Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier: 4MxhrP+JIUn7xfOawNhVfioCjQSHTgBAzRNbQD3+S9g=
Subject key identifier: 6F:36:AB:01:53:DC:B5:B1:A9:2D:1C:F5:2C:8A:70:59:8A:0B:DE:0C
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 0196BE5C81B36C2549CF55C98316393F2D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 08:00:55 +0000
Manifest this update: Sun 11 May 2025 08:00:55 +0000
Manifest next update: Mon 12 May 2025 08:00:55 +0000
Files and hashes: 1: 3-Pz_ACqotf_1pTiM38rfDDW65c.roa (hash: +6mxaP3CNTwVlIYMhWG+20r4HZR/llgs3lm8STPmGs0=)
2: 9kX4GrtqMRWRvdlXwe-ZIc9Ou2o.roa (hash: 6kYLXGHct4tBz4Kt7RTp0Yq24Dr5ZTh8EftVQx18Anw=)
3: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: j8KcTx8b660IruxIsNJxJI2BimMlq7fweeCtWLht6+0=)
4: PuYFjQeAMPYTJknY4a9xdl9WjmI.roa (hash: E2/hGT1MU9NO8befK4BGLovPtwxuEyai1B8Xt8zA7+A=)
5: QRbrmHMbnacFIghz2vQJ1iEwIPo.roa (hash: gpC7d4/OhCyOZcpUbHREfEufrTPs9FXkeTxWhp4MXlw=)
6: avUi3YjwZnz0yzUPnJu4Y8PDkW0.roa (hash: mWS6jEEzpU5C/mf65CgMVs1ygfIg+nXboKeBb7STrRk=)
7: nTWU5WV73x998fb6pecneWzKHj0.roa (hash: m9Al1FOb5Ruq1WL/BIhpl9I/8AOLD6hHB+5Qi5PqY4A=)
8: pnddHirjNCKxYSqPtn_sWaDmNxU.roa (hash: HVJptrd3yeSfrIUH7AUm9UPFYH8L+twTA4AttYwqX2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:81:b3:6c:25:49:cf:55:c9:83:16:39:3f:2d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: May 11 08:00:55 2025 GMT
Not After : May 12 08:00:55 2025 GMT
Subject: CN=6f36ab0153dcb5b1a92d1cf52c8a70598a0bde0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:c1:36:72:07:1e:d4:e0:3f:6e:51:99:f9:
0a:00:b6:5b:c8:1b:80:13:26:8e:44:e0:cd:be:4f:
a4:93:e1:57:30:8b:77:db:d5:bb:84:a8:1e:35:36:
78:15:30:be:0d:12:27:a0:1d:4f:32:b3:e4:d0:92:
cc:9b:35:3a:a4:ca:c5:8e:64:0b:f1:1d:c9:a8:3e:
ae:e4:13:ea:7d:97:65:80:bf:3d:e7:e7:33:46:f8:
a5:bc:9e:b6:60:a4:7f:0c:5b:5d:04:fa:a1:7d:7f:
43:41:33:a2:ee:06:a7:0e:3d:8e:30:41:22:13:81:
8b:76:fc:7e:85:c5:4e:cd:b5:ee:f3:5b:e1:76:36:
b7:59:cb:ee:b8:84:f0:67:4c:13:c1:5a:21:63:68:
df:3d:29:37:03:27:12:88:50:99:41:40:ae:a6:01:
08:e7:41:19:24:4d:e0:9c:51:d2:e8:55:cf:2f:04:
99:15:94:8c:f0:dd:a9:37:d3:44:35:9f:0a:9e:91:
d0:f2:17:14:88:25:fa:14:48:42:ff:9b:7b:d9:7a:
f5:c6:bc:54:80:ed:e7:46:2b:e8:ed:d7:da:28:33:
9a:27:57:a9:37:f0:ea:a9:b2:01:c4:bb:da:18:0c:
6a:74:e6:bf:15:46:84:19:11:89:af:ac:02:ab:dc:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:36:AB:01:53:DC:B5:B1:A9:2D:1C:F5:2C:8A:70:59:8A:0B:DE:0C
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:65:7f:8e:7f:4a:c4:a3:49:8a:91:39:00:5a:29:d7:3a:81:
4f:14:36:0a:72:40:e7:e8:b0:db:e3:4d:f2:de:13:c8:00:77:
21:0e:83:1c:4b:d0:66:7e:4d:ae:a3:33:ab:de:c8:96:41:f8:
2a:e2:d8:d1:be:f2:b9:00:a7:cc:14:35:c9:89:dd:53:18:31:
b6:96:e5:94:73:39:43:81:60:00:12:ee:cd:b7:a7:31:f7:ae:
48:21:41:d8:b2:a0:63:c7:e7:88:f7:cb:1e:8e:95:49:f9:31:
d3:cd:b9:5a:71:b0:53:65:2f:a6:9f:b5:75:c0:c7:74:3a:a5:
96:a2:1e:ee:b9:a6:d7:08:1c:29:ac:8c:f2:91:f0:34:8d:47:
10:6e:71:64:89:ad:6b:bf:83:9f:86:71:50:b2:ce:28:58:d8:
48:80:4d:ad:4d:3e:d0:ba:81:4d:4c:2f:a0:55:0d:98:f8:7d:
65:63:71:51:9f:37:e7:b5:45:d6:b4:70:e4:a6:90:07:81:89:
47:be:e6:5d:4c:45:c4:a0:25:69:ff:f7:49:2b:7e:de:79:10:
c5:44:24:2e:0f:f7:70:ef:76:a7:3d:10:4b:2a:d6:f2:f6:6f:
5e:f5:9d:c4:ef:d1:15:2f:38:0e:75:a8:44:47:42:32:d2:17:
89:9c:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:08:11 2025 by rpki-client