Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
File: n15P8s7k23qVvPKjrRHJR1dbsaY.mft (raw, json)
Hash identifier: mXZN5xkCTjDoQqxqhZCh+2YawDtd1rpyJdaFNZ+KR3Q=
Subject key identifier: E2:43:DC:E4:9C:46:26:13:12:6C:FF:84:19:A5:FA:A2:E3:7A:3E:A2
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial: 0196AC8CA6DDCC601E16EF63982EFA65A449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
Manifest number: 0AAF
Signing time: Wed 07 May 2025 21:00:20 +0000
Manifest this update: Wed 07 May 2025 21:00:20 +0000
Manifest next update: Thu 08 May 2025 21:00:20 +0000
Files and hashes: 1: 1-jitS6EpXiqLjoTy0y90wIH72rI.roa (hash: Rfg5nTBCaEYBRoN4EImwETKxmFJYdYpWUORSCCGtVf4=)
2: CoX1lhKeqnywoZzkBVdeBK0K-8E.roa (hash: UeFCTUO9sjJL5Z6FG4W0m09+58Inz20WQtlj2knxqFc=)
3: n15P8s7k23qVvPKjrRHJR1dbsaY.crl (hash: 4L3n8Q/dpBLbtmFmETwmcVTrH6gtWwLe7zVHZQknWfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8c:a6:dd:cc:60:1e:16:ef:63:98:2e:fa:65:a4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Validity
Not Before: May 7 21:00:20 2025 GMT
Not After : May 8 21:00:20 2025 GMT
Subject: CN=e243dce49c462613126cff8419a5faa2e37a3ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:b8:69:23:eb:a3:24:0b:18:52:a3:53:b4:
76:49:61:b6:1e:9a:17:17:bd:2c:0f:6f:3a:c5:ba:
4d:52:85:1f:93:cb:2b:cd:52:69:b6:c0:44:0c:d4:
21:e5:26:28:d8:b6:9b:d7:00:c8:96:e8:23:2c:14:
4c:6d:82:3b:e2:f4:b7:0b:6d:2c:b7:a7:88:94:21:
b5:36:f9:0c:21:53:bd:e1:f2:d3:3b:4d:46:74:86:
62:20:42:80:ed:98:77:72:74:64:0f:b6:83:0f:76:
bb:d8:25:ff:00:e1:77:51:f8:e1:5b:7c:e7:42:6a:
9a:c8:bb:2c:3b:36:ce:a7:4f:c3:c3:d9:06:d0:32:
76:3b:34:3d:38:83:78:19:4d:b8:57:cd:5e:1f:94:
5b:6a:b6:1c:1c:9e:6d:83:7a:b8:cd:d7:75:d1:a7:
23:c4:9e:80:6c:6f:69:b9:e2:2b:a8:e2:5f:9c:8d:
fe:a1:63:9b:1d:7d:36:05:10:37:fe:21:05:5e:71:
15:b0:ac:f0:82:57:08:8d:42:c0:56:a9:51:e3:7b:
16:84:0f:12:6e:dc:a7:eb:8c:21:40:15:02:42:8c:
29:9d:5b:7e:13:62:f1:5d:39:8b:d8:4e:c3:22:af:
ca:2c:20:d2:0e:59:bc:35:5c:aa:43:0e:88:b6:5f:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:43:DC:E4:9C:46:26:13:12:6C:FF:84:19:A5:FA:A2:E3:7A:3E:A2
X509v3 Authority Key Identifier:
keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3c:7c:be:20:02:6e:62:8c:97:1a:85:47:60:be:68:62:f4:
0a:09:ec:e4:0b:f3:2d:d3:1d:1e:6c:92:0a:b1:9e:24:4d:28:
8a:e7:88:5c:3d:af:90:d6:e0:5f:72:cd:6c:69:4c:34:34:6e:
43:ff:24:5f:10:10:48:5f:33:e7:00:53:5f:34:e8:67:5f:8f:
77:1c:3e:68:94:48:c1:14:5f:76:a2:de:e6:b8:1d:72:a3:65:
0f:9b:bf:95:16:fb:da:dc:31:15:fc:4e:6d:f9:6c:10:67:41:
90:fc:f2:4a:22:7f:aa:5b:d4:03:33:2d:d0:f8:5e:5f:66:b2:
08:57:e9:78:02:b6:a4:06:9d:d7:3a:b6:a3:31:a6:6d:59:29:
c8:b2:8d:be:e8:ed:68:ce:9a:56:3b:9d:c9:bf:97:57:bd:74:
7a:83:c5:7b:b6:8a:92:6a:3c:d9:ba:27:1e:ba:8f:a1:2c:d3:
92:24:d2:5a:ea:9b:ec:4c:9b:02:ad:8f:5d:60:32:f8:4d:c5:
8c:26:3d:fb:2e:ba:21:1c:84:fb:93:0e:71:c9:30:9c:06:f4:
86:27:8f:bd:8c:fa:64:bb:66:d4:70:a3:fb:3b:d6:c3:c2:82:
d7:c7:85:fc:2a:71:aa:36:46:33:58:85:bd:8f:6e:e0:b1:c9:
fc:2e:75:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:11:11 2025 by rpki-client