Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: wFSnSXzG9/T0M+iGMXrMXCmppsbggGSt0D1vh0gHV+o=
Subject key identifier: 3D:00:EC:0D:FC:AD:F2:F1:DE:2A:60:C1:B6:0A:F2:5D:C7:5B:72:7B
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 01968C5D384493551A58F524B45E61D42326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 0539
Signing time: Thu 01 May 2025 15:00:41 +0000
Manifest this update: Thu 01 May 2025 15:00:41 +0000
Manifest next update: Fri 02 May 2025 15:00:41 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: 6hnZ/gLD8z7T/6GuNzv9T2hbb8CTPr7zL6ka4pS9W3Q=)
2: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (hash: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:5d:38:44:93:55:1a:58:f5:24:b4:5e:61:d4:23:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: May 1 15:00:41 2025 GMT
Not After : May 2 15:00:41 2025 GMT
Subject: CN=3d00ec0dfcadf2f1de2a60c1b60af25dc75b727b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:4f:b7:a3:15:6c:d8:09:d6:ec:0e:11:87:
11:e0:f8:13:f5:02:46:54:e5:8c:69:85:4d:18:53:
c9:5e:fd:5c:88:f4:98:48:44:69:43:dd:65:38:e6:
8b:3b:bc:53:6b:5a:b1:bd:e0:e6:12:0c:6e:46:ea:
2d:b3:21:90:f6:cd:00:07:31:bb:ce:50:3b:a6:3b:
3a:d8:29:54:07:5e:d7:4a:34:cc:5a:71:30:48:9b:
2a:3c:ea:ac:31:1e:4c:ef:48:95:3f:71:05:d7:97:
14:e7:0b:16:8d:37:c2:0b:ff:c4:68:ec:39:a0:76:
3a:6a:fa:44:52:b2:34:f7:7b:e3:0c:70:eb:01:5f:
16:00:20:20:ca:4f:3b:da:16:31:e6:0d:ae:e6:dc:
ff:41:8f:c7:19:a9:39:bf:e9:48:3f:18:f4:6f:45:
c1:e5:26:de:9f:7e:46:5a:75:af:1b:90:76:da:12:
b3:60:4e:98:dd:95:6d:32:bd:84:f0:fe:63:1f:90:
d7:4d:64:5b:55:26:9e:76:12:a9:c2:7b:32:92:1f:
c3:66:2d:be:2e:a5:df:0e:c7:e0:ff:72:df:df:9c:
72:d8:59:aa:7d:4b:3b:dc:36:bb:eb:47:e8:73:4d:
50:14:55:8f:c5:98:53:8d:19:3f:69:9e:51:15:20:
e4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:EC:0D:FC:AD:F2:F1:DE:2A:60:C1:B6:0A:F2:5D:C7:5B:72:7B
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:89:2a:74:ae:c0:78:e9:5f:c0:93:4b:e0:b0:67:2f:2d:47:
47:1d:54:42:ab:69:01:58:0d:78:0a:13:59:5e:c2:c4:9e:00:
00:2b:81:94:eb:04:14:ba:03:74:5c:60:4b:fc:3b:6d:35:b7:
77:b9:02:13:88:b3:37:3c:d2:70:74:5c:b9:22:be:21:8b:f9:
06:cf:0c:f2:93:aa:e0:8f:2b:23:15:f8:04:ff:11:c2:d7:24:
62:5a:d4:f9:c8:6f:e6:2e:aa:58:1f:7b:4f:5e:ac:16:04:a0:
c6:14:3c:d4:01:a8:9a:e8:3c:29:7c:99:8f:4d:bc:fa:b1:20:
32:11:94:cf:dd:82:b4:11:5a:48:f4:50:ee:5e:53:c8:22:25:
57:56:33:7a:25:38:0d:da:75:90:73:e0:a8:c2:78:65:c9:48:
5c:cc:bc:f8:00:82:49:4f:72:a3:93:8e:8b:9e:37:11:f7:60:
0b:49:50:06:f7:f4:2d:39:9f:24:a6:03:bf:80:70:45:bd:7d:
4d:05:4c:cc:2c:bd:63:9e:13:14:55:a5:d5:c6:da:fb:20:12:
8c:77:4d:6a:24:60:b3:73:9c:e5:e9:64:a0:81:92:cd:9a:43:
b3:90:b6:79:32:95:dc:76:9d:82:fd:42:6c:26:c6:44:c0:00:
22:2b:01:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:40:15 2025 by rpki-client