Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
File: nMIzEMkVpP4JXht0oGbRze5HhD8.mft (raw, json)
Hash identifier: Qi+g4Ag68/84sKKvJEfDMzgnluI30yPSgCihRrz9Pjc=
Subject key identifier: BF:E6:34:E9:23:2A:35:35:DB:BB:31:0C:2C:47:54:4C:AC:FB:FA:B6
Authority key identifier: 9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
Certificate issuer: /CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Certificate serial: 01969D87C947E2DE698A29664FD842CE90A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
Manifest number: 0923
Signing time: Sun 04 May 2025 23:00:43 +0000
Manifest this update: Sun 04 May 2025 23:00:43 +0000
Manifest next update: Mon 05 May 2025 23:00:43 +0000
Files and hashes: 1: RmN9zhNzrcosUTM-5d1gTAjxE1E.roa (hash: uL4bwjKQw+5HAkk/uHdj99zle5Zhy8r9K/Xf1FOLrg0=)
2: nMIzEMkVpP4JXht0oGbRze5HhD8.crl (hash: 6U5NVeniZ/M7TmdDfEoTYn+XKyfjVMnrqOqG4z7FX7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:c9:47:e2:de:69:8a:29:66:4f:d8:42:ce:90:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Validity
Not Before: May 4 23:00:43 2025 GMT
Not After : May 5 23:00:43 2025 GMT
Subject: CN=bfe634e9232a3535dbbb310c2c47544cacfbfab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:2f:87:30:e0:a2:4f:df:85:4e:3a:47:4c:
1d:72:1e:68:1e:41:c1:04:bd:cc:ed:87:f0:06:e0:
0a:79:06:87:53:cf:68:34:d2:49:03:55:77:96:b3:
7c:b1:11:a7:db:3a:7f:66:35:da:23:34:2c:6d:a3:
5e:94:48:5c:8b:81:7f:bf:83:5e:4f:13:8d:7b:98:
17:c5:d7:7b:04:19:cf:16:e4:d8:1d:86:ba:be:4a:
0e:fd:1c:e8:eb:7f:03:b0:e1:34:c1:96:1d:f1:54:
36:50:cf:0c:a4:4c:d5:21:70:a6:47:c1:14:a4:53:
7a:39:f9:12:bf:45:a9:5b:c0:cd:c4:98:ca:81:66:
1b:fb:db:1a:d4:47:a0:9e:1c:7e:39:93:13:0b:b2:
1a:e5:aa:ab:c8:10:20:f6:a1:fb:10:01:f5:61:b8:
89:20:ca:ef:07:5c:79:35:ac:7d:a6:10:0a:6d:d8:
20:b7:28:2c:20:66:ec:a8:66:de:64:e7:9b:13:21:
fb:52:f6:66:c9:bf:57:84:5c:7d:67:1c:b4:b4:33:
ea:b8:a6:ee:ca:2f:39:49:7c:db:54:5f:52:f8:bc:
e6:a5:1a:70:bf:37:13:33:1e:0f:d5:c5:ac:5d:70:
19:56:65:c3:39:1e:40:09:40:f2:17:b5:a8:c1:21:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E6:34:E9:23:2A:35:35:DB:BB:31:0C:2C:47:54:4C:AC:FB:FA:B6
X509v3 Authority Key Identifier:
keyid:9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:65:b9:44:fc:c2:1c:18:19:2f:c3:e5:94:53:21:91:e1:f6:
05:44:cb:9c:f3:d3:61:e2:95:ec:db:16:06:10:91:a5:83:68:
89:10:68:6c:7c:92:bd:db:05:d5:c0:00:70:12:4c:36:a5:14:
4b:f1:36:a4:27:ca:d8:4e:82:05:3e:3a:71:e7:08:2b:ea:46:
ed:d6:85:12:8b:73:91:00:2f:91:d6:b9:61:b2:0b:e6:bc:e0:
08:94:69:56:56:27:55:0f:8e:d0:bd:c7:29:d9:36:86:25:79:
d7:f6:b4:6d:4b:68:2f:42:20:df:64:fb:3e:4a:3b:49:1e:b5:
a2:3b:91:e8:1b:85:9b:c9:cf:ee:fd:18:08:1f:dc:57:fc:5f:
d4:23:20:63:af:bb:49:b0:77:ab:12:d8:be:d1:72:2d:ef:b8:
d8:bf:62:7e:2a:f4:27:c0:30:22:12:85:86:ea:64:98:12:f9:
a2:a7:3e:73:51:47:d9:1a:79:2b:d1:2b:f6:93:fe:b2:30:64:
75:c8:53:69:2b:90:1a:09:67:02:90:1f:a2:05:7b:a7:0a:1b:
08:94:22:a7:dc:b3:a7:55:76:69:54:b2:86:78:4e:a3:29:b4:
d6:e2:3e:79:d0:12:be:8e:3c:f1:f9:23:6a:a4:f3:3a:0f:31:
dd:5d:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:09:54 2025 by rpki-client