Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier: tjmz1u07TqSFEHGu05Bcfg2dQOpTgHC66MU3xmHhoHs=
Subject key identifier: C9:39:91:73:9E:9E:35:2A:AD:E0:82:B3:61:03:1A:57:01:DB:03:9A
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial: 019677FBA3C6020DB10B50DFFA590AFE63DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number: 0E75
Signing time: Sun 27 Apr 2025 16:01:42 +0000
Manifest this update: Sun 27 Apr 2025 16:01:42 +0000
Manifest next update: Mon 28 Apr 2025 16:01:42 +0000
Files and hashes: 1: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: fpYzvWzOnsfTdhHykUWqRmkRhKVc/eFV08U5Xa9nCCg=)
2: j7uIJiPhcZxIrIipfuK1rqo935Y.roa (hash: 7J2YXXzcaOGsarNoeRvp5q8jGItI0Hy8Dxn5tPP/JpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:a3:c6:02:0d:b1:0b:50:df:fa:59:0a:fe:63:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Validity
Not Before: Apr 27 16:01:42 2025 GMT
Not After : Apr 28 16:01:42 2025 GMT
Subject: CN=c93991739e9e352aade082b361031a5701db039a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:00:b1:fc:98:16:29:8b:b9:ad:01:63:46:
3c:1a:42:ea:41:49:32:30:e3:c3:a5:6d:3f:65:b1:
8d:ce:64:c9:d1:4f:58:5c:ea:de:9c:c3:62:78:7e:
b4:fa:82:69:8c:8d:ff:37:71:ce:9e:d5:9f:b4:97:
b1:79:09:fa:94:5f:23:92:73:01:54:10:1c:93:5d:
ed:21:5f:f4:51:d5:58:94:9a:30:a8:25:42:c9:bc:
f8:0e:9c:64:5b:2c:60:3a:d4:e6:59:c5:94:2d:fa:
d9:29:60:e0:5b:59:09:6b:5a:72:99:53:4b:96:69:
ea:15:4e:69:56:95:81:3a:77:26:ec:ff:fb:67:a2:
4e:b8:8d:83:c9:4d:8d:2e:c7:8a:01:4f:bf:6f:f9:
b7:46:00:54:f4:77:6f:19:db:ec:87:b3:90:64:da:
ec:d3:74:b7:bc:ca:c2:94:26:c7:19:d4:f5:d2:36:
41:e2:d9:a3:de:47:01:17:0d:79:9e:70:be:0f:08:
82:69:c5:e1:d2:a0:20:52:5c:ba:10:a0:e1:32:ea:
53:6f:7b:f4:f9:5e:2f:23:b5:5a:2b:48:e6:53:20:
22:6c:fe:94:90:67:d6:22:62:3c:24:6b:01:0b:30:
66:03:0e:b9:a3:98:a7:b0:6a:ea:d8:8b:b0:1b:26:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:39:91:73:9E:9E:35:2A:AD:E0:82:B3:61:03:1A:57:01:DB:03:9A
X509v3 Authority Key Identifier:
keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:73:c2:84:d7:57:4f:ad:05:be:45:09:a7:10:23:68:fb:c9:
8e:81:c3:5c:cf:06:ad:40:c0:7e:a5:cf:5f:26:d1:3d:e4:30:
ab:7d:2d:55:aa:8d:49:b3:c7:70:b1:83:55:a1:c4:03:36:fe:
d9:ce:35:85:42:f5:90:7f:a9:cf:a8:10:50:b9:50:39:2e:96:
c8:cc:8c:f7:5b:de:23:67:4e:1a:5d:6d:a2:16:d0:13:3b:74:
70:70:a3:e2:19:75:5c:f0:3b:9f:57:61:9e:f1:4d:cc:0f:d2:
7d:38:07:7f:4c:83:af:34:ff:f5:61:d3:1f:9f:40:c4:2d:5b:
25:e4:60:cb:fa:84:34:31:45:bc:99:87:24:e8:f1:fb:ae:3b:
1c:fe:64:f2:07:1b:59:09:bd:1c:a1:68:bc:f4:18:18:d8:1e:
3f:84:1a:09:dd:2c:94:6a:1a:9e:ec:b3:da:3c:21:14:2c:47:
7e:0b:cf:64:19:a7:81:89:19:85:75:bf:65:39:9b:0f:e4:69:
ae:79:ad:4d:7e:8a:32:00:52:30:b5:68:5c:ea:90:ea:59:2c:
51:02:8c:11:f2:c7:0e:58:e1:37:d9:0d:7f:c9:4b:1c:f6:0e:
6a:aa:10:f5:2d:30:9a:13:b2:ca:c4:f7:94:ad:e5:11:a0:76:
2c:39:84:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:58:32 2025 by rpki-client