Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft (raw, json)
Hash identifier: bjFXTMojQ9fzkIZCD62Qy7OqJJmzd542ubw2I54S+9E=
Subject key identifier: 25:2D:18:E8:0A:3B:6F:94:05:50:80:CC:D5:D6:AC:3F:5C:FF:20:5D
Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
Certificate issuer: /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Certificate serial: 0196C34C16701A2E3F5E1871626F174D26F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
Manifest number: 1055
Signing time: Mon 12 May 2025 07:01:05 +0000
Manifest this update: Mon 12 May 2025 07:01:05 +0000
Manifest next update: Tue 13 May 2025 07:01:05 +0000
Files and hashes: 1: nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl (hash: cT+rDQgotX2+0evpGhVtsq2X6V9dHTAO3GOdG8xKJg4=)
2: vMWejL_WfAw5UGYBVG882HdQDVU.roa (hash: UfokJ9esFOS4de6evRWO+CcRCXAegKzSyR2ErWU1fPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:16:70:1a:2e:3f:5e:18:71:62:6f:17:4d:26:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Validity
Not Before: May 12 07:01:05 2025 GMT
Not After : May 13 07:01:05 2025 GMT
Subject: CN=252d18e80a3b6f94055080ccd5d6ac3f5cff205d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:e3:c2:95:61:89:dd:72:95:aa:bd:1a:bf:
09:48:0a:52:52:68:74:ba:6a:b3:ec:de:de:38:7a:
bf:c4:49:01:f9:01:e3:61:13:8f:1c:3a:3d:7a:56:
5b:45:1c:f1:13:44:9d:18:17:26:6c:b4:94:a7:bf:
2d:2c:de:5e:be:38:35:3c:2b:62:06:1a:4f:a0:e3:
51:cb:4f:33:53:c9:75:b7:62:e3:26:50:c7:39:2a:
91:d1:40:52:5c:1b:a5:bb:cb:87:e8:46:04:8a:e9:
ea:fa:c0:13:02:7a:fd:f1:01:db:9b:3e:ef:14:57:
97:7e:54:6e:44:cc:0f:ac:d1:78:dc:1d:16:e4:7c:
22:75:17:fd:21:c4:9b:0a:a0:6d:4f:8c:70:d4:db:
dc:71:d6:07:f5:b4:65:71:2b:1f:60:21:a5:1d:36:
a3:28:39:3b:79:21:ae:19:0f:79:dc:68:bc:0d:3f:
b7:2e:6a:3e:07:0e:a8:f7:a1:20:c9:66:6f:7a:fc:
75:7e:df:86:6f:32:39:e4:58:6f:80:8e:a0:d2:18:
f3:88:7a:67:8f:85:2c:36:8c:0c:8b:b9:dd:c0:d3:
ba:87:93:31:62:b0:01:c7:2f:f8:6f:af:9e:a1:66:
7f:88:37:63:7c:a8:8b:c3:61:5e:02:6c:c1:c5:87:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:18:E8:0A:3B:6F:94:05:50:80:CC:D5:D6:AC:3F:5C:FF:20:5D
X509v3 Authority Key Identifier:
keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a9:a3:ae:a9:43:dd:5a:29:8c:02:2b:50:dc:cb:f2:73:24:
20:b6:ed:c5:bc:21:64:ae:49:42:12:9e:72:33:e1:af:ad:f8:
b0:3c:f3:43:a8:58:97:d9:62:0a:e1:64:08:7b:90:32:76:b1:
c1:d3:9c:bc:7b:43:6b:84:26:dc:cd:1c:be:aa:9e:63:97:12:
83:a7:89:6f:0a:cb:66:47:92:ec:65:0d:36:ea:2f:83:08:d0:
45:67:65:5a:aa:89:1d:4e:88:f8:91:39:75:7a:95:31:df:a3:
a3:06:43:2c:e8:dc:08:9f:de:db:e4:97:b8:11:9f:f8:f6:f1:
be:c7:f0:86:d8:cd:44:78:ca:11:39:bf:41:a7:21:55:6d:cd:
79:b8:51:98:d7:e0:c2:05:b1:37:0b:b6:dc:f5:21:18:0a:2c:
f7:1c:b5:62:18:6b:64:a9:3d:b7:e7:24:70:e6:ed:af:ee:ca:
2f:58:07:c3:89:16:cd:58:e4:4c:eb:92:46:b3:1c:e0:41:80:
28:c2:7c:80:b7:a2:61:76:79:00:04:60:b7:46:f4:84:63:6c:
be:c1:56:da:6a:34:07:6f:47:a6:58:ef:56:21:1c:93:39:ad:
9a:50:51:fa:3b:03:ab:9c:b1:3c:a1:93:74:bf:94:1f:81:8d:
0e:16:6f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:12:04 2025 by rpki-client