Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
File: NoTy9VGkNSosFNf45pMpqdxD_eA.mft (raw, json)
Hash identifier: 1AcUZH+JPVbUiSe5rHJ8eKqi4QR+2OULX0kVFh2i6dI=
Subject key identifier: 03:D7:36:AF:86:41:AF:CD:E6:79:C8:61:B9:E1:0C:D7:3F:B1:E0:02
Authority key identifier: 36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
Certificate issuer: /CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Certificate serial: 0196CC4E90FA670BBF1EDAE985DE1398464E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
Manifest number: 013D
Signing time: Wed 14 May 2025 01:00:22 +0000
Manifest this update: Wed 14 May 2025 01:00:22 +0000
Manifest next update: Thu 15 May 2025 01:00:22 +0000
Files and hashes: 1: NoTy9VGkNSosFNf45pMpqdxD_eA.crl (hash: Ca1QAF57X3pwIH5pXzu091yGUnPvzDo9fkfn0ek9FXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4e:90:fa:67:0b:bf:1e:da:e9:85:de:13:98:46:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Validity
Not Before: May 14 01:00:22 2025 GMT
Not After : May 15 01:00:22 2025 GMT
Subject: CN=03d736af8641afcde679c861b9e10cd73fb1e002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:3c:0a:8d:b5:58:bd:f7:a9:91:e2:de:e6:
62:70:3c:4a:c9:f1:92:59:27:6c:b5:2c:be:05:58:
04:8d:be:9f:0b:93:03:bd:e3:98:be:b2:7c:8c:27:
9a:35:97:de:87:ae:67:e7:27:b0:60:5c:62:24:ba:
24:42:0e:10:b8:38:19:75:25:b1:d3:3c:68:d2:23:
78:0b:6c:a0:fd:a9:40:ac:da:bd:c7:ce:c7:2d:a9:
f0:e5:dc:bd:80:d6:dd:bb:6f:94:4f:14:6c:84:20:
c9:7a:81:d2:46:02:a0:47:9e:d9:02:77:ca:fc:6e:
8c:76:23:92:49:6e:8f:0a:3e:1a:1b:fc:8f:28:e5:
db:fb:c6:c7:63:ab:34:7e:c7:c8:ff:3b:4e:62:c7:
3b:7c:6a:a1:68:96:53:b0:f1:17:01:d4:76:fa:1d:
bf:82:a7:bb:28:13:25:a9:fa:87:00:84:dc:b8:da:
fb:24:91:a8:87:60:03:b1:bf:b7:b4:b9:a4:99:0c:
9d:07:e9:98:4a:29:38:f8:95:70:0a:ae:4e:76:dc:
6a:12:8b:5a:87:3d:20:54:dc:c7:74:76:8a:f1:a7:
c0:dd:d0:60:78:b8:3a:ad:de:69:d5:33:9f:67:8c:
2e:b1:bf:d9:70:54:15:f8:0e:04:c7:26:dd:b1:7a:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D7:36:AF:86:41:AF:CD:E6:79:C8:61:B9:E1:0C:D7:3F:B1:E0:02
X509v3 Authority Key Identifier:
keyid:36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e1:9c:24:87:92:fc:20:90:2e:11:3d:3c:a5:9f:cb:d0:2f:
32:1d:6c:f1:14:fc:16:3a:7d:7f:ad:82:17:a4:e5:95:7c:11:
e1:75:b9:b1:94:fe:5e:45:57:2a:27:31:c1:fc:19:92:54:2d:
10:36:a8:cb:52:99:90:74:0a:17:f9:84:04:fe:81:61:c2:26:
a1:c1:2a:61:c4:9f:fe:19:fd:1e:e7:69:54:28:f1:d2:ec:64:
a2:b3:22:af:e2:5d:1b:f9:a1:d3:31:2c:96:50:f5:e2:78:94:
8c:33:55:1d:0c:1d:7a:4b:c6:ea:75:37:6e:6c:1a:d3:c7:84:
4f:0f:d3:62:e2:c9:3a:c5:48:42:9d:c8:73:dd:91:86:ce:fe:
38:b4:ee:94:cb:c4:ba:87:ee:46:03:86:8f:71:58:45:ca:d9:
f3:fc:02:ee:fa:2f:3d:56:1b:14:3f:df:89:94:f9:7f:17:37:
c1:76:b8:5b:f9:01:e2:cb:a6:7d:35:e7:af:e0:64:6b:89:8e:
3a:15:79:f5:3f:30:55:a9:fd:9c:e5:cf:6d:83:7b:c1:48:56:
65:e0:0d:f6:62:8a:50:65:84:5f:be:09:46:59:c1:0a:40:83:
e5:e0:a1:f3:a5:d3:ed:bb:5c:25:5b:f7:d5:8f:58:43:8e:ca:
38:1c:2d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:27:47 2025 by rpki-client