Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: 1ZpdVRXjL/MvZpdcAxQGyvdgQyM3O4SVt1j3H8U1VMA=
Subject key identifier: D4:7B:39:C1:7C:7B:C8:7C:1B:21:85:9A:A2:D3:EA:5B:79:B9:96:2F
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 0196C80472A58484B6B5B099B47805C6B287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 154A
Signing time: Tue 13 May 2025 05:00:56 +0000
Manifest this update: Tue 13 May 2025 05:00:56 +0000
Manifest next update: Wed 14 May 2025 05:00:56 +0000
Files and hashes: 1: 50YGB-iroCpOpfGPSSu1Hpntzf4.roa (hash: 5lvnT6co7VzA/8N8iu7cBVjZRHM9ciTul33FqxkRdLg=)
2: 5ENNfLa1JM3BJQLGr_c3Bw3puho.roa (hash: t0TU1ota0M9sju0lV/gFJqx+iYCBjzuB5bDzrUerFwo=)
3: 6JSS-KrBs6Yqw6gX0_excaV8mik.roa (hash: DX4Jt/llE5ZgoLSzlo+jbWwMMSWiYxeZw76o/uT/uPY=)
4: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: QcQmqaBmS5zEWY25MXoZ5FfafYhWOX8PdZZZndzY074=)
5: lueOGsmRqtrrI8WrcoKHoZ1cytA.roa (hash: qxTTmNr1wg9Q8H+R7DTVE3uMIjhi2C5reWu9yD0lXnA=)
6: rDXQIV_fU3zuPiVY7wVNU5XfnEY.roa (hash: 28GznyJvIwudik/8fUuc6bNx01Y6R3bFn9/NBv6jU90=)
7: yIXDpYWYaCwEFGgii0w8mAe6aKE.roa (hash: kpPsmD1/gHbiuZR5vWf8YWncSE2HiZ9uJEAXpqQD68g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:72:a5:84:84:b6:b5:b0:99:b4:78:05:c6:b2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: May 13 05:00:56 2025 GMT
Not After : May 14 05:00:56 2025 GMT
Subject: CN=d47b39c17c7bc87c1b21859aa2d3ea5b79b9962f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:f4:5a:ef:03:82:6c:98:a5:57:aa:64:57:
24:cd:7b:95:c0:22:8a:a2:fd:81:f5:65:d8:de:3f:
b2:e3:a6:4a:c3:87:fe:80:80:70:72:80:13:95:64:
12:6c:af:ab:e9:85:7f:f4:5f:74:1a:c2:19:66:50:
d7:b4:3c:50:a7:59:c8:d4:46:b6:ca:30:84:18:cb:
0f:ac:c0:34:bc:bc:6e:55:69:7a:28:a0:ff:75:68:
5d:60:1d:f1:f9:ee:d4:47:f8:65:14:f8:9c:a0:da:
ba:aa:9f:43:70:aa:ef:e7:be:e0:f5:44:f0:37:b4:
6a:19:ae:11:f8:6f:7b:d8:5f:24:98:43:bc:db:df:
47:9b:fd:77:3a:68:f7:01:b5:9a:00:be:cb:d9:37:
83:3f:bb:53:d7:a0:4c:15:18:41:ad:82:e4:29:cb:
70:54:4e:b5:40:12:e6:26:18:e9:1f:64:6d:bd:62:
b2:7c:c2:ed:8d:ae:a6:10:17:c2:1b:c6:07:f9:d2:
b0:c6:88:ee:34:45:11:90:91:ea:c9:21:48:a5:c3:
ee:99:8c:bb:ec:6c:bf:f8:68:8b:d5:69:80:8b:8f:
12:44:b3:75:65:68:4a:8b:24:ad:6d:fe:8f:a2:56:
f9:b3:57:ef:b6:8d:f3:75:48:f7:d8:4f:24:02:53:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7B:39:C1:7C:7B:C8:7C:1B:21:85:9A:A2:D3:EA:5B:79:B9:96:2F
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d1:34:d1:da:0b:da:4a:e3:a5:90:0c:f1:57:4c:aa:bb:49:
96:30:77:ad:d7:8a:79:8e:5e:70:17:d7:07:47:34:7d:b5:21:
68:37:18:c7:e5:7f:0e:02:0c:7f:08:ad:9e:aa:d4:ba:62:66:
b8:a4:10:60:38:a9:8c:f2:dd:0e:a1:10:b1:bf:e9:9e:e1:22:
ac:6d:72:d0:1f:44:64:c8:04:9b:fc:17:99:89:0f:05:88:81:
63:e4:2d:75:fd:c0:40:47:42:72:7b:d0:0a:e9:4a:fd:f6:bd:
5e:23:e4:21:b6:78:33:7e:a1:e2:47:de:ec:08:dd:37:3f:ce:
46:c2:89:57:d7:d4:6a:ca:b3:fb:00:27:f1:8b:80:2c:cb:5f:
28:2b:00:b5:cb:d1:9f:ae:a6:e3:4d:a9:e6:c9:cf:0f:eb:86:
6e:64:86:44:46:93:a8:c4:05:ec:2f:07:10:77:1a:db:d2:27:
6e:5a:a9:b4:a1:3a:94:fa:4d:25:2b:f4:88:42:0e:ed:a8:00:
d5:81:ca:ec:b4:ec:3a:ce:40:c4:60:0b:70:45:7d:35:5d:cb:
c4:66:c5:17:ff:89:25:95:2c:e1:ca:3d:08:61:05:00:87:9d:
35:12:3f:01:f5:16:71:7f:00:20:19:e8:b9:43:58:8a:ce:81:
5b:ee:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:13:34 2025 by rpki-client