Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: ajv4ZUYC2Jbo7tDnQkMj5WBYnQIZ0c9hun4UdoPnWbw=
Subject key identifier: B1:0D:0A:E3:76:6C:A0:10:9A:62:79:7D:7C:D4:7F:D5:53:37:50:9D
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 01968623FB57F4A47B1A0332320354C8C0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 14EC
Signing time: Wed 30 Apr 2025 10:00:27 +0000
Manifest this update: Wed 30 Apr 2025 10:00:27 +0000
Manifest next update: Thu 01 May 2025 10:00:27 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: wo4193auBwV4rpHlxb2vPLOUCgCfqEWexUILS8dtyrw=)
2: OwN_u8-wXQUeHGlWNCeV2-9Zw1E.roa (hash: GL8HC8nKjSwa4mRugn3DqDIjF1e/NuFqUhL9j08TswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:fb:57:f4:a4:7b:1a:03:32:32:03:54:c8:c0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: Apr 30 10:00:27 2025 GMT
Not After : May 1 10:00:27 2025 GMT
Subject: CN=b10d0ae3766ca0109a62797d7cd47fd55337509d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:8a:fd:c9:d4:cd:4c:0b:61:90:3c:c0:82:
99:5a:de:81:60:99:e8:b0:71:fc:93:d1:91:27:61:
b7:9f:7d:97:24:41:7b:db:6f:ba:9b:31:70:d6:7d:
2b:9f:3f:c5:6f:25:bd:22:11:80:5b:d8:bf:b5:fe:
7c:5a:41:09:df:22:0a:be:63:51:a3:82:cb:a0:c2:
0f:0d:97:55:60:a7:b6:56:51:45:16:c9:75:f6:23:
0a:e0:93:a5:e0:99:66:4a:b3:39:ee:1b:4f:76:23:
43:e5:e7:0e:8b:d3:47:a3:87:af:53:30:a0:7f:4f:
61:8d:af:54:00:1b:3a:26:43:1a:1d:00:b8:0e:c2:
68:d3:f6:46:0d:aa:fa:e9:18:96:40:4a:86:d1:25:
75:18:57:ca:1f:e9:2a:1e:a4:ae:f2:13:0b:3d:79:
88:e0:9a:4f:ec:d0:69:81:88:56:f9:1c:53:3e:9a:
fc:56:e3:23:19:64:1a:4f:d4:ae:a9:fd:45:05:06:
e2:76:9e:17:19:6d:d0:63:c6:42:58:0a:7b:53:b4:
5d:97:b3:e7:13:f6:aa:a7:90:9f:a5:a6:26:26:70:
dc:de:5a:e3:30:d0:aa:7b:51:1b:71:2f:d0:a0:5a:
89:8d:60:38:6d:85:b1:88:13:2f:3c:36:31:7e:0b:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0D:0A:E3:76:6C:A0:10:9A:62:79:7D:7C:D4:7F:D5:53:37:50:9D
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:41:72:64:52:4e:ea:c1:09:31:2c:6f:81:9e:22:17:c2:2f:
8b:ed:89:78:01:74:a8:00:c4:19:9d:ec:ec:10:b6:7c:6e:c2:
b9:3b:11:2d:73:ef:6f:78:25:b1:78:c0:0c:66:23:46:e4:15:
4e:ae:99:6d:cf:84:64:f3:f6:5d:15:29:02:56:5f:f8:62:75:
8f:9f:f5:85:b9:e3:0d:73:6d:9c:65:84:d6:f5:55:4f:d8:bc:
21:56:9d:31:f1:4f:ef:80:fe:f3:84:47:64:2e:a9:33:64:9a:
5a:8e:29:ae:1c:49:67:2c:20:b4:48:ab:54:da:56:1f:c9:0b:
18:3c:02:31:04:19:64:17:95:7d:21:b5:1d:56:b8:0c:f7:89:
fd:35:e1:fd:a4:f4:7b:91:d8:f6:ce:81:85:88:51:d4:1c:6f:
f0:7f:8d:5e:92:b0:9f:39:03:50:9c:3d:c7:79:bf:83:51:b7:
a9:e1:37:b3:65:5e:f1:26:f0:02:ca:c7:3f:b4:85:66:19:85:
63:35:19:9c:ba:50:30:e9:00:9b:b1:75:c0:e0:2e:0e:77:40:
51:31:b1:88:b3:15:cb:51:7b:03:a1:89:a2:08:20:d4:cd:f3:
38:d5:96:19:93:fb:87:eb:a2:81:64:37:97:44:2d:07:74:db:
1d:d2:e2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:36:26 2025 by rpki-client