Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
File: nfToC0ytTlC3iO3xaXZxLe7_bA0.mft (raw, json)
Hash identifier: zYBCAZ+2YSLaZ7az2OnI/dvGVdxXYcrF31lWEcxpdsw=
Subject key identifier: AB:44:0A:A7:F4:A8:A4:E9:59:6F:E7:DE:42:4A:51:9F:26:52:59:1D
Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
Certificate issuer: /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Certificate serial: 0196C3B9DD22B4C4A0365608E513F8C77B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
Manifest number: 0E0B
Signing time: Mon 12 May 2025 09:00:59 +0000
Manifest this update: Mon 12 May 2025 09:00:59 +0000
Manifest next update: Tue 13 May 2025 09:00:59 +0000
Files and hashes: 1: mTtxU7O_lRz_UT2tjl3cUWas7pA.roa (hash: lHDy75xFNayt8SROCAEJF8vDi//tAi35Yjt2Fy8OX04=)
2: nfToC0ytTlC3iO3xaXZxLe7_bA0.crl (hash: ayH9Ax819sFZrAgeVPtuEjYsLBUXSv9xmGq3FuOUolg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:dd:22:b4:c4:a0:36:56:08:e5:13:f8:c7:7b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Validity
Not Before: May 12 09:00:59 2025 GMT
Not After : May 13 09:00:59 2025 GMT
Subject: CN=ab440aa7f4a8a4e9596fe7de424a519f2652591d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:2a:1c:06:e2:46:8d:f2:92:23:5d:ec:53:
41:bb:29:07:cd:bd:68:f8:06:04:7c:21:a3:04:6f:
7b:33:a4:0a:9d:5a:42:ef:91:bc:f7:99:c0:7a:5d:
73:ab:65:e0:15:08:15:33:f5:6e:a5:e7:79:0f:4b:
10:27:e9:bd:04:77:0f:fd:8f:b6:d4:5a:80:2f:b1:
51:67:af:44:09:e3:48:75:26:32:ce:00:d4:ec:eb:
73:0b:4f:cd:f0:7f:90:42:4a:49:5b:0b:42:48:7f:
20:9c:f3:5d:77:9a:91:3e:78:83:4c:63:4e:e3:82:
10:fb:4e:cb:be:92:59:d5:50:26:9b:56:b7:d6:70:
16:a9:c2:ea:77:7d:b4:43:8a:bd:c3:10:19:62:17:
5a:ff:2f:4f:d7:ae:fd:0d:ec:9e:da:f8:a1:9c:48:
9d:da:42:3e:3e:eb:32:a6:d8:1c:34:c5:f8:4b:b1:
bd:5b:0d:70:0d:13:22:77:0e:2a:ab:48:02:e6:d5:
1f:59:29:74:c7:62:0b:1c:97:e5:83:65:93:58:9a:
90:f0:da:93:5d:d6:1d:fd:70:a9:6d:00:eb:c0:18:
ba:cd:d6:a9:51:30:ad:82:74:fe:66:9b:c6:17:cc:
69:10:10:dc:9a:00:c6:d7:92:1c:b7:d5:88:8f:0c:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:44:0A:A7:F4:A8:A4:E9:59:6F:E7:DE:42:4A:51:9F:26:52:59:1D
X509v3 Authority Key Identifier:
keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ba:22:01:5e:8b:5a:a6:5e:97:0b:71:39:e5:91:98:3b:97:
b6:1c:8a:39:6b:2f:01:6f:76:7d:63:b8:ae:53:ea:74:21:19:
a8:cc:31:bc:c9:0c:c2:43:14:b2:9a:02:36:fd:b7:8c:6e:61:
01:cc:c2:c0:59:27:ce:a7:f2:6a:88:22:8b:54:0e:ec:1a:cc:
02:53:f1:a9:8a:55:83:ca:96:d5:c3:d3:50:08:2e:43:d9:8d:
3c:d3:8c:ee:aa:79:68:2d:57:64:67:10:c5:aa:51:57:a4:84:
bc:54:22:76:ac:d8:d2:eb:64:2b:e0:8c:b1:b9:78:ba:5f:68:
c1:67:c5:ea:e2:20:d8:58:d2:3e:18:ab:b0:f1:3b:70:51:8b:
96:c4:d2:34:0b:a0:35:7b:2d:27:40:4e:5a:69:29:e3:47:d7:
1e:52:b9:6f:76:fd:c2:90:b2:75:b9:7f:18:80:7b:b6:99:f4:
60:70:51:c1:77:f7:52:b9:3d:1a:1d:a3:f9:66:48:ea:ed:12:
37:b1:f9:19:60:87:b7:bd:33:c5:22:e0:ca:62:e9:6a:ed:e3:
af:00:c0:0f:02:b6:b9:f7:90:d6:72:52:fb:ab:d9:d2:67:fe:
d3:4b:f2:07:7d:29:9c:8b:fb:e9:97:67:ff:51:ae:7d:02:f7:
8f:3a:05:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:03:38 2025 by rpki-client