Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
File: niX4djqjUWiba6M2JpqyHE4BILM.mft (raw, json)
Hash identifier: zHXPDt8gDTYnmxtMPyeVvFZscHliOQSjuXT9hpykg5U=
Subject key identifier: 51:83:18:DC:AE:15:27:AF:9F:FC:8D:0A:79:A0:BE:03:00:28:DA:1E
Authority key identifier: 9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
Certificate issuer: /CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Certificate serial: 0196D13E614A58A29F12D9AC1EA2219E93FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
Manifest number: 0362
Signing time: Thu 15 May 2025 00:00:48 +0000
Manifest this update: Thu 15 May 2025 00:00:48 +0000
Manifest next update: Fri 16 May 2025 00:00:48 +0000
Files and hashes: 1: 3lv0MS0KMvs2NqTlqtd3HvxtHfA.roa (hash: Jn8Yd6x4goPshXFFHZFFSl5WpHb8SXFgvxZ7Lsgfvu4=)
2: niX4djqjUWiba6M2JpqyHE4BILM.crl (hash: 3l/lclybItZJaU15CIzXpUCFIe8dvPy+Zng/ajmAxUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:3e:61:4a:58:a2:9f:12:d9:ac:1e:a2:21:9e:93:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Validity
Not Before: May 15 00:00:48 2025 GMT
Not After : May 16 00:00:48 2025 GMT
Subject: CN=518318dcae1527af9ffc8d0a79a0be030028da1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b8:c8:d8:83:0f:cd:df:44:4b:f7:80:39:06:
24:ff:74:bd:46:99:4e:0c:0f:57:25:4d:e6:8b:d3:
f1:3e:4f:98:09:60:2f:dd:e7:a2:b6:fb:81:6f:fd:
c2:93:14:c5:ae:e0:77:76:1c:d9:d8:8b:51:4d:4f:
13:58:9c:fe:57:71:a6:32:07:22:59:a4:dd:45:98:
1a:f3:e6:b6:a0:df:28:d3:38:65:c2:32:9e:aa:16:
ca:3e:f0:16:e4:eb:55:f4:38:e8:5f:a4:e2:84:56:
87:13:98:e3:df:50:f2:40:e4:cb:0e:24:de:7f:03:
b2:7b:d6:dc:b3:70:1d:00:e6:14:c3:5d:91:83:d3:
98:e0:08:13:99:0b:3f:7d:87:ae:68:9a:d7:14:14:
7e:6f:68:07:34:90:21:eb:c5:8a:b8:f3:10:6c:ee:
b7:27:34:5b:03:35:17:0f:08:e9:78:ad:86:e2:03:
13:6b:9d:56:bb:80:94:9e:bf:e4:a8:26:05:24:32:
4f:a9:99:f3:7c:33:a5:bc:5c:28:02:8e:af:b8:7d:
4e:77:6b:e6:58:cf:98:f1:fe:71:f8:14:cb:2e:62:
6f:3d:12:cf:02:f4:30:dc:df:cb:f9:e6:8e:6e:84:
cf:75:d3:f7:43:9e:4b:44:85:f1:dd:de:cb:f8:a6:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:83:18:DC:AE:15:27:AF:9F:FC:8D:0A:79:A0:BE:03:00:28:DA:1E
X509v3 Authority Key Identifier:
keyid:9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0a:bc:ac:9a:60:da:a1:8b:4b:98:b3:4e:41:19:0d:d7:ef:
5d:5b:00:74:ea:a8:df:a6:49:de:23:2c:93:72:fd:bf:7b:18:
22:56:04:ee:76:9b:49:e4:07:1a:4e:8b:a5:a7:3f:82:03:9c:
75:8d:19:8a:8f:7f:7c:91:bd:64:62:ff:72:54:56:4f:ed:ab:
2e:73:79:8c:bd:ea:b1:ab:35:69:da:8e:7a:6a:67:bd:14:81:
c1:55:08:0c:16:be:70:85:2a:35:b6:eb:ea:b6:52:6f:c2:1a:
cb:87:b1:3f:d3:93:84:12:f2:59:64:e5:b1:1d:66:95:45:8c:
21:e3:9a:09:aa:1f:c0:44:ca:92:7e:08:c6:8a:65:85:7e:df:
e6:a9:6b:c7:22:46:46:09:8a:7a:62:e2:d1:e4:0d:ca:8b:28:
2c:aa:69:77:60:f7:30:23:e3:fc:a0:09:9a:04:42:45:a9:3c:
a2:dc:5e:46:6f:2d:32:70:71:dc:fb:41:47:52:95:41:b2:42:
62:8d:3b:b1:55:1b:6d:c7:3d:48:e3:18:2a:c3:8f:8d:20:89:
d4:14:c5:58:9d:14:b4:b1:22:34:02:c1:0d:b0:a1:77:57:de:
5c:13:ce:ce:1a:75:74:32:7f:97:ef:66:b1:14:7c:1d:40:c2:
d9:72:90:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:52:34 2025 by rpki-client