Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
File: NsxJTEqTS7s89Gulgk1mZsiUei8.mft (raw, json)
Hash identifier: HssagOtcx3x96SYVLTxv1gm/CQc13ZmC2YI1vS/6WdI=
Subject key identifier: 2A:8C:85:87:D6:27:7D:F5:E3:0E:F9:EC:B7:42:B3:B1:B5:9D:E4:1B
Authority key identifier: 36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
Certificate issuer: /CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Certificate serial: 019693DF78FF88BEB5921814FE215D117271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
Manifest number: 04DC
Signing time: Sat 03 May 2025 02:00:18 +0000
Manifest this update: Sat 03 May 2025 02:00:18 +0000
Manifest next update: Sun 04 May 2025 02:00:18 +0000
Files and hashes: 1: NsxJTEqTS7s89Gulgk1mZsiUei8.crl (hash: xTQnJ4PSMSkk8AyGSqLo/3SdrrWTbl1bTZWtUSJHhqM=)
2: StdZuEMdBW7X4NXLCF7XI4ppVlw.roa (hash: iq6H8WyI/GcnhvxxJGW8O2+6IQ6zatbRbbXOnldRxIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:df:78:ff:88:be:b5:92:18:14:fe:21:5d:11:72:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Validity
Not Before: May 3 02:00:18 2025 GMT
Not After : May 4 02:00:18 2025 GMT
Subject: CN=2a8c8587d6277df5e30ef9ecb742b3b1b59de41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:61:7f:db:28:36:ba:1f:92:96:bb:db:01:
23:44:a2:13:f0:76:5c:99:67:73:4a:a7:04:89:bf:
c7:37:4a:9b:83:31:22:96:cd:08:de:42:94:65:82:
c0:ea:24:68:55:89:8f:b6:4d:93:4e:04:05:0f:8c:
89:1a:cd:49:0a:a1:c5:4a:2e:f5:95:2e:3d:39:3a:
05:ea:0f:2c:88:23:f5:9e:72:53:bd:a9:67:68:65:
b9:60:19:e8:85:4e:fb:95:ec:a4:66:8e:4b:e2:41:
b2:e1:06:12:56:5e:91:34:5b:d2:f0:86:8c:b6:b9:
46:8a:03:0b:13:ee:d1:cf:71:a7:87:4a:48:92:f2:
a8:29:a9:a6:4d:1f:7b:a9:46:cd:26:d5:c2:10:f7:
53:46:63:ef:a3:79:de:51:d4:ee:a3:56:08:13:6e:
07:ae:62:a7:c2:54:0e:47:1d:e4:c5:d9:00:ca:f9:
b9:b8:8c:1d:23:b0:8e:9d:4c:c7:27:87:ee:8a:22:
23:29:83:db:42:8a:44:5b:11:fa:43:35:66:8b:a8:
44:1e:4d:6f:8b:39:8e:77:38:b1:9c:cf:5e:62:87:
58:cf:f6:70:bc:8f:24:b1:28:6f:e2:77:bd:56:71:
9c:7b:2f:a5:ee:39:19:a4:3b:be:57:b5:27:31:14:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8C:85:87:D6:27:7D:F5:E3:0E:F9:EC:B7:42:B3:B1:B5:9D:E4:1B
X509v3 Authority Key Identifier:
keyid:36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:bd:3b:2b:9b:8c:1e:23:e1:a6:d0:f1:1e:b4:f2:df:04:0f:
21:33:ab:9b:16:d7:59:18:e4:77:be:f2:79:9c:4b:2f:08:70:
2f:d4:35:24:31:03:0f:93:e3:57:ac:c1:58:b6:e4:22:90:73:
cc:85:d0:03:c1:f1:75:1d:a2:fb:79:7b:b9:69:16:51:12:b6:
19:14:a4:fd:86:82:19:78:ef:3a:20:90:f5:4f:09:00:19:da:
14:e0:de:b3:10:5b:98:03:a3:a9:6c:43:46:72:6c:e4:45:6a:
a5:6c:0f:01:91:47:81:de:60:2d:dc:f7:38:7c:43:9a:8d:0e:
26:58:21:52:4b:30:86:1f:ac:64:d0:70:5a:ab:45:4c:f1:71:
f9:e8:a7:e4:a8:8a:04:9f:50:d0:e8:f3:6d:09:f7:d9:19:6d:
0c:74:c9:12:e6:e1:44:85:28:47:73:56:9f:b0:15:3f:55:c1:
4a:8c:a0:3a:a9:07:de:ac:01:3b:07:cd:4a:85:1f:36:6e:08:
d8:e8:d9:35:df:f8:7f:73:0c:61:87:2e:66:34:57:df:f4:a8:
c9:2e:7d:56:78:17:d8:ed:cd:81:4b:80:85:70:95:3c:4b:57:
e3:50:f3:c4:3a:7c:dc:ab:fa:db:aa:ee:c8:45:a7:c9:fd:0c:
d3:d4:a4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:54:01 2025 by rpki-client