Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
File: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft (raw, json)
Hash identifier: DFD5I8W7yrBbvDnz7FQfxv5K3TC25h3gPlMMEp1eu+c=
Subject key identifier: A9:88:DB:27:A7:56:79:7F:D0:8A:DB:7A:83:69:8B:AD:A0:E2:F6:B2
Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
Certificate issuer: /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Certificate serial: 0196BA4865E166924EFDF08F60F58BDABA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
Manifest number: 11F3
Signing time: Sat 10 May 2025 13:00:28 +0000
Manifest this update: Sat 10 May 2025 13:00:28 +0000
Manifest next update: Sun 11 May 2025 13:00:28 +0000
Files and hashes: 1: H8-POwHizkmBcV_QJ_0-Jxyzw5E.roa (hash: vyyHUtBQsEXAg98AdmKq411tDHnSJnqHMROP1JZFAyQ=)
2: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl (hash: RjyGjKR+pDLetlwFPatVRv12m7P9Os5iOVJ9vKY/Vt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:65:e1:66:92:4e:fd:f0:8f:60:f5:8b:da:ba:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Validity
Not Before: May 10 13:00:28 2025 GMT
Not After : May 11 13:00:28 2025 GMT
Subject: CN=a988db27a756797fd08adb7a83698bada0e2f6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:9c:52:0c:34:2d:53:e1:d4:4b:41:31:91:
6d:d5:14:ac:b5:6b:33:04:46:3d:47:53:df:4a:da:
c9:7c:0d:79:f4:44:95:ea:f6:1b:b3:d1:57:78:da:
0d:98:ed:89:b2:7e:21:00:8d:0a:6c:86:f8:32:9b:
bd:f3:15:29:8e:23:a2:65:d6:2f:9e:e4:88:97:0a:
67:cd:8a:f6:1c:97:b2:29:20:6b:10:4b:d8:47:bb:
47:e6:fa:d5:bd:9a:74:ee:1e:15:fd:70:ec:02:f9:
1d:54:ef:05:64:e4:8e:75:69:8b:9e:5e:64:d0:0e:
01:ef:b2:98:0f:d3:44:37:aa:11:98:2a:9a:ee:4f:
68:93:5e:45:36:b9:a1:ab:e8:ca:0f:4d:52:73:0e:
fd:c6:1c:f7:b3:69:ec:d2:4b:d6:02:18:9e:79:60:
d1:30:bb:49:39:8f:21:a2:f5:dd:69:c6:ed:1c:ce:
fd:ae:8f:75:8b:e0:98:c5:7c:ad:3f:22:8d:2b:b3:
1e:8e:e1:9f:5a:12:6b:74:6b:d9:af:0c:c0:80:cd:
ba:8c:9b:19:0b:e7:03:be:db:6f:70:29:51:07:b3:
6d:46:90:71:a2:ab:6c:ee:a7:41:de:bf:cc:9f:98:
ca:5d:a5:64:6f:10:3b:23:17:51:59:b5:d7:e6:cf:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:88:DB:27:A7:56:79:7F:D0:8A:DB:7A:83:69:8B:AD:A0:E2:F6:B2
X509v3 Authority Key Identifier:
keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3f:d0:87:7e:97:38:c7:7c:0e:e0:19:f7:72:bd:1c:14:52:
6a:e9:b4:19:27:0a:70:24:e6:01:9e:f5:dd:96:a4:72:4d:2c:
c3:81:3b:f6:c5:5c:9e:eb:82:91:8d:79:09:a1:28:ad:9c:01:
c8:4c:8b:f2:e7:8f:7b:89:db:6b:fc:2b:25:28:cb:9c:e2:2b:
7b:1b:d9:47:66:fa:19:4f:60:7f:e6:9e:a2:49:15:f1:91:3f:
41:b2:02:4f:31:30:ff:ef:9c:49:26:fa:a7:30:a4:d7:3d:63:
72:3a:7b:10:cb:d2:ee:23:73:1a:38:40:66:7c:b6:e0:52:67:
cd:ac:da:ec:e9:e1:e0:46:2d:84:79:21:64:ba:a8:84:78:f0:
ac:55:68:fd:f0:ef:d6:2f:51:ca:2f:e2:1e:2c:9a:be:9a:bb:
cf:81:9b:74:c3:f8:80:9a:ec:de:74:8d:99:16:28:98:48:03:
d9:f3:b5:ef:eb:72:4e:16:88:bc:d8:7a:0b:a4:f6:cc:3b:98:
ae:3c:fa:76:73:55:ec:1b:3a:0b:e5:cb:ce:59:f4:98:fc:dd:
bf:12:81:0b:04:1f:8e:b8:71:4c:10:1a:2e:36:c4:5d:dd:af:
f1:91:0b:38:11:16:71:7e:5f:98:ae:ac:27:a1:2a:09:b0:c0:
a6:c9:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:37:27 2025 by rpki-client