Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
File: ncAOnjBGWR-LpVJEgN33xvxMYOA.mft (raw, json)
Hash identifier: d5FWYQzhBoPyw0pnBq1NgptvaCbMLQhCu9HUC20eh2Y=
Subject key identifier: 0C:10:C5:3F:AD:C2:76:95:D3:A0:6B:96:FA:B8:43:18:61:14:76:10
Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Certificate issuer: /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Certificate serial: 0196C53A50437C7374CA73DBABD9A1D2025D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 16:00:55 +0000
Manifest this update: Mon 12 May 2025 16:00:55 +0000
Manifest next update: Tue 13 May 2025 16:00:55 +0000
Files and hashes: 1: 49p4f0dafsUXZtr4zEkfdPg2MR0.roa (hash: Ja9qdubtQvHDpWVThEVb+wOD8jEOhZZePM5clLlMPts=)
2: ncAOnjBGWR-LpVJEgN33xvxMYOA.crl (hash: 7SmuwCyyODtVcL2ql4IWPAP7lrf1fS7fOyAqM8qCCYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:50:43:7c:73:74:ca:73:db:ab:d9:a1:d2:02:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Validity
Not Before: May 12 16:00:55 2025 GMT
Not After : May 13 16:00:55 2025 GMT
Subject: CN=0c10c53fadc27695d3a06b96fab8431861147610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1d:90:02:30:52:f7:c4:c3:bb:a4:d4:52:eb:
cb:1f:33:87:f9:db:72:ba:72:22:ad:1e:08:18:56:
37:cf:8b:d5:c8:73:99:93:44:ed:be:f7:fe:d4:ea:
f2:1a:37:e1:24:61:9b:ff:dc:f8:51:fb:95:3d:91:
1c:04:64:d9:dd:a2:13:eb:f1:b0:b7:c6:71:df:b9:
fb:af:07:d9:2a:cc:01:02:53:d6:9e:74:9c:7f:cd:
33:54:b6:28:9f:57:09:3a:48:d0:7e:26:0d:66:72:
5f:0e:51:46:ee:80:88:3d:0a:e7:cd:e4:bf:fd:90:
51:10:65:0b:d9:c3:d2:97:db:cf:c5:b6:03:d9:e6:
54:4c:5b:3d:68:71:66:d4:1e:a4:8d:b3:8f:ed:1e:
18:ac:cb:c1:2f:18:68:f2:36:09:20:cc:c3:9e:79:
0f:c2:04:d5:81:33:ca:5c:4b:4d:02:36:5a:09:21:
ab:82:49:d1:27:1c:15:57:c7:97:11:f5:78:4c:e3:
38:4d:8c:f4:0f:ef:a4:cd:d7:44:78:2c:69:fa:93:
07:36:13:22:95:b8:10:cc:6e:d9:90:24:37:0b:f3:
ea:7f:67:0f:dc:0a:e8:68:1c:67:80:49:e2:0d:9c:
b0:1a:a0:13:d8:82:61:ad:29:73:88:4b:1d:29:fa:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:C5:3F:AD:C2:76:95:D3:A0:6B:96:FA:B8:43:18:61:14:76:10
X509v3 Authority Key Identifier:
keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:dd:2f:1e:c5:e0:e8:01:7b:1a:5b:18:6a:ab:f2:3a:c5:09:
ca:10:45:97:dc:86:96:7f:b7:c1:a3:f9:d4:eb:f0:e1:17:41:
d0:07:6b:1e:7d:ff:03:95:07:9b:d0:dd:ea:90:a1:e9:42:a0:
16:2b:3f:4a:62:2f:88:f6:49:7f:f4:42:f0:92:fd:26:2e:50:
8d:b1:82:08:f1:0d:b8:38:cc:f7:7b:5d:f2:d5:6e:d1:a8:a1:
c8:ca:85:20:04:57:f7:42:41:0a:df:60:fb:c5:24:b8:97:bd:
07:91:5b:5e:90:bb:f7:4f:af:04:62:a1:40:5d:e5:60:20:65:
8a:67:4a:07:b8:4f:0a:89:d0:30:1d:bc:64:ce:97:ea:39:e3:
41:c8:05:b4:9c:71:cf:33:36:e7:20:c1:ab:2f:9a:38:2c:07:
d2:af:f3:34:48:0a:7d:1d:7a:26:c2:da:1b:cf:13:2e:8f:3c:
8e:2c:5b:a4:f4:93:25:5f:3c:2b:63:78:fd:37:f8:be:80:c5:
29:39:99:92:44:2c:a6:29:64:d7:c1:ab:fd:17:49:fe:1b:f0:
62:61:a1:94:b8:6c:27:7d:de:0a:14:53:57:bf:b3:3d:60:db:
46:d8:6c:69:3a:23:89:95:2c:4e:94:62:ba:c0:99:22:99:7c:
1d:47:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:04:38 2025 by rpki-client