Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: njqBRsz9p9Pk4Fq7U3fPzjHudMDKxjl6MYlneqP5iPU=
Subject key identifier: C6:E2:EB:E8:FA:21:F4:DF:AE:59:65:18:2E:01:C6:CA:6F:CA:A4:EC
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 01968A37E10DB1A8C81EB1F47E647C8CF5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 13CF
Signing time: Thu 01 May 2025 05:00:39 +0000
Manifest this update: Thu 01 May 2025 05:00:39 +0000
Manifest next update: Fri 02 May 2025 05:00:39 +0000
Files and hashes: 1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: OvZFZD+SFRwJGG4s0XzSMkqv68aOKIW8vcQqhkLGQw8=)
2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:e1:0d:b1:a8:c8:1e:b1:f4:7e:64:7c:8c:f5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: May 1 05:00:39 2025 GMT
Not After : May 2 05:00:39 2025 GMT
Subject: CN=c6e2ebe8fa21f4dfae5965182e01c6ca6fcaa4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:13:94:09:b5:86:4c:a1:da:fb:a3:0b:82:
16:47:9a:a3:6d:09:56:30:88:3c:11:57:6f:b8:ff:
50:af:60:25:24:a6:02:d9:d6:f1:fc:b7:63:18:6f:
17:bd:22:25:41:e3:43:ea:7a:50:6d:b8:7a:a0:fc:
27:dd:12:cc:04:54:12:9c:75:50:ad:40:92:c7:f9:
ee:c3:b7:d2:eb:47:d9:98:c1:86:e8:6f:db:a3:59:
92:f2:d1:9c:2f:ab:69:ec:5a:e8:98:f4:cd:a0:40:
8c:6e:9f:9a:d3:e2:7f:bb:fe:c2:08:40:b8:83:bb:
4e:3d:5f:8a:da:d6:dc:69:c5:24:28:83:1a:a1:2b:
32:77:6f:9a:7a:7d:67:7d:d2:24:92:e0:d6:82:1a:
94:c7:1d:61:99:ac:a7:be:db:21:5e:20:e3:3a:68:
33:96:6e:e5:8b:27:a2:30:7c:8b:82:c3:d1:fa:aa:
ce:c9:11:e9:ee:25:e3:1a:2b:33:15:a8:d1:a8:83:
e9:09:36:60:66:35:4f:34:14:90:61:a4:a9:bd:a6:
75:13:a5:ec:e2:e6:2e:20:97:b9:b1:07:19:3d:b5:
17:e6:bb:a3:85:ba:e0:e7:45:d3:35:be:72:3e:98:
21:72:ee:d5:db:a6:c4:e3:51:80:df:90:0d:91:4b:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E2:EB:E8:FA:21:F4:DF:AE:59:65:18:2E:01:C6:CA:6F:CA:A4:EC
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:bd:20:a5:72:f1:b5:d8:28:c5:bc:ac:c6:51:6f:1b:8b:b6:
26:1e:68:16:d3:eb:e9:58:a5:54:ad:da:9a:1c:1c:9c:4c:24:
51:c2:38:47:19:9e:a6:67:d0:62:05:1d:50:69:59:36:0c:fd:
4a:cb:94:41:c7:77:c2:8b:35:cd:42:40:a2:23:bc:89:44:6f:
66:18:97:2c:e7:64:e7:2c:cb:a5:fc:24:39:96:a0:db:9d:ed:
33:45:bd:4f:41:25:27:7c:7c:15:76:45:f3:0d:1d:34:f6:0f:
00:b5:28:59:d2:ba:17:3c:be:8b:14:1e:3d:d1:49:c2:32:51:
48:1f:2c:d0:d5:e8:89:ce:ad:d0:8e:c5:ce:ab:ff:16:0c:5a:
e6:82:7b:b9:cc:77:ce:43:9d:04:09:0d:a5:d2:84:fd:2b:f9:
ec:8a:71:30:fc:d2:e6:6a:6e:b9:1c:ab:08:1b:70:f8:08:bc:
63:86:c6:e2:64:24:bc:7e:a3:b8:98:b8:0e:c6:c1:fd:69:4a:
f3:e7:07:26:97:52:09:8a:84:89:c2:3a:e2:c5:46:5a:52:1e:
27:a8:fb:97:a4:72:42:68:d3:dd:bf:57:a4:a2:3b:b2:18:1c:
26:84:55:03:59:63:86:75:02:4c:58:b1:b0:5c:c0:8e:bf:7b:
64:9b:63:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:32:29 2025 by rpki-client