Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: lFse33nVHjbCXLFMYQkpeCHJZb6v4EZPXG0nA/9hVO4=
Subject key identifier: 9A:BC:57:86:F5:42:0A:27:F1:D1:83:E0:1E:62:EE:1C:92:7C:89:47
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 0196BEC9DC51D588815DEE7EDE1166A1F1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 1545
Signing time: Sun 11 May 2025 10:00:22 +0000
Manifest this update: Sun 11 May 2025 10:00:22 +0000
Manifest next update: Mon 12 May 2025 10:00:22 +0000
Files and hashes: 1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=)
2: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: qwaKtqoy+9fyFF/bT83GHLQ9mx2shEjLr01UtGuD4lM=)
3: tN6Y02H2IthdzXGYlMBx0_9eJb4.roa (hash: QzcILUbWO03GK+EwTtmgiEaoxKfOPkWsQwGCPvmQB1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:dc:51:d5:88:81:5d:ee:7e:de:11:66:a1:f1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: May 11 10:00:22 2025 GMT
Not After : May 12 10:00:22 2025 GMT
Subject: CN=9abc5786f5420a27f1d183e01e62ee1c927c8947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:cf:94:8c:4d:b3:8c:78:15:9b:75:b4:d3:
15:62:e1:bf:03:09:aa:d3:09:aa:db:59:b3:95:da:
68:27:c1:cb:34:34:8f:93:7a:ae:b0:8b:42:48:e9:
6a:48:ed:b5:cf:30:59:29:48:91:7b:23:03:6c:30:
65:aa:e9:7e:19:ce:0d:99:1c:bb:9c:ec:d9:d5:5e:
66:21:af:7d:43:8b:eb:2a:8d:c5:da:d7:0f:79:7b:
96:1a:15:72:5d:73:3b:71:e2:8d:b9:ac:29:16:cd:
c4:64:fc:6b:07:8e:ba:4e:a0:97:7d:30:a6:a4:50:
d6:1f:83:02:94:83:68:20:83:47:29:81:f6:65:44:
02:2d:55:9b:35:21:e5:07:06:52:61:09:05:36:88:
10:0b:a9:f5:7a:ec:0f:58:18:36:83:85:f3:d7:25:
0c:8b:8c:85:ea:e7:33:a0:ce:2c:05:28:12:6a:b3:
1e:7e:26:ff:20:21:18:32:ff:1f:ef:9a:17:c2:44:
dc:f9:51:30:e3:fe:d3:99:18:45:50:9a:aa:d1:31:
fc:70:c8:f6:d9:70:4c:59:7b:6c:11:32:90:ac:3c:
07:c1:2d:c4:20:24:0d:a8:19:df:89:ee:30:54:c7:
b2:3c:9a:8f:8a:9e:03:07:c0:01:59:c8:01:f7:b9:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BC:57:86:F5:42:0A:27:F1:D1:83:E0:1E:62:EE:1C:92:7C:89:47
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9b:fb:a2:c0:33:4f:1e:ae:26:0c:94:34:f5:ad:a5:68:62:
df:01:dc:bc:09:28:1a:63:f1:10:bb:1c:25:d2:6c:ea:d5:e4:
1a:73:40:d6:13:52:36:cc:4a:17:28:d4:1f:97:25:bd:dd:3c:
6e:33:19:46:b8:e2:b5:67:05:1a:9d:03:bf:03:53:a3:42:4d:
82:19:51:a4:94:83:ed:4b:cc:7e:2f:e3:9f:fd:1c:2b:c8:57:
89:3a:9c:c6:45:cc:b0:07:64:01:19:4a:36:14:3c:5f:20:99:
45:f9:66:1f:a6:a3:b0:70:44:e6:bb:e9:7f:ae:7a:5b:0b:b0:
1d:d0:7a:c4:e3:f7:9c:4d:70:3d:7e:31:8f:89:09:1a:18:70:
bd:cc:6a:8b:98:23:dd:0c:81:6e:f8:00:72:4c:37:fe:a9:00:
c0:29:62:86:d3:03:29:55:26:7f:a2:ed:17:29:c9:4f:67:47:
56:fd:bb:eb:c4:52:d9:18:10:19:0b:80:71:03:de:f8:83:50:
db:1f:18:87:ca:f3:7c:17:31:a2:f3:63:4a:75:8a:6d:04:82:
12:60:8f:f5:7d:c1:22:36:da:35:90:ce:c0:2e:f1:7f:df:65:
ee:34:f7:20:72:a9:3f:b5:12:7a:48:fa:ad:96:4e:ce:60:e1:
5c:63:6a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:23:41 2025 by rpki-client