Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File: NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier: 4uLNh4GkXyQKfubdjJay8sgiQ74CmUuYmlCqXBr86QY=
Subject key identifier: A7:23:FA:FA:1B:CD:CA:C6:E9:6A:3B:D7:3D:59:5E:31:8B:3D:80:F4
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer: /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial: 0196C3B99BDD8498E28932671DCD7D8C33B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 09:00:43 +0000
Manifest this update: Mon 12 May 2025 09:00:43 +0000
Manifest next update: Tue 13 May 2025 09:00:43 +0000
Files and hashes: 1: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: b9/nIhwxClC6ysMZeu2+pWiubhF+Kq/caZJeoYf3AhQ=)
2: jyQjff39PkjIcb2c4y6sicxo6PU.roa (hash: NTGQ8Vsi7SBxb0wiOjPR2Eb0JAGTh/a1kL30gt2n6ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:9b:dd:84:98:e2:89:32:67:1d:cd:7d:8c:33:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Validity
Not Before: May 12 09:00:43 2025 GMT
Not After : May 13 09:00:43 2025 GMT
Subject: CN=a723fafa1bcdcac6e96a3bd73d595e318b3d80f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:6d:29:90:28:11:a1:8d:88:8c:4a:fc:51:
15:f4:14:22:ff:a8:34:b2:5a:8f:6d:87:0c:87:ea:
5e:a1:71:a5:52:8f:63:0d:0c:8c:90:69:1a:a9:b7:
e5:49:6a:36:b4:dc:47:b7:6d:af:ca:2b:2b:5a:37:
ea:93:4a:d8:b4:ba:26:ad:04:bd:e3:c9:e2:42:fb:
c5:30:b7:40:4f:4c:c9:b2:7f:cc:a7:e9:9a:5a:ac:
88:97:4d:8d:63:87:50:cd:b7:61:2e:95:f8:68:7a:
a5:3e:d7:90:59:0d:56:8a:54:0b:5c:16:36:99:73:
9a:e9:4c:a1:78:05:5a:0d:54:67:65:0f:f4:5b:20:
3a:36:25:f6:7f:a9:a8:9e:4d:fc:5b:5b:89:0a:f7:
82:db:14:1f:f7:0b:60:68:af:e6:db:f7:08:0e:4f:
00:31:c8:bc:3d:4a:60:dd:20:2d:45:a3:fa:dd:bb:
43:67:56:26:85:bd:ef:05:cc:40:77:6a:19:43:62:
25:75:b0:3d:d0:3f:78:d0:40:8d:e6:59:49:03:8a:
71:9a:7f:1d:e7:85:16:ca:58:10:90:bb:02:8b:e5:
11:12:24:34:dd:53:22:e4:9d:a8:d4:8c:df:08:4e:
2b:c9:40:e2:1a:4b:b5:a7:37:b3:59:24:73:d1:5b:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:23:FA:FA:1B:CD:CA:C6:E9:6A:3B:D7:3D:59:5E:31:8B:3D:80:F4
X509v3 Authority Key Identifier:
keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:61:8d:4f:6b:a9:05:e0:f6:d6:1c:ac:b6:a2:d9:58:08:fa:
1a:9d:e6:eb:1b:08:d6:19:8c:b7:54:7a:eb:8b:c0:86:69:b1:
bf:5d:40:3b:db:c3:80:e3:f9:07:c5:cc:81:22:47:f4:26:fd:
c4:11:32:df:de:8a:19:bd:7b:b5:bd:52:47:14:af:83:7f:0b:
6a:93:28:45:ad:33:c7:7c:65:97:80:2c:79:99:ac:dc:85:d7:
18:01:e2:5d:40:12:e6:70:2c:5b:ff:88:fb:1c:95:97:ac:b4:
cd:91:d0:46:ae:0a:46:05:a4:29:e5:e1:fe:51:0f:ef:b2:85:
88:98:30:0b:22:20:c8:22:fc:d8:02:a1:58:b1:f8:29:8d:ce:
4f:71:fb:4c:36:00:f1:79:dc:e6:73:49:c0:ae:e4:d6:6f:00:
6a:6a:f6:0b:6b:76:56:7b:a6:9b:d7:48:0f:85:9f:f0:f2:76:
c4:8b:69:0d:22:99:51:b5:89:a8:4e:16:d3:90:ed:dd:c7:65:
96:01:24:31:31:96:80:e0:e3:a9:59:de:e6:96:a0:6a:37:6f:
f9:c1:14:d7:ea:e0:a7:e3:8d:22:8b:60:1c:21:0a:aa:5d:f4:
9d:2e:2f:0d:50:d1:c9:13:af:a5:6c:93:72:55:67:ed:6b:63:
07:8c:e3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:58:40 2025 by rpki-client