Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
File: NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft (raw, json)
Hash identifier: 6LaOjlyDdUoOi49Agfrt0PKzsDfyisO7oHDt3sX5O7A=
Subject key identifier: 5B:D0:AB:7F:C3:55:B2:55:37:4E:C5:E3:34:A4:32:DE:7F:D8:20:5F
Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877
Certificate serial: 019683FF78EE5FF6428EEAADE17B230C3A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
Manifest number: 1018
Signing time: Wed 30 Apr 2025 00:01:20 +0000
Manifest this update: Wed 30 Apr 2025 00:01:20 +0000
Manifest next update: Thu 01 May 2025 00:01:20 +0000
Files and hashes: 1: 64AufSKo0ctGsskBfGJHYgegDUM.roa (hash: TxQbijMyiwaYhEgR6gv3I6pa/f1D2b/JYXZHussR2b4=)
2: NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl (hash: ns1Az2kdJaJErhPqwGrNPsA1U5V2PekHFqOLxswrFIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:78:ee:5f:f6:42:8e:ea:ad:e1:7b:23:0c:3a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1a573915153de82890eae1303067fa68b2877
Validity
Not Before: Apr 30 00:01:20 2025 GMT
Not After : May 1 00:01:20 2025 GMT
Subject: CN=5bd0ab7fc355b255374ec5e334a432de7fd8205f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3b:c9:95:5d:37:f8:79:72:45:44:cf:6f:43:
f5:1a:49:3a:71:55:52:88:fd:fa:bb:d7:15:3a:90:
72:47:94:4c:f4:9e:f5:c1:a2:73:d5:d7:32:4c:69:
31:89:eb:cf:23:ea:e4:27:f9:1f:9d:94:f3:2f:69:
9b:04:69:76:38:8d:24:8b:c8:7e:ca:74:09:df:12:
e5:e2:41:54:25:a6:5b:cd:59:6e:ac:cc:c6:e4:2c:
6c:42:df:62:64:43:ca:03:14:66:be:6a:69:66:59:
5a:1a:74:0a:68:b8:6f:90:d7:66:73:a5:b7:95:82:
f2:a0:1d:43:ca:0a:d8:2e:38:ea:9f:f3:5c:2b:6c:
91:d0:9d:15:62:f7:41:de:85:c2:fe:51:de:1d:b7:
71:61:bb:b5:a1:62:7a:c3:0c:1c:7b:7f:12:1b:07:
6a:ac:e6:81:c4:24:17:12:e2:38:34:89:15:ac:86:
10:8f:42:e4:63:df:28:3f:69:62:df:86:10:2c:89:
2a:31:89:a3:75:81:88:34:fd:16:ae:52:69:8a:c1:
c4:d0:f1:71:5f:73:b8:a3:2d:8e:d2:97:6c:7c:89:
3b:61:5d:c2:70:4f:7f:7f:4d:92:8c:9a:e5:3b:fa:
ec:ff:1c:02:a8:62:0a:c2:37:95:a5:46:ed:de:fe:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D0:AB:7F:C3:55:B2:55:37:4E:C5:E3:34:A4:32:DE:7F:D8:20:5F
X509v3 Authority Key Identifier:
keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:88:53:64:37:77:1f:b1:43:e7:5e:31:68:04:b0:9e:18:84:
15:2c:5d:90:c1:a8:3e:ec:36:02:6d:9a:da:cf:8c:61:45:b1:
05:27:14:35:2d:fb:f2:1e:c9:0b:be:72:37:07:43:21:60:e9:
5f:3d:4c:55:8b:5e:97:08:5f:8c:15:87:0b:ff:f0:77:f3:c4:
59:c6:37:96:71:4f:30:0c:43:df:b0:8c:69:79:f3:e0:12:d2:
b8:ba:c5:e4:96:6a:72:1b:41:0a:ed:b6:1c:e6:4e:b1:af:4d:
08:1c:b1:ca:38:b9:99:1a:c6:db:94:ab:01:e7:26:18:3b:68:
04:39:3c:30:b8:51:61:a6:c5:ae:b5:53:d8:f8:5f:68:85:e9:
b6:46:29:47:c0:df:e7:e2:7d:2e:8b:c9:0f:b3:01:4e:ee:cc:
3d:e3:20:aa:c0:0f:c5:0f:b8:7b:40:7f:85:e0:3d:ca:e4:96:
41:f7:d6:ba:e3:7d:2d:be:e1:59:62:d1:b9:3d:93:51:c2:4e:
29:d7:18:ae:e8:6e:b3:21:a1:62:da:62:44:d9:f1:5f:e7:84:
b7:59:f7:66:9b:fd:87:41:e8:dd:37:c3:1d:31:0d:50:1e:4f:
50:14:cf:db:9e:4c:3b:50:96:7b:4b:19:42:e9:91:47:cd:96:
34:2b:63:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:41:24 2025 by rpki-client