Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: 6Ggvj4NaIXnmxVaAmFLw5iIkyfzuZAUU40k3sec6/Ws=
Subject key identifier: 60:5C:7B:AD:57:4C:BC:2A:DF:D3:DC:3B:5E:09:96:91:9B:32:55:A0
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 01967755BDD4B41B2B48917C0B99A79F1E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 0DD1
Signing time: Sun 27 Apr 2025 13:00:29 +0000
Manifest this update: Sun 27 Apr 2025 13:00:29 +0000
Manifest next update: Mon 28 Apr 2025 13:00:29 +0000
Files and hashes: 1: 1VjnRsjH9J2pm4uVe978n-iNrLc.roa (hash: WbD1CWbWE7mMQBvGdpMQAUMcAbXTa0wFyWWbYENUrVA=)
2: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: qLstwXUZ8l/CRrB+O/ogAs6uBk0C+uQ0tgbPLlNpX7U=)
3: snr-oR1drnGUDE12am2Oc1SmmAE.roa (hash: ypW1nfFwE2qpQdtfuVLzUTdrQHGTdbKiKTowycflNh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:bd:d4:b4:1b:2b:48:91:7c:0b:99:a7:9f:1e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Apr 27 13:00:29 2025 GMT
Not After : Apr 28 13:00:29 2025 GMT
Subject: CN=605c7bad574cbc2adfd3dc3b5e0996919b3255a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:e9:5e:64:8c:68:88:ba:84:42:d5:d4:16:
b2:4c:9d:86:d0:c1:c6:0f:e4:75:06:22:6f:bf:d8:
6b:c5:fb:28:b0:0a:7f:1d:5a:20:05:18:1b:ec:69:
1e:35:81:fe:aa:c3:b8:46:68:bd:ab:4a:6a:71:8b:
d5:48:1b:c4:31:b7:22:8b:4b:1c:ee:9b:e9:8e:8b:
36:b3:da:32:ed:7d:c5:8c:ab:0b:6f:85:2e:68:aa:
87:a8:75:57:09:ea:c9:7d:e4:ff:78:4f:03:eb:81:
8f:7f:d8:b4:9b:61:a9:8d:50:f0:ba:1d:ec:9c:d3:
ba:4a:e6:49:d1:81:3d:6c:6b:9e:6b:9d:bb:06:71:
47:7c:61:43:1c:a7:27:7f:e5:51:ac:66:8e:a4:5d:
5a:0b:36:bb:d7:1d:91:6e:a4:78:b4:0f:1f:69:f0:
8b:74:e0:70:1b:59:aa:18:ef:20:e9:7a:9b:b3:d0:
0b:9a:87:57:1d:8a:77:e6:dc:0a:d4:b7:92:1c:d1:
2e:a0:32:76:95:b5:16:c2:f2:8c:02:51:78:45:a8:
12:d5:96:31:8d:12:5f:19:9e:d6:2d:a6:14:e8:f4:
08:58:4a:b8:d0:4d:8b:a5:93:0b:f2:41:9f:a7:9c:
0f:96:3f:78:a5:db:e6:82:fc:45:39:8c:e9:8e:cd:
6e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5C:7B:AD:57:4C:BC:2A:DF:D3:DC:3B:5E:09:96:91:9B:32:55:A0
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d4:86:7e:c5:a5:dc:f7:86:21:fa:ce:31:b5:0d:7a:ef:63:
32:f9:c4:84:3d:eb:58:c4:c3:e8:92:8e:06:3d:0c:ac:f7:2c:
0b:d7:24:98:01:9c:9d:9a:bd:b0:20:e7:f4:d0:60:5d:4a:fc:
00:4d:71:6d:3a:fb:73:7a:e0:8d:c8:fc:58:a1:5d:a5:a3:43:
18:2b:49:7f:01:66:ea:7c:df:75:5c:48:d9:77:7b:13:12:1c:
a4:71:23:d1:49:7e:c1:fd:34:7e:61:31:25:f1:17:04:5b:c8:
40:c0:97:ff:1c:b3:11:b5:47:3e:e7:f4:32:6e:2c:1d:27:b0:
b4:ca:e0:d9:32:43:ec:4e:15:1f:d0:d4:bf:f6:51:b3:cd:0b:
a2:0a:d7:14:a1:29:c8:ca:64:d0:5f:7d:0a:b4:65:ff:07:43:
19:f7:f5:17:02:e3:37:5a:c7:2c:9f:f6:f7:26:95:f5:bb:cf:
7c:35:ce:87:1a:c7:f1:4e:5f:26:ce:8c:78:9a:57:fa:bf:52:
bb:86:58:6b:b1:b9:35:02:ee:4e:cb:d4:5e:ed:b3:89:2f:0c:
08:2b:36:9a:69:ec:90:e0:77:6e:2d:1a:5f:73:0f:b1:6d:7b:
ec:a2:16:01:7a:b8:cb:f4:f4:14:cc:c5:f2:1d:84:e4:77:d9:
26:1f:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:06:55 2025 by rpki-client