Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
File: ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft (raw, json)
Hash identifier: lprBDjooPm3wL9O7Yfbs5YeUBFi1S/1+FxwrYCrMzSg=
Subject key identifier: 2E:3F:60:96:A4:F7:7D:E5:D5:04:B2:B7:EA:57:18:C0:FE:80:E4:34
Authority key identifier: 9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
Certificate issuer: /CN=9edc3ff166155e6988be8095fcb420001d8be21d
Certificate serial: 0196B6D9786741BE36E7FA0456BD3394DB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
Manifest number: 152E
Signing time: Fri 09 May 2025 21:00:27 +0000
Manifest this update: Fri 09 May 2025 21:00:27 +0000
Manifest next update: Sat 10 May 2025 21:00:27 +0000
Files and hashes: 1: 9f1wfLMKGBE8v9MkOS4m3itL3mw.roa (hash: bPIUPhKEdbriAsko7Y4dw04AFw67jLRfl2Ngnf52fJ8=)
2: ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl (hash: SEZz05rDub1vfOQPnXL8DD/17vsddSeOcq2wfVxVca4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:78:67:41:be:36:e7:fa:04:56:bd:33:94:db:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9edc3ff166155e6988be8095fcb420001d8be21d
Validity
Not Before: May 9 21:00:27 2025 GMT
Not After : May 10 21:00:27 2025 GMT
Subject: CN=2e3f6096a4f77de5d504b2b7ea5718c0fe80e434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:f6:32:9d:7f:c1:fd:6e:6b:cd:0e:56:a3:
6f:97:20:ed:21:69:5d:13:8a:07:1a:1b:ee:dc:e3:
fa:ef:69:48:96:d6:04:a0:3a:7e:8a:21:7f:fc:10:
17:41:53:18:86:09:ff:df:0e:08:42:75:42:66:fb:
b5:35:91:ae:d8:55:3d:81:bf:f9:89:db:3d:01:89:
f5:c3:2c:34:6c:83:6c:29:a3:2f:69:d7:c7:fe:e0:
07:84:53:bf:d2:78:b5:15:63:59:7a:b3:e5:da:59:
be:c9:79:fe:2e:7d:2d:bf:e5:8d:89:dd:cd:3a:67:
f9:65:4c:15:3f:38:79:3d:a5:9f:57:e1:d6:fd:89:
3b:35:33:70:96:fc:42:c4:0b:cd:45:d2:c7:8b:76:
61:d5:31:0f:16:67:c8:91:46:d8:56:24:6e:ca:db:
21:ff:c6:4a:aa:6c:11:11:b6:a0:d5:e6:00:6a:a7:
d2:59:61:e5:03:47:db:51:6f:1a:76:5a:fa:96:82:
19:dd:27:f0:98:30:55:a9:d0:e6:49:37:98:b1:2c:
01:67:e9:11:a2:23:6e:ef:d9:8e:f6:c1:68:7f:92:
53:02:09:07:42:63:69:c6:16:66:b5:b6:4a:3b:8c:
2a:8f:49:bb:2b:37:c3:89:a2:c7:95:c5:e7:db:b0:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3F:60:96:A4:F7:7D:E5:D5:04:B2:B7:EA:57:18:C0:FE:80:E4:34
X509v3 Authority Key Identifier:
keyid:9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6e:7a:df:94:c6:76:02:ba:2f:c1:70:84:eb:99:5d:4a:69:
42:68:fb:10:08:1b:d6:02:3c:cc:5a:38:e9:d5:a1:01:63:b2:
29:90:0f:b9:6b:64:3e:7d:ad:d3:42:4a:da:22:e9:ff:e1:83:
90:d6:78:44:e6:e7:e2:a9:01:f0:97:d8:e3:2e:43:d8:44:65:
f4:19:34:0d:9e:fa:b9:56:15:4e:b9:6b:98:25:ca:0c:2c:5a:
17:3d:76:1e:78:4f:4c:a8:14:96:fb:62:b3:35:95:7f:df:ee:
3a:4c:59:eb:b3:0f:13:01:7a:13:15:4a:60:fb:b2:81:69:2c:
51:f1:b2:3a:ca:87:ee:fa:a0:b2:fb:0e:cb:b1:d0:9e:85:ad:
3f:5c:68:3f:25:97:05:8a:57:41:b4:d1:d1:d6:ce:67:56:e2:
b8:35:8f:e0:13:59:4b:49:21:54:5d:b1:38:8a:38:df:93:68:
3f:29:5f:0c:26:cb:c7:6a:9f:14:f9:65:46:a4:1e:cd:48:e6:
6a:a2:32:3f:ba:f5:68:9e:cc:8b:a6:af:a5:ff:7a:c4:2a:04:
e3:62:ee:9e:34:bb:c4:fc:ca:5e:a2:0c:0c:2a:a5:d0:6c:3b:
1e:1a:90:e8:e2:74:18:95:15:e6:4c:be:66:f3:67:aa:e4:b8:
96:92:d2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:42:15 2025 by rpki-client