Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: CO/TwSGTk2ODc5xNbGdCG1/5e0kZ7k5z32jZe3V7di0=
Subject key identifier: BD:06:2A:0E:E2:86:05:D1:40:00:9C:BA:49:33:81:45:EB:14:49:C0
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 019682107872E6AF6DAE0DA89A2C5D534F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 0943
Signing time: Tue 29 Apr 2025 15:00:39 +0000
Manifest this update: Tue 29 Apr 2025 15:00:39 +0000
Manifest next update: Wed 30 Apr 2025 15:00:39 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: CIOwfV8OeIa3NQ4aJa2j4umMjnn6WOW15DFZDyXE3Wc=)
2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:78:72:e6:af:6d:ae:0d:a8:9a:2c:5d:53:4f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Apr 29 15:00:39 2025 GMT
Not After : Apr 30 15:00:39 2025 GMT
Subject: CN=bd062a0ee28605d140009cba49338145eb1449c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:be:3d:43:7d:65:18:18:0c:4b:a9:19:d1:
89:28:67:18:6b:60:ae:a4:18:5a:5e:5c:0a:ae:bd:
96:93:52:fc:da:d8:f6:e0:e7:03:5f:f0:9a:32:50:
f9:5c:c7:df:f8:77:58:97:67:21:3e:a4:42:03:34:
a9:98:76:8a:53:4b:95:28:fe:0f:14:bb:6c:c2:bb:
6c:42:ca:27:f0:de:69:4e:61:ee:eb:ab:1a:61:67:
43:74:ee:84:5e:a9:20:03:6f:c5:d9:61:86:08:a8:
54:4c:62:ef:eb:49:06:df:56:80:28:ee:e6:ef:1a:
5d:3a:9d:a2:5b:90:e1:5b:4d:26:7e:e4:57:1e:81:
db:24:3d:85:8c:2d:8e:97:41:ab:31:33:e6:0b:eb:
7e:ca:ba:e8:7b:96:df:44:c8:6f:b0:1d:74:73:fa:
5d:9c:a4:d2:24:72:5d:e5:71:cb:c8:d8:91:f6:61:
46:b9:ba:26:86:15:34:5a:0d:54:d2:c3:8e:42:e3:
b1:88:0e:6e:c7:0a:41:50:2e:6f:a7:aa:c9:ed:4a:
b3:94:78:fe:ad:e0:c3:46:4e:bc:c6:cb:b9:eb:73:
6a:54:1d:a0:9a:d6:f3:1c:00:a8:b3:f6:b0:7d:87:
63:00:df:f1:c5:fa:d1:53:48:ba:0a:24:04:8c:d7:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:06:2A:0E:E2:86:05:D1:40:00:9C:BA:49:33:81:45:EB:14:49:C0
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7f:58:a1:79:db:2d:7c:66:23:6f:07:c9:31:10:6e:f3:4c:
d5:87:7b:2c:14:a4:d0:92:2f:1f:4f:04:4e:dd:ee:72:b6:3f:
2f:2d:c8:f1:a4:6c:3b:5c:21:73:67:6f:c9:8a:74:a6:f4:c3:
19:2e:c9:6a:1a:44:27:20:eb:a3:fd:74:e4:94:cb:58:02:bd:
bb:3f:9e:f4:de:0b:4a:64:3d:a6:f8:8c:a7:9e:54:2d:6a:7f:
79:cf:10:23:b1:06:9c:7b:ef:7d:94:2b:a0:4f:da:22:bd:a5:
26:e1:74:7d:17:99:bb:3d:c2:ac:53:69:43:6a:97:c2:f3:e2:
f4:3b:9e:ca:ba:63:c5:4d:56:a6:a8:bf:97:13:b9:fc:ed:99:
9d:d8:ed:aa:5d:68:8f:db:bc:61:44:13:b4:59:3e:9e:3b:51:
6e:69:17:ce:66:49:d8:a8:fb:e6:e1:ff:ee:8a:41:92:d0:0d:
d5:47:fc:55:6a:c6:59:f4:2a:29:84:00:2d:b7:0e:04:ed:e0:
82:a3:aa:62:50:28:03:1b:91:aa:dc:72:b7:33:b9:98:ed:e5:
1e:e5:d5:3a:d0:43:ab:cc:42:24:82:e6:9c:cd:cf:18:94:81:
fe:03:dc:97:a5:68:16:14:cd:b6:0b:d5:76:e4:ce:9d:66:47:
92:6c:c5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:33:51 2025 by rpki-client