Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: b3VnIwf1Rz+9jzAEEGcqyyh+GylaPfLFze9cHBP+s4k=
Subject key identifier: 28:6A:0B:E9:CF:46:88:12:FB:7E:38:AE:FE:36:93:57:49:40:E7:89
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 01967679EBFC3040DE762670FB71CB32E263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 0CBF
Signing time: Sun 27 Apr 2025 09:00:23 +0000
Manifest this update: Sun 27 Apr 2025 09:00:23 +0000
Manifest next update: Mon 28 Apr 2025 09:00:23 +0000
Files and hashes: 1: EWVGu4R3cKhh-BKSuA-TvtreUvQ.roa (hash: Cb21KXqlqAwW72hMYX2oxSoLP7mzvnq3iAy2bdJYdnk=)
2: IMuaaqkXSGjmCph5e3uk681ceAc.roa (hash: IjS3EjK/LCrXgvu7toh9AQWnzqQYr/P4/Fdrho/vCP8=)
3: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: 3d1qEv08F5r2/VYaJJdCgqe3QFDDO0uMMEiMYDbRjmk=)
4: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:eb:fc:30:40:de:76:26:70:fb:71:cb:32:e2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Apr 27 09:00:23 2025 GMT
Not After : Apr 28 09:00:23 2025 GMT
Subject: CN=286a0be9cf468812fb7e38aefe3693574940e789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f4:b5:76:97:ca:1b:5d:c4:2c:8b:66:6d:ca:
92:59:e1:2a:65:b0:ff:38:77:46:97:bb:03:3b:89:
66:a3:35:f7:c9:81:36:d4:be:92:a4:1d:e6:38:99:
05:6a:5b:b6:77:9e:b6:6e:15:97:4f:87:8e:ac:4a:
ba:7a:f8:4c:33:bd:31:bc:b2:67:52:39:71:1c:d5:
b1:ca:78:b6:b4:d9:15:d1:16:20:9c:e8:a8:8c:aa:
4c:a9:69:11:e6:ca:c2:e6:26:29:97:3c:1b:eb:fa:
c1:cb:7b:1c:c8:02:f0:d7:00:66:58:36:1c:04:76:
be:ad:2d:e5:50:f5:ef:03:9f:4f:6d:11:bf:c9:9a:
b5:d9:92:aa:c4:c3:b0:b5:96:e4:5d:a1:3a:8f:06:
ea:db:40:96:d5:e1:2e:68:76:73:d7:1f:95:a2:eb:
e7:e0:90:a3:39:b5:12:e1:3b:06:24:7b:d6:e3:e2:
c1:c3:ac:ed:f4:af:71:ea:4e:48:0a:06:b2:a2:0f:
8c:29:c0:7f:5e:f6:b0:44:fa:5f:fb:f9:a7:69:dd:
20:bd:49:04:17:ec:af:53:b0:cc:b1:52:84:98:a6:
85:32:31:d4:7f:d8:0f:32:34:2d:90:6a:73:b7:1d:
e6:61:a1:8a:1d:8b:b7:8d:0c:f0:ab:a1:67:90:82:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:0B:E9:CF:46:88:12:FB:7E:38:AE:FE:36:93:57:49:40:E7:89
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:91:a2:65:64:ca:80:4c:47:38:18:03:7e:82:12:ec:99:34:
72:02:f8:bd:19:ec:4d:09:84:fa:e2:b9:2c:bd:1d:9c:cf:3b:
33:c7:f3:49:a3:4e:41:00:f7:11:31:e3:aa:38:b3:5e:a4:fd:
a3:1e:15:9d:32:80:41:bb:c3:c9:0a:79:95:23:8c:18:c9:06:
8d:33:d5:3f:9f:a5:49:52:ef:1d:fd:4a:2f:f4:a0:19:67:b1:
60:c3:e9:f2:9f:86:1e:fc:6d:94:c8:c7:df:29:eb:3a:7c:33:
19:ce:10:86:16:a1:82:12:c0:7a:a5:c2:e9:c3:4c:a4:51:77:
50:f8:19:cd:13:53:22:5c:45:69:14:95:b8:a7:8f:dc:a3:9e:
c7:b8:5b:73:52:da:66:12:95:fb:db:12:f4:b0:c3:84:ba:60:
31:7e:99:b2:b7:5c:8d:49:45:fb:55:6d:72:40:68:a5:74:13:
6f:8a:b6:30:52:e3:e8:b0:2f:84:5c:a6:28:67:a5:a4:b0:b1:
ce:a4:9a:d8:fc:d7:83:4f:82:bd:6e:8d:4c:de:05:4c:13:24:
ee:39:85:14:9d:ab:c0:7d:5d:a4:42:ff:a1:ff:74:ea:1e:43:
ab:6e:6e:b9:ed:91:80:7b:29:4f:05:a2:7a:5f:12:f5:bb:6e:
71:7e:3d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:13:16 2025 by rpki-client