Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json)
Hash identifier: 5t+/7wWpFj5ebkqAArSyoTkgEvuuXz6ZXc16SLeHcNE=
Subject key identifier: 45:58:0D:1A:54:B0:86:57:E7:3C:81:D5:02:57:9F:98:FA:B8:67:F1
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 0196B66BB49CF13CE370A886CE1CBCC31538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 19:00:33 +0000
Manifest this update: Fri 09 May 2025 19:00:33 +0000
Manifest next update: Sat 10 May 2025 19:00:33 +0000
Files and hashes: 1: 8vJ7ABj3xVyEwXenD9W0ncMrU1A.roa (hash: 5gnWjjNTmQRrWBLMz2vS6KZph20DEPN6rQfmfIVo1TE=)
2: 95tOWT20XUkoFBLGQGdVcwDGE0s.roa (hash: Qa6N16B2kLdBJuSQoLOln9hPwf+0/JSY++MAPTIofBc=)
3: D2QorAtAGpZ4DSilBt-gZlYU1WU.roa (hash: vpJGRRZzUNjxMRhoSrLA2Ov0y70mAO/SHEjk1etazfE=)
4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: 3RQNENhUxlroP5Sxj4B1VpHMEO25pZKqnFRKq9kYHc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6b:b4:9c:f1:3c:e3:70:a8:86:ce:1c:bc:c3:15:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: May 9 19:00:33 2025 GMT
Not After : May 10 19:00:33 2025 GMT
Subject: CN=45580d1a54b08657e73c81d502579f98fab867f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:b0:26:75:67:19:b5:1a:e3:14:c5:76:18:
82:0b:f4:99:6d:1d:36:f9:e4:c9:d6:6d:fc:7f:34:
f3:6c:4a:54:b6:a2:90:dd:44:b4:1a:7c:ff:20:7c:
0f:b4:ff:fa:d5:93:a8:10:96:a7:80:90:ed:80:7e:
28:40:78:f2:88:b9:e9:6e:e2:36:bc:56:12:7d:f9:
87:d4:73:10:14:4c:66:0c:a9:da:c5:e6:df:67:d4:
d2:0c:96:29:cb:c4:ae:d1:b9:8d:33:dd:f9:1e:da:
ae:7f:bd:7b:22:93:f6:35:4f:5e:4c:86:e2:7c:f8:
04:95:f4:57:31:4d:14:90:8d:bb:17:49:ba:e9:6b:
c3:2b:b5:d8:ba:19:16:b2:30:aa:c6:14:70:21:ed:
74:89:3a:c0:cb:73:39:ad:70:f9:5c:f2:10:b4:a2:
50:9d:a3:99:99:e6:cf:c0:e2:0d:70:6a:24:38:e1:
e0:99:46:cd:11:b4:15:6d:a2:34:33:dd:13:3d:13:
db:37:4f:c9:25:fa:05:1b:c8:85:db:85:f5:a8:8a:
ab:41:df:22:b8:c0:4f:03:53:79:d5:6d:e5:37:d1:
89:ef:ed:6a:a6:c4:d3:26:6e:ec:d5:9a:2c:36:b9:
fa:4f:6d:12:97:b1:92:b9:e2:1d:c8:ab:52:9e:8b:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:58:0D:1A:54:B0:86:57:E7:3C:81:D5:02:57:9F:98:FA:B8:67:F1
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6e:37:be:e6:28:2a:ba:55:bd:27:99:77:1c:e3:b6:0e:4a:
ea:64:2a:b1:2c:1f:ae:e3:50:8e:5f:8b:04:3d:0d:f1:50:ad:
ab:61:03:49:d1:ca:c6:76:71:10:57:4c:7d:b6:e5:d2:73:c9:
9a:05:67:db:78:7a:91:a0:e0:f7:b8:98:30:c3:00:15:d4:93:
1c:d7:a8:17:0a:8d:ec:e2:5b:91:cb:89:08:85:37:9f:2c:10:
f6:3c:5f:fe:15:93:f2:e6:2b:0d:4b:09:e3:69:ee:28:fd:da:
84:a8:d5:5a:d8:db:9a:42:5f:49:fe:da:05:21:af:0d:8b:e6:
44:4e:8e:a1:5c:0b:fa:83:c1:16:d4:fc:12:e6:9e:18:ab:da:
6c:a1:77:80:91:47:3d:ae:04:59:b4:5d:6f:68:80:50:96:60:
e4:a4:2f:e6:cd:39:e6:ed:52:79:b0:f5:fb:c0:2e:02:85:6a:
0b:0e:3f:ce:b6:99:b5:88:15:40:01:0b:89:bb:5e:18:d1:e7:
35:73:e0:0e:fa:33:e9:9d:3a:e3:cb:c1:7b:de:47:46:36:b1:
c8:22:11:79:85:f1:69:d2:d9:fd:f2:9b:ee:d0:34:5d:c3:0f:
9f:4b:9f:43:56:eb:fb:89:df:8a:7d:1d:dd:3d:c1:e3:bf:c7:
7b:6c:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:35:29 2025 by rpki-client