Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: 47nc5gvTEvTofUECeRHYW0oVMY0VqI/6YitpsmLbYz0=
Subject key identifier: 0A:3C:6E:80:CA:8A:03:A2:ED:9D:63:68:44:0E:38:68:96:98:F1:CB
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 01969528FCF99B7842C2759D58F6C44853BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 151E
Signing time: Sat 03 May 2025 08:00:13 +0000
Manifest this update: Sat 03 May 2025 08:00:13 +0000
Manifest next update: Sun 04 May 2025 08:00:13 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: p2i16dJBrQUb0ZcI0wqbpptL0Ult0AncOAjOebrsvH0=)
2: QIqKLnFZSvkIdztpTOrghmndfqs.roa (hash: wHBtvNsb06U7COg9JhFFEVNmIo0CSx+CQSOErCnUsO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:28:fc:f9:9b:78:42:c2:75:9d:58:f6:c4:48:53:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: May 3 08:00:13 2025 GMT
Not After : May 4 08:00:13 2025 GMT
Subject: CN=0a3c6e80ca8a03a2ed9d6368440e38689698f1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:c9:39:7d:27:87:b6:24:27:3f:a9:9a:0d:
ce:65:9c:a1:76:fd:3e:15:34:89:4e:13:7b:a1:88:
79:28:61:a1:aa:44:6e:9f:38:42:b3:e5:88:41:0a:
85:0a:72:86:e0:5d:41:57:b0:3a:2b:a6:62:51:9a:
8a:b0:ee:a0:81:9d:56:86:55:4c:08:fc:9f:49:60:
e8:cc:f7:36:ed:90:5e:8f:5c:3a:b7:1a:43:d6:63:
aa:04:84:1e:a1:58:b2:14:6d:89:64:1a:49:d0:d8:
46:dd:57:b8:7a:f9:0c:a7:44:d4:ec:63:d6:a4:9f:
f4:49:35:df:8f:4b:55:57:fd:ff:c7:99:ba:0f:77:
bc:51:81:6f:53:5b:bd:f8:45:f4:87:5a:54:e4:cb:
df:a1:2e:50:36:fd:46:f1:9b:64:76:c2:e4:00:ee:
ea:d0:ea:3f:e5:02:d1:41:6e:05:ea:bd:07:89:e5:
a1:c5:18:5c:4c:73:2b:19:2e:f2:df:24:35:5e:31:
98:d3:87:bc:00:f4:e9:0b:fc:e6:83:f0:fd:52:2e:
9e:9b:6b:d0:ee:72:07:f0:d9:7c:92:0b:45:5f:36:
bc:65:fb:81:1d:1f:64:16:82:6b:e6:dd:8e:6c:26:
24:eb:06:6c:39:eb:c0:f4:23:ea:b6:68:81:cd:7f:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3C:6E:80:CA:8A:03:A2:ED:9D:63:68:44:0E:38:68:96:98:F1:CB
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:95:f7:0b:98:96:17:12:c9:11:a7:9f:7d:d3:cd:0a:37:50:
39:ab:10:93:24:59:cc:35:01:82:b1:38:af:f0:14:87:0b:0e:
5f:d4:a4:b9:90:ca:ab:62:d4:3f:f0:9b:09:14:40:31:02:33:
71:1f:c0:a2:a4:af:92:7f:bf:4e:47:e3:71:9c:e2:3f:50:84:
74:b3:1f:59:8e:70:e4:7c:f1:d6:74:97:3d:c2:84:0c:ce:ea:
65:92:8a:c5:5e:b2:04:ab:bc:c9:a5:42:84:a4:b4:65:a6:51:
c7:01:92:36:cf:5d:11:3f:e2:91:e6:8b:91:5f:8c:51:5c:99:
ce:02:8d:72:b0:d7:79:93:bc:ee:84:d5:36:70:22:7d:02:7a:
93:af:7d:0e:a4:b8:a2:5b:88:c7:ed:a6:51:b2:7c:5f:04:79:
fa:ce:e3:0b:02:48:dd:c5:55:83:13:1c:f5:50:96:ff:38:a2:
83:d6:1e:e8:0a:9b:1a:fa:05:5c:a5:c1:da:b9:d5:80:bd:ad:
0a:f8:97:2c:6a:39:37:c4:9b:51:36:90:93:9f:9e:b9:6c:b7:
50:59:ce:dc:6a:51:98:0e:d0:bc:9c:7f:c5:ae:2c:b1:98:75:
52:8b:ed:e3:f1:a8:79:7b:69:a8:1a:d0:47:1d:56:7f:72:8b:
1d:85:d7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:22:22 2025 by rpki-client