Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
File: NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json)
Hash identifier: Ue+XUf8+ech7zlegPKEDQVqP0doeAd/SckqfHQYM27I=
Subject key identifier: 8F:79:47:00:9D:DC:1D:42:2E:B5:9E:BE:96:03:0B:68:3E:DE:E9:A0
Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
Certificate issuer: /CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Certificate serial: 01968391C711D8A54B01174901591F463B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
Manifest number: 1250
Signing time: Tue 29 Apr 2025 22:01:31 +0000
Manifest this update: Tue 29 Apr 2025 22:01:31 +0000
Manifest next update: Wed 30 Apr 2025 22:01:31 +0000
Files and hashes: 1: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: oncAjxdSXxSnhOKkmW+ZPvF5aYyRFNrD4US6AqUe3Fs=)
2: PI3Xutx0lBlZBeuZQlV0XuCJsGo.roa (hash: blvqW+4kvuy1OSWZbcSuvZwm2naQgc2Xk5GnN0G+YPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:c7:11:d8:a5:4b:01:17:49:01:59:1f:46:3b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Validity
Not Before: Apr 29 22:01:31 2025 GMT
Not After : Apr 30 22:01:31 2025 GMT
Subject: CN=8f7947009ddc1d422eb59ebe96030b683edee9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:91:3f:59:58:4c:fd:f9:f2:73:4d:e0:90:c7:
7f:92:ad:fb:e1:7f:bd:88:fa:b0:71:54:db:e0:ea:
62:f2:16:3f:30:10:f9:97:47:78:3a:bf:ac:be:ac:
bf:22:77:0f:5f:ab:81:99:58:d1:8d:5f:eb:46:09:
f1:95:54:f2:92:fe:3e:f5:b6:24:de:ea:de:a8:58:
03:06:75:ae:b8:8c:ee:66:7f:38:c2:da:1d:8f:57:
f1:40:ef:5f:59:d8:cc:e5:0c:2e:c2:71:b1:ed:44:
ee:43:a0:9f:45:94:9d:15:ae:5c:4e:c7:15:60:66:
e5:86:dd:da:35:07:3b:26:28:98:8e:f9:55:a3:06:
a3:db:20:76:51:b0:9c:5e:85:75:2c:37:a9:4f:3b:
6b:0f:41:c6:37:86:32:0f:00:f3:66:d2:4f:49:a7:
2f:af:53:bf:ef:cf:f5:59:c3:dd:e8:c2:1a:f4:f5:
69:9e:6a:91:fe:85:0d:6f:1b:4c:61:ce:88:f6:dd:
4a:36:5e:4a:08:22:7f:6e:7c:aa:23:63:29:6a:a7:
1f:d4:db:b3:18:4b:26:b4:14:a0:67:83:6e:9a:5a:
a1:20:c1:52:3d:13:09:c8:9e:b1:61:27:91:41:05:
a0:f6:a8:5a:9d:dd:d7:a5:f0:fe:ea:a0:f0:3b:49:
64:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:79:47:00:9D:DC:1D:42:2E:B5:9E:BE:96:03:0B:68:3E:DE:E9:A0
X509v3 Authority Key Identifier:
keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:db:53:bd:16:f0:fe:21:be:07:d6:c4:f4:7e:39:9d:cb:85:
a6:c7:01:9d:e2:c0:26:74:b7:53:c7:bd:83:ae:52:5c:46:a7:
12:0f:65:f8:3a:42:28:c1:14:64:5f:a2:31:6b:62:be:2a:66:
ac:0b:e7:b4:94:d9:d2:02:29:e8:2a:de:a5:36:58:29:b5:c2:
68:20:32:f3:f0:7f:92:8a:e8:00:2d:b3:f7:31:33:d7:dc:0a:
e4:16:4f:40:3f:89:94:cf:f2:1c:79:11:30:2a:92:dd:70:d9:
aa:23:02:1a:0d:57:7d:73:f4:4e:ef:2c:26:f6:2f:26:15:d5:
c6:b0:25:2e:51:a7:c0:1a:d5:0b:95:78:f9:dc:3c:27:ee:84:
df:b2:d8:20:e6:16:6f:3f:8f:b0:1c:23:3b:75:01:74:a0:ff:
22:27:45:d4:eb:84:77:5b:b8:51:93:18:0c:18:1c:42:90:18:
5f:c7:31:f7:e1:83:c6:e8:4f:83:9f:55:f7:66:dc:6a:be:5b:
75:f2:3e:ba:7f:ee:d9:cd:76:43:d9:4e:59:75:22:0e:d8:5b:
8a:f5:f3:c3:89:68:d1:eb:0e:36:b1:d4:7b:e2:e7:bb:d6:82:
af:93:f0:17:1b:8e:39:70:11:e2:0e:ab:e2:34:04:38:09:18:
da:20:e2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:45:38 2025 by rpki-client