Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier: Z3aNMNkiZbLVgDDMMfdE0k6Y91eyMxbEXbU/ZpiXf2o=
Subject key identifier: 89:59:3F:C9:11:80:40:A0:5A:E8:80:6B:12:EA:6F:7E:19:91:24:3E
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 01967FEAEEEB5C7E171601A90324193A4220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 05:00:25 +0000
Manifest this update: Tue 29 Apr 2025 05:00:25 +0000
Manifest next update: Wed 30 Apr 2025 05:00:25 +0000
Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: ZgQ79LSFc+WtvXy+s9sHxMkggeCzC9IzfeXm9XV5NQs=)
2: imECYFGKC-3y-aw_FjEqqGuMgCg.roa (hash: W1gRIBzxFMrRJWBGFPIeo4wKyMzv3I/ninZ6Px3gAlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:ee:eb:5c:7e:17:16:01:a9:03:24:19:3a:42:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Apr 29 05:00:25 2025 GMT
Not After : Apr 30 05:00:25 2025 GMT
Subject: CN=89593fc9118040a05ae8806b12ea6f7e1991243e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:a9:33:65:f7:b7:2e:9f:f8:16:81:ba:33:
9c:81:39:60:0d:3d:2e:93:4d:a2:02:4d:60:68:f1:
a8:37:d7:e3:9c:e8:81:40:11:74:77:21:03:79:e8:
c6:27:ab:41:aa:21:34:07:4e:b0:d2:ce:2e:98:69:
8e:ce:37:6e:66:dd:bf:9b:40:c4:cb:39:93:ce:4c:
b0:04:72:ec:9c:59:46:3b:40:f9:0a:56:2f:cf:02:
b9:f5:4b:32:39:80:9c:ff:dd:88:63:51:a2:8c:d2:
35:6d:11:9e:3e:bd:48:70:de:75:db:b2:4a:d8:fe:
b7:ac:98:df:88:95:dc:25:ca:40:48:b7:bc:e1:36:
82:cf:05:80:9a:cb:3f:6d:46:3b:ad:09:f5:f2:9e:
87:31:b4:5e:c2:84:68:27:01:1d:78:35:0e:e0:e0:
c6:44:53:75:70:44:c8:de:67:15:7f:99:08:b1:1b:
e2:24:77:f6:0b:e7:3a:77:83:a5:b0:32:36:8e:46:
d3:59:87:68:43:c2:ad:7b:f5:b8:29:db:ab:f4:1f:
da:c9:78:25:29:12:3e:29:05:91:62:59:83:83:5f:
e7:4c:8d:43:4a:7c:28:58:f5:f2:63:d2:00:f4:a4:
fe:8a:25:74:85:b0:d5:a1:26:67:28:41:4d:a2:d3:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:59:3F:C9:11:80:40:A0:5A:E8:80:6B:12:EA:6F:7E:19:91:24:3E
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:06:a4:d0:b1:59:29:cb:c5:ea:5a:c0:68:cd:ea:04:42:6e:
49:bb:c5:1f:92:af:86:05:da:1d:e2:f5:5d:72:f5:7d:f8:54:
e0:2b:bf:01:2c:61:09:9a:c2:ce:1d:55:0c:37:8a:68:d4:db:
ad:35:f0:cf:0f:f7:fd:86:7d:74:90:c4:47:96:18:2a:07:1f:
54:44:50:01:33:8f:ff:5b:90:28:ac:19:21:d1:40:6a:c8:e2:
5d:9b:3f:69:b2:f2:01:5f:37:3f:b6:e2:e2:9a:23:50:20:e1:
08:79:6f:42:dd:c8:3d:9d:fa:1e:88:29:03:2e:3e:7a:6a:4a:
9b:aa:83:a6:53:f9:b6:a5:58:82:f9:09:10:45:b8:15:60:ef:
be:b3:56:5e:92:44:b1:28:08:10:55:b4:6d:d5:3a:74:7c:71:
9a:74:a6:bd:04:4c:bf:16:86:d5:2a:f7:50:a6:2b:2b:74:b9:
a1:38:ef:fd:a5:ea:2e:96:d5:39:6f:4f:7f:7e:cc:6c:56:0d:
69:00:ac:9e:da:d3:31:46:49:58:b3:6b:00:b6:21:70:fa:c8:
56:7a:38:f4:dd:43:54:1f:f5:0e:20:8d:91:59:d5:f6:18:2c:
d7:05:be:b7:03:65:53:9c:13:3f:5d:aa:5f:c0:3a:31:8e:79:
6e:8f:b9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:26:15 2025 by rpki-client