Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
File: NLWONYkAecLWDA5LyOyCwbMxlfY.mft (raw, json)
Hash identifier: gcasLSy+8NPO6QbviYCzETJDkzSRF00ULL0cIuDeJ80=
Subject key identifier: 01:0C:02:7C:FB:DE:F9:CE:AF:E8:0D:BA:FA:B0:7F:B3:F4:B4:F9:40
Authority key identifier: 34:B5:8E:35:89:00:79:C2:D6:0C:0E:4B:C8:EC:82:C1:B3:31:95:F6
Certificate issuer: /CN=34b58e35890079c2d60c0e4bc8ec82c1b33195f6
Certificate serial: 019695293C32ED00E620A3293F346187C7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLWONYkAecLWDA5LyOyCwbMxlfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
Manifest number: 04E2
Signing time: Sat 03 May 2025 08:00:29 +0000
Manifest this update: Sat 03 May 2025 08:00:29 +0000
Manifest next update: Sun 04 May 2025 08:00:29 +0000
Files and hashes: 1: NLWONYkAecLWDA5LyOyCwbMxlfY.crl (hash: ag+cs6217N/5qCOYguLppQ4Uc+r/W6rLKHtgiehTdig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLWONYkAecLWDA5LyOyCwbMxlfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:29:3c:32:ed:00:e6:20:a3:29:3f:34:61:87:c7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b58e35890079c2d60c0e4bc8ec82c1b33195f6
Validity
Not Before: May 3 08:00:29 2025 GMT
Not After : May 4 08:00:29 2025 GMT
Subject: CN=010c027cfbdef9ceafe80dbafab07fb3f4b4f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:be:bf:d9:11:71:02:28:66:87:62:32:a6:
0c:b3:e4:9a:ff:38:26:37:54:12:cf:6c:8d:68:68:
26:fb:87:1c:f2:3a:d7:1b:2f:0d:3a:2e:d7:99:1c:
81:b2:55:2c:a4:4d:5a:d8:a9:d1:88:97:60:36:b3:
45:27:64:6a:32:87:30:08:6b:0d:4b:af:3f:73:e2:
bf:6a:96:dd:e5:4e:f2:9e:45:d7:5d:07:ac:d1:00:
c8:0a:f5:d3:da:d3:fa:f5:10:a5:03:74:dc:b9:1d:
7c:2a:40:3b:a2:f7:3a:10:c6:89:03:6f:fe:2b:1d:
55:dc:f0:ca:13:42:49:fa:35:a4:69:6a:32:6e:3b:
3a:05:6f:90:65:2a:c9:e6:23:2a:83:85:26:85:c8:
e2:7a:ca:fa:b5:0c:6a:f6:17:c1:dd:f0:2c:57:1b:
1d:e2:df:ad:22:43:2f:b7:1a:39:f0:70:ef:30:d3:
3f:97:64:15:56:1f:74:45:9c:15:63:a2:96:cc:2a:
f2:2c:8a:36:e4:69:33:8c:22:32:4f:e1:90:8c:9f:
f6:e0:81:58:87:0b:8b:5d:7c:84:7c:e8:b4:d0:57:
0b:01:1c:29:e0:42:22:27:4d:d7:50:21:5a:8f:4e:
e1:19:11:6c:7f:f5:9a:ce:37:05:e1:d5:02:f9:da:
27:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0C:02:7C:FB:DE:F9:CE:AF:E8:0D:BA:FA:B0:7F:B3:F4:B4:F9:40
X509v3 Authority Key Identifier:
keyid:34:B5:8E:35:89:00:79:C2:D6:0C:0E:4B:C8:EC:82:C1:B3:31:95:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLWONYkAecLWDA5LyOyCwbMxlfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e1:29:d7:4f:a8:48:b7:99:58:0d:c1:80:0b:13:4c:11:f7:
7b:02:8e:6f:52:d9:c1:39:51:da:a5:2c:66:5b:54:c3:c2:db:
fe:eb:30:02:d5:37:45:05:73:86:de:5f:30:ed:f7:e8:e8:f8:
bc:b3:ed:66:c7:c9:bb:9f:70:08:f4:77:b6:f6:82:ab:70:23:
86:90:29:77:e2:e6:fe:2c:19:42:2e:1e:0c:58:98:02:cb:c2:
22:01:c0:0d:ca:50:4c:21:ba:7e:d3:a4:4b:da:33:5f:d0:ba:
3a:60:a2:51:60:fd:d9:d3:2e:dd:92:4e:27:41:e9:ae:65:b6:
cf:2e:2f:f7:41:56:a4:d6:3f:44:b4:ce:16:e9:11:e3:2d:ce:
18:1e:58:95:ef:91:78:06:8e:15:90:01:41:3b:0b:ee:b8:ff:
41:5b:01:cd:72:b6:3d:bf:28:d2:70:10:f6:ad:2e:71:53:11:
49:31:a9:a1:14:54:cd:b3:75:84:22:72:a3:66:af:36:75:1d:
6d:f7:25:67:03:7a:47:0d:89:41:f6:d8:41:f0:e2:e1:0d:9f:
3c:9f:1d:ef:d2:af:d7:a2:4b:4a:1e:28:2e:62:51:71:00:bb:
ef:6b:af:cc:3e:85:92:a8:50:27:9b:a2:00:15:2f:87:61:c7:
47:76:98:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:01:35 2025 by rpki-client