Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
File: NPwYIZBVFuYYMg6eRxoTsqqslv8.mft (raw, json)
Hash identifier: zT4X4/l1nZ00jhijC88D5wO4Bxx6t683nZDIumRlxt4=
Subject key identifier: 96:6A:64:5B:FF:73:FF:2A:E9:C4:C6:5A:10:F3:E4:85:26:37:0E:92
Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
Certificate issuer: /CN=34fc1821905516e618320e9e471a13b2aaac96ff
Certificate serial: 0196748BD5D74353CE48438EA77EAD5DF75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 00:00:43 +0000
Manifest this update: Sun 27 Apr 2025 00:00:43 +0000
Manifest next update: Mon 28 Apr 2025 00:00:43 +0000
Files and hashes: 1: NPwYIZBVFuYYMg6eRxoTsqqslv8.crl (hash: Scnwk9V8inUIBsSfm1H6jPfxyipWFtsuYYQeBwBUf1Y=)
2: rYKTx0nL3KpouO_aEG54Y81fax4.roa (hash: U8k6Z6wFvQxh2jmlJpmKkiKIDJ2daF7abfgpCSFD+Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:d5:d7:43:53:ce:48:43:8e:a7:7e:ad:5d:f7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff
Validity
Not Before: Apr 27 00:00:43 2025 GMT
Not After : Apr 28 00:00:43 2025 GMT
Subject: CN=966a645bff73ff2ae9c4c65a10f3e48526370e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a7:99:9b:63:cb:0a:05:44:e9:1d:cc:6a:8e:
74:02:2d:4d:f3:4b:b9:b5:41:1b:9b:9a:97:eb:26:
62:56:99:51:a0:3b:10:85:50:f5:0f:1d:be:05:69:
8a:aa:5c:0f:28:b1:40:1e:ad:e2:41:c4:62:1d:01:
30:60:a5:0b:af:13:52:a2:cc:ad:78:9c:fb:3c:30:
04:15:78:cc:5b:ef:a7:1f:59:f6:cd:2c:b0:c0:fd:
8e:93:bb:71:e1:af:d4:cc:af:02:c1:3b:1f:26:5f:
c7:4c:3f:a7:a4:cb:77:f8:1d:a3:81:6e:29:c9:b3:
62:86:bc:4b:53:33:c5:2c:2a:73:41:53:19:65:85:
b1:88:ee:45:9f:15:95:ab:96:11:19:c5:fc:1b:63:
31:93:41:a4:c9:a5:ae:30:36:9f:58:c6:f1:be:6b:
4f:4d:9f:03:31:b9:06:ba:e6:28:83:c0:d1:42:58:
74:e9:4f:c8:b7:80:64:8a:f6:b2:e8:ef:48:f1:13:
64:6a:bd:1d:f2:d2:ea:cb:d7:d6:3f:c8:33:3f:be:
d8:ba:0b:26:23:5f:b1:2f:c1:4c:42:69:ec:df:cd:
10:c5:7e:33:0e:7d:10:91:fd:78:96:6d:f1:30:c4:
5c:a2:a1:81:b6:df:1b:ce:81:5e:f2:21:00:6f:9b:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6A:64:5B:FF:73:FF:2A:E9:C4:C6:5A:10:F3:E4:85:26:37:0E:92
X509v3 Authority Key Identifier:
keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:66:3e:b1:d4:1c:90:23:a5:c9:f1:d6:61:56:62:34:39:36:
b2:ed:62:9e:66:46:16:ac:34:2d:0e:3b:1f:29:5f:b2:84:2d:
79:90:ca:ad:38:f2:06:5f:ca:2a:28:ce:03:ec:39:1a:be:52:
38:4e:b9:a1:7b:b5:5b:26:5f:ec:77:80:0d:3a:a2:be:9d:0b:
a2:a1:a4:50:d1:e8:00:c1:9f:8c:2b:51:ef:64:e4:22:0f:b2:
c4:8a:db:fc:32:a5:ca:61:7b:9b:9f:17:1b:45:62:6f:56:67:
09:97:84:b0:0e:e6:74:1d:6c:61:d2:7a:af:5c:80:12:9f:9d:
18:3e:e1:27:63:c0:9a:01:ae:8e:c3:48:e6:bb:28:39:82:7f:
16:cb:d2:03:7c:2c:25:85:7f:16:e0:17:b0:bd:24:4c:be:44:
d1:3d:cc:b1:e5:f8:40:10:b7:c0:5e:82:f7:ca:0c:e9:82:f9:
0c:50:3d:e6:6d:77:e1:26:b8:5b:2a:46:d1:d5:43:2b:61:c0:
aa:69:f7:30:c7:46:92:d7:14:b4:08:1f:64:e4:1d:b1:df:42:
34:a4:02:80:04:80:1d:35:da:e6:df:1a:41:d4:1e:d3:01:44:
a5:22:48:d6:c6:6b:8c:81:d3:a5:88:73:04:34:fc:ab:74:7d:
63:6b:fd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:24 2025 by rpki-client