Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier: Vd1RuWNfrwNQgnuQcuueCpdcGTHj/UZ2DqwEIbownck=
Subject key identifier: 04:60:A0:FA:40:47:D5:F5:FC:14:8F:48:DD:75:11:2A:32:9D:07:F0
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 01968B4AA54EA906760EFC0678CB6FC430B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number: 1241
Signing time: Thu 01 May 2025 10:00:47 +0000
Manifest this update: Thu 01 May 2025 10:00:47 +0000
Manifest next update: Fri 02 May 2025 10:00:47 +0000
Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: kn7Xo1Yxuw5xGHpNLsPf8VOtIpC+WzzikwY+Ku7nN1Q=)
2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:a5:4e:a9:06:76:0e:fc:06:78:cb:6f:c4:30:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: May 1 10:00:47 2025 GMT
Not After : May 2 10:00:47 2025 GMT
Subject: CN=0460a0fa4047d5f5fc148f48dd75112a329d07f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:ca:cf:9d:ab:56:b0:dc:b5:e0:09:0f:8c:
a8:2d:db:31:51:43:4f:d2:c1:94:01:f1:6a:e1:e7:
ab:a8:ef:57:1d:d1:ab:60:03:98:ff:15:9f:dd:21:
e5:ef:f1:04:0d:fb:de:ba:77:bc:ad:80:75:4d:73:
fd:e8:2f:8d:34:5b:27:16:e2:3a:0a:36:75:99:1e:
f4:e8:f5:73:93:da:b0:71:68:b2:cb:5c:e1:15:e4:
e7:c9:6e:24:5d:b7:76:42:a8:68:43:8e:3b:43:9a:
9f:e1:3f:3e:6a:74:40:0a:e9:03:05:0b:a5:c6:eb:
1f:2f:fd:d8:94:a6:34:2e:c2:52:56:0a:a7:7d:c2:
20:3e:15:28:81:f1:c2:cf:35:4c:d8:1c:8b:a1:9a:
09:5c:dd:4d:64:35:67:0f:79:16:70:ad:2d:d6:f1:
ff:b9:86:ba:90:c9:ba:84:4a:6f:08:50:6d:f6:6e:
23:68:ba:4a:08:80:94:fc:86:dc:7a:d6:25:ff:8f:
a2:58:75:15:a5:be:c5:54:81:17:a5:b9:1f:2c:f5:
9e:8e:56:69:87:8a:9f:70:a0:f2:17:b9:c0:61:d1:
d8:69:54:8a:63:66:f7:a5:25:af:ac:ec:ca:30:f9:
e3:a1:cc:b6:ec:4e:3b:28:5f:97:82:34:f5:a6:52:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:60:A0:FA:40:47:D5:F5:FC:14:8F:48:DD:75:11:2A:32:9D:07:F0
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:de:0f:05:4f:c6:b5:25:53:5a:7f:cd:0b:b7:7e:67:33:96:
b9:02:ec:4b:1e:ec:62:43:3e:a5:a9:4e:49:e4:c8:39:ba:79:
b7:b2:7e:6a:df:79:a1:56:83:b8:a6:07:a4:58:20:23:62:cb:
26:a3:3a:9f:71:c1:48:0d:26:37:52:19:f0:2a:b1:75:da:76:
48:95:34:13:96:43:30:14:5b:56:fc:d6:ea:ae:f4:12:f1:3a:
ea:8d:37:53:46:12:28:a8:18:85:b8:d5:f0:1f:9d:54:fd:9c:
3d:63:b0:c5:7e:73:45:b6:8a:db:9e:10:08:4b:63:b0:a9:19:
fc:d1:ab:07:85:72:ef:a4:d6:28:1e:67:9f:ac:05:7e:1c:8f:
3a:99:9a:7d:c4:c6:1e:f6:c0:11:f8:32:24:5c:7e:cd:47:4d:
2f:d2:7c:e2:0f:b7:82:d5:ce:13:2c:d1:01:01:8b:87:1c:38:
50:e1:f9:12:28:38:13:aa:ff:24:2a:65:81:9d:57:cc:7e:2f:
49:b3:47:b7:19:2e:db:91:b4:c6:52:65:fa:e0:18:07:cd:70:
5b:82:eb:f7:5b:ea:c3:89:df:ab:a8:68:77:56:c9:a8:0a:ac:
8d:a9:c8:a7:84:af:52:ea:80:9b:7a:37:1a:f0:e5:5e:c0:00:
1f:94:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:54:46 2025 by rpki-client