Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: Hp1lZh4Y0nWpx7h4IGEXuf3NabpAH8xJ3lvW8jwUZ0w=
Subject key identifier: 22:90:72:C7:E9:23:6F:9A:30:F8:CE:6C:7F:9F:08:A1:62:D0:69:E4
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 0196C194243BBEEF6AC79BF95DA755D726EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 0D2B
Signing time: Sun 11 May 2025 23:00:33 +0000
Manifest this update: Sun 11 May 2025 23:00:33 +0000
Manifest next update: Mon 12 May 2025 23:00:33 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: PHJqtQ63LZ/mvsKTrWYn8GA0r0DKwYUa0+hJkpZvwy4=)
2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:24:3b:be:ef:6a:c7:9b:f9:5d:a7:55:d7:26:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: May 11 23:00:33 2025 GMT
Not After : May 12 23:00:33 2025 GMT
Subject: CN=229072c7e9236f9a30f8ce6c7f9f08a162d069e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:88:2e:57:3a:42:61:ec:10:ff:cc:06:27:
36:19:11:f0:a4:39:0e:0a:b4:98:dc:40:2c:48:00:
f8:d7:15:e4:ba:42:75:3f:95:d5:98:b2:71:fb:54:
da:4e:bc:e5:25:16:e0:83:14:f5:49:47:5b:64:5b:
73:77:35:16:b7:5f:f2:dc:28:f1:05:74:a3:3b:ce:
42:d1:9a:be:9a:20:3d:05:c3:8d:4f:92:64:f9:13:
5b:8a:6c:55:8c:b7:a7:ee:48:18:5f:76:38:db:8a:
69:c8:f0:90:81:2e:6c:a8:64:f0:d7:4a:7e:1f:a0:
49:2e:1a:68:16:96:1c:24:c7:0f:d2:87:69:8c:61:
da:da:28:a4:3c:07:96:26:50:25:fa:ff:56:26:80:
49:87:f3:d6:0c:a9:10:ad:c3:64:0a:f6:3d:2c:33:
ba:79:50:35:b3:3f:3a:6f:f4:50:f4:87:7f:e1:06:
b8:03:10:72:14:95:97:3b:79:4b:73:c6:a0:0a:d3:
98:93:2b:a7:eb:26:8c:a7:4b:28:40:e2:46:cd:ec:
dc:bd:c6:34:fc:79:dd:c8:8f:6a:f0:7a:da:da:8f:
05:87:a9:f5:cc:1f:de:70:03:af:f1:fd:0d:51:11:
63:c1:25:dc:a7:a7:52:b2:05:9c:a0:d0:b1:63:97:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:90:72:C7:E9:23:6F:9A:30:F8:CE:6C:7F:9F:08:A1:62:D0:69:E4
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:46:27:8e:5c:9a:1c:63:60:5f:c6:8a:c7:b9:e8:bb:cb:fc:
92:a3:7e:d5:58:04:78:4a:38:cc:4b:4e:43:19:ee:0d:1a:92:
c5:0c:1b:11:4c:da:28:26:25:ef:28:24:6a:a2:e2:a1:7b:c4:
30:9b:55:7a:7f:0f:78:18:25:78:17:2b:7d:d9:b8:f5:cd:fa:
99:e5:f2:2a:a9:43:e2:af:57:d2:b9:53:0a:19:b6:36:6e:a8:
48:81:c1:28:3d:f1:cf:66:f4:17:7b:b2:7b:f5:b9:78:c2:b6:
ec:5f:7d:8e:3a:fb:95:5c:1d:5a:80:61:d4:bc:03:d7:75:62:
2a:fc:24:8c:71:e2:f7:ca:0c:97:c2:4b:45:75:57:19:0d:67:
6a:c4:27:99:cc:58:fe:90:b1:77:b9:cd:a5:0b:19:ef:1a:f0:
a0:1e:33:a7:f0:b2:b9:12:63:a4:87:8c:d9:c3:86:2d:45:c0:
55:9b:db:ec:6b:6a:78:64:62:13:f6:a4:b4:96:37:8e:05:51:
50:67:b1:68:a3:df:8f:eb:5e:0e:82:56:68:44:3a:40:63:73:
39:bb:fb:4d:22:4f:da:c4:e0:a9:3d:59:06:2a:4d:4d:ff:d2:
f7:00:39:fd:42:d2:62:75:6b:30:08:a8:59:72:14:60:1b:9a:
4e:e0:2a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:56:53 2025 by rpki-client