Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: HbvJUN3l7HsEZInh3MB07gJ8ycntXvMUa945vPlFL94=
Subject key identifier: D0:E9:83:93:97:07:B3:8E:2C:63:DB:B6:64:89:F7:F3:BB:53:ED:4E
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 0196BD12997DBCCCD5CE97933DF87DEBA297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 1440
Signing time: Sun 11 May 2025 02:00:34 +0000
Manifest this update: Sun 11 May 2025 02:00:34 +0000
Manifest next update: Mon 12 May 2025 02:00:34 +0000
Files and hashes: 1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=)
2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=)
3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: IU/gyLLGcoNtJ9r01ufnkfwsio4zCqY17dmbObLblB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:99:7d:bc:cc:d5:ce:97:93:3d:f8:7d:eb:a2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: May 11 02:00:34 2025 GMT
Not After : May 12 02:00:34 2025 GMT
Subject: CN=d0e983939707b38e2c63dbb66489f7f3bb53ed4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:26:0c:2a:93:d9:79:56:0b:59:76:cb:9a:
b6:08:52:93:2b:b6:a8:79:bf:4b:90:11:59:79:74:
3b:86:f3:37:d1:4f:97:2c:32:7d:1e:f2:fd:32:2f:
93:9f:50:ec:97:c4:bd:b6:f6:92:83:3e:8f:15:45:
15:8b:27:08:db:87:a3:76:43:aa:37:2a:e7:7a:2f:
08:6a:67:ee:00:a1:d3:ce:fe:fb:9a:06:d2:08:30:
5b:32:43:06:90:78:15:ba:bc:5a:23:df:5b:6a:53:
65:43:37:d8:66:05:bb:ea:fb:80:2a:ac:1e:db:14:
78:01:33:98:24:c4:c0:11:3b:ec:4d:99:14:76:16:
6a:9d:4f:4d:2c:8b:a7:66:2d:84:93:cb:eb:0f:87:
9d:53:8a:d1:6c:b9:28:31:c3:d5:bb:69:90:f0:4b:
12:f3:d7:85:e8:61:43:61:bf:a7:00:3b:75:c6:59:
86:2b:c2:7f:32:26:c6:8b:c6:fa:17:07:8b:ff:b3:
db:56:03:87:84:6a:2f:ef:49:ac:02:6d:0e:00:7f:
06:dc:b0:f1:1b:50:61:53:af:9a:68:9e:6c:db:ea:
b5:d3:a2:3f:c5:9b:fe:21:ef:50:81:a8:f1:0f:71:
1b:d0:20:15:db:6f:b7:ca:22:c6:5a:65:67:56:a3:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E9:83:93:97:07:B3:8E:2C:63:DB:B6:64:89:F7:F3:BB:53:ED:4E
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bf:c5:f1:fa:b2:cc:4d:22:af:7a:97:14:da:1a:92:a7:d0:
9e:0f:c7:e0:73:14:f5:a9:9e:c8:e4:3e:a3:28:23:5e:a9:ff:
63:dd:44:db:7d:77:0c:03:9a:d2:49:46:3e:b3:ef:b8:e2:36:
74:5f:28:44:d4:1a:e3:86:61:d9:2a:6e:d4:f4:f7:f4:78:d5:
43:bf:19:8d:3d:05:fd:43:df:72:a2:8b:7c:45:29:14:88:e9:
b1:f8:a8:32:e8:08:0c:92:da:96:5f:5d:b3:9d:01:c0:e7:5e:
9a:11:fc:b2:76:5f:63:42:7e:c6:f3:96:3b:68:45:89:21:77:
5f:26:16:9a:75:cc:00:cb:a4:c1:92:ec:4f:a8:5f:1f:a2:3d:
0d:a3:45:e7:ad:4d:1e:ab:c1:c6:b3:ab:df:f1:89:1e:39:f2:
81:c9:14:a1:46:b8:06:95:25:f6:83:e2:71:be:8b:cb:8f:f7:
87:8c:6b:53:24:57:35:b3:b3:c9:c6:38:3c:ca:2a:17:cb:bb:
a2:5d:20:75:2e:1b:ac:8c:67:26:31:81:68:5f:55:7b:df:34:
89:fa:68:de:e9:16:60:37:4f:8c:0d:7a:04:fc:6a:47:df:4b:
21:f1:d7:de:6f:53:14:e6:7e:fa:41:89:de:0d:36:31:ec:f1:
ce:e8:dc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:05:10 2025 by rpki-client