Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
File: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft (raw, json)
Hash identifier: LbBGCYdHfSqcunXqyMJ/WN6RqXPZFvrcvgOTTS1T194=
Subject key identifier: 16:D4:EC:A5:29:76:B5:7B:F2:9C:26:01:45:FA:B0:9F:E3:A2:51:42
Authority key identifier: 37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
Certificate issuer: /CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Certificate serial: 0196BB2406996DE2AB5B38D3AEA6A3BEDABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
Manifest number: 0CE4
Signing time: Sat 10 May 2025 17:00:22 +0000
Manifest this update: Sat 10 May 2025 17:00:22 +0000
Manifest next update: Sun 11 May 2025 17:00:22 +0000
Files and hashes: 1: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl (hash: mgZwD3/QXzyirAy15522faqHJP+3fJvHHfnPaJM5QFs=)
2: agomHzSEGLU5uAKAS4YLGwlj-Q4.roa (hash: 7ISU2WJyj8nXTFjL/d0M7asR7w4tkrVLJaIrTwedHgs=)
3: vkfZgYornLyFRcsSczSPVSrUfQk.roa (hash: KEormr1cuV7WUv9lxgaJIBb9fC8nujOGpBV6adXBfrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:06:99:6d:e2:ab:5b:38:d3:ae:a6:a3:be:da:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Validity
Not Before: May 10 17:00:22 2025 GMT
Not After : May 11 17:00:22 2025 GMT
Subject: CN=16d4eca52976b57bf29c260145fab09fe3a25142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:ca:99:b6:ef:ed:e2:06:df:74:ea:36:d4:
f9:58:e6:47:b1:03:31:03:61:ef:41:81:dd:13:c5:
9b:57:c5:90:cd:e3:4e:c6:4a:17:f5:24:a4:92:44:
24:a9:0f:84:b5:5d:3f:41:71:44:c9:b3:4a:01:31:
fb:1d:d0:2c:a3:31:b4:f9:c8:c1:18:8e:96:ea:67:
72:04:7b:31:f2:d1:be:97:82:f1:70:dd:28:89:f2:
cb:7e:c1:75:7d:33:30:38:05:e4:08:33:e1:93:ed:
75:dc:de:01:d1:6c:38:35:6b:e8:b0:52:3a:37:d5:
df:43:db:a5:1b:fe:02:6b:78:19:1d:ed:c4:62:1d:
de:5a:0c:12:05:84:10:c2:eb:a1:09:65:a0:54:47:
ff:5d:b6:d2:9d:44:ac:26:a2:eb:a2:e3:da:5e:a9:
35:8a:b6:21:65:9c:ed:1c:0d:a0:87:30:d9:79:e9:
4b:3c:c6:38:02:5d:41:2d:36:94:2c:bf:59:2f:85:
ef:65:87:13:58:fd:21:c6:c1:c4:15:37:6c:9b:ef:
68:45:8d:5f:bd:aa:15:0f:8f:c0:0e:c3:f2:fe:20:
42:4b:90:a0:f9:4e:44:98:aa:d1:e4:21:30:cb:a3:
d4:9f:fe:f8:35:62:7b:d9:dc:c4:a1:e2:57:6b:c5:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D4:EC:A5:29:76:B5:7B:F2:9C:26:01:45:FA:B0:9F:E3:A2:51:42
X509v3 Authority Key Identifier:
keyid:37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c1:84:3e:ad:d7:bc:4b:da:07:42:8e:92:6e:ba:dc:1a:fd:
fd:6f:38:4c:f9:6a:18:74:d5:79:c9:6c:7a:4a:2e:cb:a1:49:
89:be:00:0c:f5:9d:16:d8:b2:e6:b1:3e:92:d9:b6:1e:38:16:
c8:c6:a8:4e:e3:fc:71:c7:87:49:1a:22:5c:8b:f9:76:fc:67:
a2:ee:6e:75:49:8c:59:d6:64:bf:c7:21:5d:c4:8a:8f:0e:08:
3e:75:f6:67:8d:2f:86:1e:0e:e2:4b:2b:62:8c:32:27:19:0f:
ff:03:ec:67:4c:09:50:d7:23:df:27:29:1e:f9:bc:aa:dc:e3:
df:40:fc:8c:ca:00:10:99:a5:90:8c:c6:f2:4c:57:ec:b0:08:
e2:06:57:ae:4c:66:db:64:5e:5a:d2:3b:ea:f2:26:ea:3c:30:
56:4b:3c:ae:cd:73:da:06:72:15:ce:54:4f:82:ce:fe:29:2c:
7f:9d:57:84:22:20:1c:04:f4:23:82:56:e5:90:f1:d4:b7:a8:
81:b0:fa:03:fe:1a:da:fe:8a:73:0a:88:02:7a:5b:b8:8b:30:
74:6f:81:7e:bd:76:06:37:cd:e5:f5:94:ce:8a:12:13:7c:2d:
d4:fc:29:88:21:45:23:d2:62:05:35:05:08:c3:c3:ac:d0:53:
af:8b:54:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:30:44 2025 by rpki-client