:26:
2d:86:49:ef:b0:ee:33:e8:53:23:f6:0b:06:83:b1:bc:51:51:
6a:d2:d4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:25:08 2025 by rpki-client