Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: NUISPF/teSUVqE0k2J5Du27WdnmtXIOlUWWluDry0A4=
Subject key identifier: 1F:E2:9E:62:90:D0:A4:99:78:06:5D:14:2F:F6:A2:C8:1F:01:6E:91
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 0196827DFD1E2ECE7524DF4970A9A4FFD62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 1117
Signing time: Tue 29 Apr 2025 17:00:16 +0000
Manifest this update: Tue 29 Apr 2025 17:00:16 +0000
Manifest next update: Wed 30 Apr 2025 17:00:16 +0000
Files and hashes: 1: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: MQVPj94A5+FF0JPjIPk2N50GnT5pPu+htpLUGLcfuRs=)
2: xbEhFMe96Lq98oM2kaTSxYoflQo.roa (hash: TG0r6adK5rxJjOXHHJZ61hb/iZXi4XWRAs1u1uQ8odg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7d:fd:1e:2e:ce:75:24:df:49:70:a9:a4:ff:d6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Apr 29 17:00:16 2025 GMT
Not After : Apr 30 17:00:16 2025 GMT
Subject: CN=1fe29e6290d0a49978065d142ff6a2c81f016e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:95:2e:66:71:dc:2b:59:ba:51:5f:c2:c5:
d6:e1:a0:6e:a8:09:ca:29:32:2a:e3:6f:05:6a:4b:
b0:09:26:96:1b:52:64:26:7a:2d:8c:80:72:34:54:
77:e1:80:9c:94:55:f1:57:04:04:da:af:3b:6c:50:
35:ba:88:08:12:2e:d6:53:4d:1e:5a:49:b9:76:c9:
5c:d5:26:78:ad:e7:f0:d2:7a:36:63:e0:a4:b1:10:
57:71:43:d9:46:35:b3:58:19:12:2d:27:20:08:7d:
6f:e3:81:e9:bf:f6:71:68:20:5f:b1:36:51:4f:a0:
35:44:13:e5:f6:ee:ae:58:11:e2:e5:36:69:1e:cf:
67:dc:f3:ee:c7:86:b8:82:9f:7e:5f:b5:bd:0a:f5:
14:09:3d:44:77:f8:ee:ed:51:b2:c8:6f:d3:b4:2b:
5c:f8:02:c2:21:d0:17:5b:c9:17:0e:11:78:0c:08:
98:47:65:17:40:5c:07:82:6a:a0:11:35:55:8a:2a:
78:2e:98:0d:3c:78:a5:1d:fe:9d:c0:ab:65:65:5b:
d7:79:25:79:c0:39:a3:27:10:55:78:e6:f7:5c:45:
36:cc:9f:9a:e1:09:59:16:53:c9:d1:5c:0c:2a:ae:
64:69:55:5f:24:f0:f2:7d:8b:f7:79:79:70:99:41:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E2:9E:62:90:D0:A4:99:78:06:5D:14:2F:F6:A2:C8:1F:01:6E:91
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e7:03:e3:b2:69:3d:06:95:a2:23:fe:22:8e:6a:9a:16:2e:
28:09:41:b8:cf:49:cd:a4:c8:66:22:4f:d5:77:49:b8:21:53:
e4:d5:47:e2:e1:a0:a6:11:47:af:25:26:02:a2:0f:f5:a9:07:
6d:62:9b:1b:2d:fe:9f:62:ee:3a:26:25:97:59:19:5c:73:7c:
a4:16:8a:85:6d:0c:6d:cc:f5:05:6d:83:04:d3:23:eb:53:03:
b2:82:4c:be:b4:84:0b:40:78:81:0e:21:15:b3:82:66:3c:b2:
7d:d7:cb:a9:89:9c:1c:61:dd:a7:29:c3:76:22:7b:af:de:be:
91:56:7c:70:31:ec:3a:c0:36:76:8f:64:19:87:7d:98:16:b5:
19:b1:66:dd:45:51:04:cf:46:85:da:db:70:af:4d:5e:96:c8:
11:b5:93:89:82:27:12:ba:5b:b8:5c:45:9f:a5:ba:85:44:ad:
80:a1:01:55:6c:a5:82:0d:56:45:e9:29:48:50:5e:d2:64:58:
ec:9a:41:bc:01:12:ef:ba:4c:35:e8:20:ac:6b:b2:ad:ec:10:
a0:07:54:22:d0:a2:b2:dc:b5:a5:77:c5:fb:94:f3:ca:fe:61:
a3:f2:1e:f2:c1:d0:61:2d:b7:32:83:55:c2:f9:ed:02:ff:1c:
f6:f8:bb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:16:34 2025 by rpki-client