Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: /0iTN7kKgJFPPQcBtqmPrNAmv9JK5099NH7C+Dttz84=
Subject key identifier: 6C:BA:D5:8D:D6:64:A0:7A:10:B2:5C:E0:64:1D:B3:00:D1:76:7D:F3
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 0196759EB741D81100391BBBFA69C3A3242F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 05:00:57 +0000
Manifest this update: Sun 27 Apr 2025 05:00:57 +0000
Manifest next update: Mon 28 Apr 2025 05:00:57 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: GtiTn8CVmeSNQRj1XsEJ4iHGC3Fh33BGiiBhrCfxnDs=)
2: WTiY2Qk1x-geaQsrR6enC5adAMQ.roa (hash: jOYBpT27U7g6ol8yiuxnI6V37MSFQ9qLOBM0L34PdCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:b7:41:d8:11:00:39:1b:bb:fa:69:c3:a3:24:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Apr 27 05:00:57 2025 GMT
Not After : Apr 28 05:00:57 2025 GMT
Subject: CN=6cbad58dd664a07a10b25ce0641db300d1767df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0c:ad:16:a6:eb:ca:d3:b4:a0:e1:c8:f6:4d:
0d:65:a9:8d:d1:79:28:4f:c0:14:c8:e1:31:ed:48:
45:a6:82:ff:3c:03:6e:27:a8:95:f8:c7:0a:fd:e9:
cb:ca:32:e2:f8:af:56:ba:e6:b2:93:0f:05:49:86:
2f:a0:1f:01:de:51:e2:48:cf:cd:6a:f9:ea:4b:71:
ac:83:5d:bd:73:58:f1:83:c8:f5:df:b6:0d:71:a3:
19:a9:15:38:cd:e5:31:5a:d5:07:72:b1:4a:9c:43:
84:85:66:f4:36:c0:ba:05:3e:be:92:96:75:07:81:
d4:95:2d:94:dd:43:99:5b:20:09:32:46:4e:d6:49:
97:98:e3:04:93:da:1c:56:d0:7e:7c:44:8c:48:db:
bc:b1:b9:16:bf:72:ae:c7:4f:29:84:c6:92:a7:e3:
75:d2:25:05:7f:0a:ab:8e:b5:d4:56:36:8c:24:45:
60:06:e5:5a:01:7d:fe:6a:0d:56:b4:88:d3:d6:a4:
2f:4f:f6:79:ca:d3:54:97:00:01:46:ce:62:6b:8a:
9b:56:f2:1d:03:c6:ec:e8:56:e5:6c:c7:48:64:5a:
a2:d0:24:b5:d6:ac:8b:1a:6b:23:36:4c:2f:4d:44:
78:43:72:0c:b1:ad:fb:88:30:9d:5f:02:93:70:c8:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BA:D5:8D:D6:64:A0:7A:10:B2:5C:E0:64:1D:B3:00:D1:76:7D:F3
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6c:80:a5:f1:ad:33:af:95:92:15:cd:e1:d3:0f:e4:be:23:
58:da:e0:32:1b:7b:ef:a1:f1:58:85:e8:04:31:90:79:48:61:
bf:cf:0a:a0:99:ee:e0:30:d2:52:4c:a6:10:c6:68:da:e2:24:
b5:71:78:40:fb:f2:ff:20:44:d4:ae:06:26:e5:cf:ce:ab:db:
f7:eb:0c:e0:0b:78:1d:57:39:6f:8b:d3:26:ad:a0:59:68:58:
37:de:22:c2:d7:1d:fc:e8:43:34:a5:1d:bc:28:6d:36:e7:29:
6a:da:ce:cd:fb:2f:0d:84:b8:59:73:8b:b5:76:15:e7:bd:f2:
d2:87:95:72:17:05:07:d5:a8:d0:7d:25:0b:ca:49:9d:05:f5:
12:54:1d:d7:92:65:12:67:18:79:13:de:4d:22:85:6e:4a:ca:
49:3f:62:80:06:0a:6b:cb:32:46:49:e4:00:7e:45:ca:f3:ca:
f5:be:05:59:45:6e:d4:73:5a:11:28:3d:d7:2b:78:57:3d:b7:
5f:1f:19:f0:0e:83:4c:41:69:09:1b:6a:2f:c7:f9:f7:d7:c8:
54:3c:7a:7c:41:aa:ce:43:81:91:08:97:28:d7:e1:51:b6:81:
fc:0a:ac:40:a0:6f:33:a9:04:37:98:0d:0a:a9:50:46:10:90:
97:39:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:33:27 2025 by rpki-client