Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File: 0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier: HeSlT0dvsQiMaBRsI8Wad2BVpv7h0yLJABG9+DFCUgE=
Subject key identifier: FA:8F:87:99:2B:A2:D0:15:26:EF:78:A2:1F:49:59:47:A7:6E:F5:7F
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 01969F085DE50FE4B533B2D500CDB563F0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number: 0574
Signing time: Mon 05 May 2025 06:00:47 +0000
Manifest this update: Mon 05 May 2025 06:00:47 +0000
Manifest next update: Tue 06 May 2025 06:00:47 +0000
Files and hashes: 1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: mg4HVJzWq3nOtuvbFvVpB5VrIQZcyeqmGGSqM+6QDCI=)
2: 3JbDaULXGv_ZtTgUAO-U9hWl8fI.roa (hash: 4zK/hPWGsN27RzuQfqxFG1It8c0g9SrEKBoNyWRQIuA=)
3: FkEtOcybmkeU2VY4ZDNh4TQD4Us.roa (hash: /n0EorQrNvumpJCJEydj0xjM/0IAJCZt4aRyN0+hfTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:5d:e5:0f:e4:b5:33:b2:d5:00:cd:b5:63:f0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: May 5 06:00:47 2025 GMT
Not After : May 6 06:00:47 2025 GMT
Subject: CN=fa8f87992ba2d01526ef78a21f495947a76ef57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:d8:3f:82:40:72:e7:37:eb:bc:9e:e8:c4:
f3:73:53:a8:6a:12:b5:e8:28:a0:b1:d2:f6:f6:42:
89:c5:29:11:f2:a8:b0:8a:b8:ce:5c:55:af:b6:c5:
85:25:f8:4e:d9:d8:09:ed:cf:da:1a:ce:57:81:06:
15:5e:6e:69:60:d4:e4:1f:0e:37:c5:ab:ff:26:e2:
d9:09:55:5c:fa:d2:44:69:21:b8:ca:bd:09:dd:a1:
7a:f6:9c:ee:b7:93:bd:aa:2d:ac:bf:6b:65:54:dc:
96:f0:9a:95:57:2a:60:1a:a6:e7:e5:63:0a:b0:5e:
2c:5a:ef:fd:d5:04:a5:f8:31:f9:a7:35:7e:ca:02:
03:56:7e:34:8e:9f:14:7e:00:7c:ac:ca:4d:af:44:
24:dc:d7:bf:f1:50:70:14:7c:a4:61:70:3e:83:11:
21:0e:27:70:85:86:6c:6e:7b:89:d6:c2:4b:10:2c:
d1:a3:84:26:f5:b1:93:58:a3:23:39:c5:22:7d:82:
8b:32:8c:c5:5e:68:59:8c:6c:ba:68:af:c4:91:d6:
98:06:8d:c9:ab:b9:18:2b:ec:9b:08:a7:d6:54:05:
0c:73:4f:de:97:66:51:d0:5c:b1:b1:13:ad:ee:65:
8d:58:cf:f3:d0:52:b3:3d:a6:45:c1:b4:bc:08:60:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8F:87:99:2B:A2:D0:15:26:EF:78:A2:1F:49:59:47:A7:6E:F5:7F
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:86:fb:30:7c:f9:e9:c1:4c:5b:a8:7c:9e:f5:49:b8:a7:de:
e8:2f:91:b2:85:02:3a:18:fb:0c:cf:aa:03:8e:23:39:f8:cc:
76:d3:a6:b4:b3:80:25:8b:04:4e:77:86:88:ca:b7:4b:b5:b4:
f7:1b:b8:e0:b4:fc:78:19:21:9e:dc:f7:0a:76:f8:5d:2a:14:
23:c5:ad:a2:9f:05:73:40:97:5d:e6:97:c9:a6:b6:b1:92:09:
e6:6f:69:a3:05:29:cc:3d:63:68:3d:31:ce:5d:65:c1:bb:70:
52:51:cd:d6:06:b5:36:34:a4:a8:82:40:f7:99:e8:d1:3c:77:
2b:44:75:67:0e:ed:75:01:e3:24:f3:38:b2:26:d1:b7:8d:c9:
8b:7e:b3:86:40:ac:25:03:d8:1f:0d:84:fb:43:6e:7f:55:92:
26:14:f6:28:b1:ba:ab:06:3b:3b:f0:d3:31:de:a6:26:55:80:
8e:7c:46:55:59:dc:60:ac:9f:56:92:66:62:72:f9:44:bd:17:
55:e1:1e:09:b5:e5:a6:dd:38:75:a6:6a:f7:54:43:b8:30:98:
54:4a:84:91:7e:f3:04:28:b2:a9:13:9c:d9:18:0c:cd:f3:04:
27:3f:2d:a6:db:d5:6b:6f:bf:58:ab:e6:61:bc:d0:a5:3d:cd:
3c:09:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:41:53 2025 by rpki-client