Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: +8oIeP5we5E7C1sZr8eh2onFD+UGBBUc0RsapDGy7Rk=
Subject key identifier: B0:C1:F0:C3:54:42:4F:DD:F1:73:1C:9A:F0:9C:1B:2E:34:6A:D6:43
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 01967B3296436AC33DF49ACE04CA980145BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 1011
Signing time: Mon 28 Apr 2025 07:00:34 +0000
Manifest this update: Mon 28 Apr 2025 07:00:34 +0000
Manifest next update: Tue 29 Apr 2025 07:00:34 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: 1vdZNEHt0b38ddpsEYHpfK4KEMVCqx5/z6+lIihbznE=)
2: XPkovunJ2mYG9xru2HKfkrigcMA.roa (hash: ZBoNLDdsfMiH4Qvw9YL8Os7NUZ9E42iEu1OMEgsfl7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:96:43:6a:c3:3d:f4:9a:ce:04:ca:98:01:45:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Apr 28 07:00:34 2025 GMT
Not After : Apr 29 07:00:34 2025 GMT
Subject: CN=b0c1f0c354424fddf1731c9af09c1b2e346ad643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:3b:44:00:f4:80:4a:72:59:69:66:a5:e9:
b4:23:7e:a8:c0:e2:20:45:68:41:e4:de:15:34:64:
a6:d0:22:20:ba:b8:d7:41:44:e0:7f:77:b8:1a:ba:
62:71:14:e4:cd:b4:2a:90:c2:8c:4c:62:ae:35:fd:
b6:c0:fb:c5:f7:38:21:fc:02:88:b9:41:68:90:f1:
0c:c2:e2:2b:9d:96:80:10:68:0b:bb:6b:17:3c:3f:
92:a4:15:41:8a:66:20:af:4d:1f:32:92:52:37:a4:
23:86:60:01:e1:8e:fa:49:72:8a:0a:51:2a:0f:56:
7e:b0:e2:01:df:c1:51:97:5f:d1:e7:0f:80:45:f2:
d5:5f:4c:ea:74:2a:e3:f2:4e:b9:23:84:04:51:7e:
36:2b:77:92:3d:28:ec:a1:f6:28:42:1c:1f:9f:79:
9e:8d:45:cf:48:db:d3:e1:5d:52:30:88:1f:46:62:
39:b1:65:ed:06:5c:81:1d:92:ce:3b:b5:6c:17:8c:
83:bc:73:6a:02:8f:c7:91:6f:ab:4d:a4:1e:23:fc:
68:44:c9:b8:bd:c8:ab:b7:11:1b:bc:56:7c:38:dc:
5a:a6:d9:bf:ea:b1:ed:80:07:4f:86:65:ac:8c:e2:
28:a3:cb:76:39:8b:9f:88:67:1f:d5:c4:f2:33:5a:
2e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C1:F0:C3:54:42:4F:DD:F1:73:1C:9A:F0:9C:1B:2E:34:6A:D6:43
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:93:cb:95:c9:d9:99:19:15:b9:62:6a:95:cc:18:78:12:d6:
21:18:c2:0d:55:ab:4b:91:68:c2:f9:78:85:55:13:17:6d:43:
4b:af:16:eb:8b:31:4a:d0:db:31:f4:57:16:5e:e4:56:58:0e:
c6:bd:a4:8c:60:00:86:9c:e8:f3:a1:3c:0c:01:20:89:63:0c:
a9:d6:6d:f0:37:f1:89:ff:23:2b:38:c7:38:65:a2:7e:be:a5:
03:d5:86:ca:f8:65:3d:6e:7f:14:fc:7d:46:03:7e:cb:07:e8:
9f:e4:cb:8e:31:61:ca:7c:cf:cd:0f:c4:b1:63:e7:d2:83:54:
06:f6:43:2b:38:bb:55:dd:cd:f7:d4:33:d0:5e:73:fe:df:2b:
0e:ab:1b:68:69:2e:82:70:f7:9a:39:d5:fb:b8:d3:63:ca:46:
aa:ef:d4:1a:12:58:d1:b2:27:4b:5e:50:68:4d:d4:a6:98:92:
6f:55:ec:34:15:50:5f:b0:27:9f:f5:c9:bb:3c:9e:a3:d9:e6:
b5:f3:31:b7:9b:89:f2:28:ef:c8:75:25:81:a7:51:8b:8a:fd:
2f:3b:f5:b2:4f:48:0c:2f:2f:61:a7:61:1b:d3:1f:db:7d:56:
20:c5:15:92:51:4f:e3:b2:34:fe:92:fd:75:92:5a:18:3b:ce:
9f:46:2c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:06:28 2025 by rpki-client