Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: XYlb8CUwiDTnk9Mcb4aprGWyYGxqwYDbdZAinfuFy1k=
Subject key identifier: AF:7B:FF:66:64:E0:06:D5:61:F2:85:C2:01:EC:5E:ED:0C:58:A7:AB
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 019676432436D1A9EEC229C717EB1D97DA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 08:00:33 +0000
Manifest this update: Sun 27 Apr 2025 08:00:33 +0000
Manifest next update: Mon 28 Apr 2025 08:00:33 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: CQyZMyyk20YCH1/dLQRi8+arkzRIXq9iL9xVs4dazWw=)
2: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (hash: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:24:36:d1:a9:ee:c2:29:c7:17:eb:1d:97:da:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Apr 27 08:00:33 2025 GMT
Not After : Apr 28 08:00:33 2025 GMT
Subject: CN=af7bff6664e006d561f285c201ec5eed0c58a7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:42:77:24:45:c8:7f:bd:4e:66:8b:f6:65:
af:83:db:2f:73:71:e0:a9:bc:54:01:a2:31:4d:89:
55:7d:0d:3a:dd:71:80:57:0e:a8:94:97:7b:3a:c3:
dc:ae:2d:f4:9d:71:98:7d:7f:a3:32:0f:33:14:8f:
ae:d1:f0:87:14:66:07:04:a7:e9:c7:04:0f:e4:53:
4f:4d:68:25:f2:36:fe:e1:68:57:e5:86:cc:ce:40:
0f:97:82:c2:6d:52:bb:76:10:78:c9:83:22:53:39:
49:09:9c:1a:14:0d:12:a5:44:eb:51:48:44:80:27:
11:06:ff:32:bd:8c:94:49:6b:5b:d4:7f:c8:ac:24:
4f:98:6c:9c:d6:13:84:f7:6e:3e:4a:1d:e5:46:21:
b2:a0:9a:1e:1e:54:97:f2:e7:3c:73:4a:8e:a0:9a:
0b:13:a3:6d:67:1e:e2:b9:5a:98:91:10:0d:cc:5b:
be:e3:ee:84:c5:2c:b5:ab:cb:62:e2:ee:d4:d1:b6:
11:8a:7d:51:b4:36:b8:1c:58:3e:e2:7c:97:ce:04:
b6:d1:08:5b:bd:bf:0a:64:d6:50:de:3a:28:8a:62:
2b:dc:b4:90:7e:e0:a7:24:47:93:8e:d2:41:ac:5d:
c2:bc:8e:51:94:83:c5:69:cd:96:ee:c8:44:34:8e:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7B:FF:66:64:E0:06:D5:61:F2:85:C2:01:EC:5E:ED:0C:58:A7:AB
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ed:ca:eb:57:aa:ba:51:81:f2:95:4a:eb:43:4f:b4:cf:37:
5c:f8:98:0c:3c:77:02:7c:52:72:42:42:21:b1:dc:ac:9e:86:
87:db:e1:ad:f8:ec:f3:86:08:d1:4b:a4:d1:45:3a:f9:bd:8a:
e7:9f:5b:fb:ad:a8:2d:28:a5:f1:01:30:28:01:4c:25:bf:00:
c7:06:61:9a:79:60:c0:c9:c3:d7:e9:89:cf:2d:30:b9:4e:90:
77:4f:16:f3:6b:eb:e4:61:7e:b2:78:1c:e9:cf:a8:1e:8f:dd:
1c:6d:92:6f:82:27:9d:42:e4:08:f1:a9:ca:07:8c:48:60:2d:
51:2f:33:f7:8a:50:a3:a2:2d:fb:55:a8:71:2e:c6:cb:9f:bf:
3c:98:88:45:9f:a5:07:a2:a9:f1:40:a1:50:98:e6:68:f9:22:
99:ed:d1:0a:dd:8c:bf:b6:e9:b1:69:3b:64:54:73:24:43:e7:
2c:64:a0:8c:8d:dc:0d:ea:87:1e:99:f6:22:f0:1f:b0:15:f4:
3d:a8:b9:1b:5e:92:01:16:b8:e5:83:28:2e:a3:35:d0:97:25:
63:e0:df:3a:16:1b:49:5f:72:25:99:1e:db:d4:ef:63:65:61:
c0:98:61:67:34:c8:65:a1:f3:5e:f5:14:7e:09:01:a9:65:b8:
01:f2:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:07 2025 by rpki-client