Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
File: ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft (raw, json)
Hash identifier: drLRZN/TNqyXt4WG4G3bG+8WBi4bgNw0PX7T3lzEtQ0=
Subject key identifier: F8:E5:ED:AC:F8:29:2C:7E:6E:74:D7:27:52:59:1D:5B:33:60:16:E3
Authority key identifier: 9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
Certificate issuer: /CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Certificate serial: 0196BC3744D5E945E4AD6D2DA9C8B8F9786F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
Manifest number: 068C
Signing time: Sat 10 May 2025 22:01:00 +0000
Manifest this update: Sat 10 May 2025 22:01:00 +0000
Manifest next update: Sun 11 May 2025 22:01:00 +0000
Files and hashes: 1: ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl (hash: g3ZVw+nA1KBZWoP1Fuj+hSIBU0G3/nAlQmnEjfSgz1c=)
2: z5plCbvdkup7MxI7T8lBnb_bFXc.roa (hash: gJ70ebUSb97tS8RCU2JGa9RBjyi3gQiPSVEBaoEhFFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:44:d5:e9:45:e4:ad:6d:2d:a9:c8:b8:f9:78:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Validity
Not Before: May 10 22:01:00 2025 GMT
Not After : May 11 22:01:00 2025 GMT
Subject: CN=f8e5edacf8292c7e6e74d72752591d5b336016e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:69:68:d0:52:f9:05:03:25:dd:8c:99:fc:
65:82:23:74:0e:dc:e3:d3:52:45:16:a7:e9:97:df:
2f:c2:06:f3:fc:03:17:4e:82:73:55:ac:b1:20:cc:
93:d8:77:43:f0:f9:1e:a7:83:23:92:77:3c:1f:5d:
a8:a8:b4:9d:b1:d8:81:ee:db:8e:bd:d7:c2:8f:8a:
7a:ff:c4:2a:39:28:e0:23:34:4e:49:d2:9a:a7:73:
74:ef:1e:a8:e9:32:54:73:d7:01:af:74:1f:c5:1e:
4e:02:d1:6b:5d:7e:6c:67:05:85:98:e6:90:8b:f3:
cf:98:7c:87:8d:4c:15:9f:45:a9:9c:25:b1:04:f7:
73:94:01:d9:34:7d:79:68:40:a8:8f:b5:19:b8:d2:
c8:d0:e9:9e:55:db:1f:73:6e:82:ab:d7:14:a3:56:
2c:2d:51:e9:fc:03:b4:09:84:24:fe:f8:28:33:68:
66:03:9b:4d:ac:f1:54:92:1f:39:42:49:cf:a5:d4:
e2:a4:5a:a8:2f:1a:b5:e6:c5:fb:c9:37:09:fd:93:
3c:c2:83:78:c2:8f:7e:9f:de:d1:b9:c3:3a:ef:79:
a7:46:73:d0:0f:92:b6:b3:a5:f1:26:25:a0:24:4e:
da:01:08:23:bb:01:f4:64:54:98:83:ad:52:71:85:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:ED:AC:F8:29:2C:7E:6E:74:D7:27:52:59:1D:5B:33:60:16:E3
X509v3 Authority Key Identifier:
keyid:9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c6:e8:bb:89:f2:7a:57:57:ca:a4:ac:75:57:ba:52:99:4c:
49:65:b0:7d:ec:65:6e:1d:45:b5:a2:15:a6:05:a8:c0:59:97:
6c:28:f1:0e:6d:92:d1:4d:2a:88:14:84:0a:dd:1d:d4:01:68:
57:1d:32:6f:b3:4b:48:70:a2:74:43:b6:91:b9:fd:d5:6e:fa:
95:e2:14:f9:53:57:a4:c9:aa:f5:d8:3e:7d:8a:7e:d2:90:fe:
eb:29:2e:c0:26:83:b0:b5:d0:97:a6:96:9e:42:98:3b:11:42:
08:fe:44:1e:57:64:2e:84:c6:ed:0c:16:ce:f6:64:49:07:14:
e2:f2:ae:e5:e3:de:fc:57:b5:28:39:96:9f:7c:11:a0:d6:e9:
be:1d:a3:6c:43:06:5d:1a:71:9b:f3:52:92:cb:93:3d:d9:c1:
96:81:af:f7:63:32:92:d0:35:1d:04:26:18:a0:6a:54:03:2e:
41:90:32:da:da:84:22:15:7f:ea:7f:a2:df:ed:7a:3d:19:5d:
bd:4a:40:32:84:9d:41:33:5e:7f:ac:e5:a3:c1:26:2f:85:b8:
ce:35:76:fb:62:a5:b5:75:fd:93:a7:5a:20:51:9e:ed:1b:0d:
c0:e3:f7:f2:51:2e:26:ac:62:fb:89:19:2f:28:2d:e5:78:bf:
84:dc:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:22:10 2025 by rpki-client