Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: afrCeh69DS79lUtBxrcT0LM7O7EPpIOLFudtRHAZSHo=
Subject key identifier: CE:78:4B:3F:96:05:B4:99:B8:45:1D:08:87:A2:CF:AD:A9:EB:CD:1A
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 0196AE0E365306E6D392EDCDAAB803347CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 096C
Signing time: Thu 08 May 2025 04:01:29 +0000
Manifest this update: Thu 08 May 2025 04:01:29 +0000
Manifest next update: Fri 09 May 2025 04:01:29 +0000
Files and hashes: 1: 6uPmSDff0EByzvtRkRIDzvcq-WU.roa (hash: zK2w8TbS49/+wZDp3eKjJMQhyK44gX7SwMqwg25dCxg=)
2: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
3: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: 6XrGn6X6gcRUdPYbBgvk3mJzatUiddXS5FYocKXP/IQ=)
4: zMxPbRYvgl17LWHJg6U2GAicFt8.roa (hash: sMyOqb6B8V6aN1rTXFXBnVwwrNvJedSQ2XdYFSUKdwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0e:36:53:06:e6:d3:92:ed:cd:aa:b8:03:34:7c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: May 8 04:01:29 2025 GMT
Not After : May 9 04:01:29 2025 GMT
Subject: CN=ce784b3f9605b499b8451d0887a2cfada9ebcd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:a5:12:60:7f:47:5e:6a:0d:62:00:ee:aa:
5f:d1:d0:3c:a4:ac:ec:ce:bd:dc:ab:44:06:e2:6a:
ef:68:53:91:7d:78:6f:4d:8a:35:31:a4:15:d9:b4:
84:14:09:81:75:44:ef:e6:33:34:10:26:54:71:ba:
06:7c:ca:6c:9a:0e:8d:50:d8:6c:58:a4:82:dd:bc:
5a:ef:1c:01:af:8b:43:6a:8a:d3:cb:4e:17:2f:41:
7b:a6:b8:c2:f4:db:31:4e:5d:56:17:22:28:78:88:
9f:b9:0b:27:b2:2d:0e:8c:e1:d5:c5:7b:d8:90:35:
08:8e:57:91:e3:1d:7a:80:77:74:39:5a:fa:23:6a:
d6:46:11:0e:51:19:bf:63:89:a6:5d:c8:a8:a4:07:
ed:09:15:02:78:92:b6:67:c2:fe:0c:74:a4:b1:9b:
8d:18:63:1e:aa:a9:48:fe:a1:1a:2f:b5:c5:31:cc:
3e:79:8b:05:46:b3:2f:c6:e0:0d:ca:43:03:56:e5:
62:6d:6f:6f:aa:3d:81:a0:db:05:30:ac:00:71:db:
34:7d:bc:8b:e6:0b:ff:55:02:ec:1f:76:74:64:47:
bf:e2:a4:0c:41:b3:68:b7:f4:5e:eb:e3:24:ca:3d:
01:64:9d:99:2c:85:57:16:93:05:96:78:c8:e3:a6:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:4B:3F:96:05:B4:99:B8:45:1D:08:87:A2:CF:AD:A9:EB:CD:1A
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:59:f1:c2:9a:b4:63:e1:a9:05:6f:fd:e8:ca:a3:e4:29:b4:
14:b4:ff:de:c6:c1:1d:9f:44:68:2b:26:f9:9c:94:a6:b6:6d:
db:bf:1a:be:10:3f:b7:02:cc:dc:28:0f:6d:05:0a:b4:77:68:
e3:e7:ed:0b:f4:11:f3:bc:e2:95:ca:4b:83:38:6e:8c:6b:b6:
54:f5:c6:46:5a:57:e2:a3:d3:66:7e:b9:f3:4e:14:75:ec:c4:
e6:a1:c6:15:0b:c8:1a:0f:f4:d0:24:6b:68:6b:1d:9a:a0:66:
c5:59:8e:6d:95:9d:6f:94:c3:bb:d2:ac:81:b6:71:42:4c:14:
00:55:87:87:5b:94:25:5e:e2:94:6d:3a:f2:51:9d:56:a4:c9:
22:20:c6:bb:37:41:cb:33:1f:51:ed:e6:a8:f3:11:cb:4f:93:
e7:29:25:71:d0:7d:91:a1:23:58:65:f6:90:31:d3:86:50:4b:
77:f9:c2:4c:ba:83:f9:5a:36:5a:c3:0a:d1:a4:bc:85:ac:a4:
f4:fc:eb:76:10:7a:a5:ce:3e:30:89:9f:78:3d:95:8c:8c:bf:
05:52:61:5e:ee:0f:47:83:d3:e5:0f:e5:cd:d0:6c:00:31:78:
b9:8c:c9:34:6f:be:ff:94:a1:f3:cf:bb:94:82:8a:4e:91:28:
a6:19:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:54:43 2025 by rpki-client