Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: jvM9kWUxKhdbxu8ok3PcMUmC92XvQniF1Wh+l2q5rbQ=
Subject key identifier: B6:A9:99:9C:9A:85:02:C6:49:F5:71:BF:D7:2A:52:35:F9:2B:2D:84
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 0196BCDB981AF74253205CC0C24954A4FAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 0DB8
Signing time: Sun 11 May 2025 01:00:29 +0000
Manifest this update: Sun 11 May 2025 01:00:29 +0000
Manifest next update: Mon 12 May 2025 01:00:29 +0000
Files and hashes: 1: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: fdb23IDoHfw1LsLB0mkgmxdLrpBPh4JeMnwxFUUXSXk=)
2: ZFMFiXOWwPj8k4IMO6NkGD3u9_Y.roa (hash: d308Fz0xAcOGQMBvbHe9umSC8kJ11mxoDxfXwvbWkEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:98:1a:f7:42:53:20:5c:c0:c2:49:54:a4:fa:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: May 11 01:00:29 2025 GMT
Not After : May 12 01:00:29 2025 GMT
Subject: CN=b6a9999c9a8502c649f571bfd72a5235f92b2d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:70:4b:c2:28:bc:73:93:22:25:5b:49:f1:
3e:c3:ff:48:77:95:d0:55:04:e1:95:42:11:27:43:
cc:cc:b5:0c:ff:0d:6b:92:63:b5:a4:04:c0:97:1c:
2e:65:8e:38:b5:3d:6f:33:8d:cd:45:77:c4:6e:9e:
fd:61:34:a4:11:ee:92:de:54:83:85:c5:45:2a:6c:
3d:cb:44:e8:8e:c7:66:b6:1d:9b:98:08:3e:28:28:
93:f1:26:57:85:e1:d3:84:f1:a6:8f:23:b4:8b:f0:
55:b4:38:74:55:1c:73:2d:e2:b3:0b:6c:e2:60:32:
d3:c7:8c:0d:64:75:43:81:2f:d8:fa:de:f4:00:6d:
74:3d:a5:aa:d2:1d:88:3c:8f:b6:1f:c3:96:58:a2:
38:cc:59:14:b5:e0:bb:0c:09:40:e2:b8:70:ef:dd:
8c:86:2f:00:ee:8f:9b:3a:e5:41:a1:08:c5:dd:81:
99:dc:5e:a3:c6:fd:0a:8d:b2:bf:c7:38:e2:e6:7f:
79:0b:59:07:d9:49:9b:f7:b9:c7:04:9e:a4:c9:b9:
de:53:28:85:7d:f7:45:7d:64:5e:0c:0c:c3:9d:c8:
2b:50:11:e6:46:3f:df:23:cc:b7:ac:33:f7:23:71:
e0:8b:a2:b9:d5:00:99:c7:d4:cd:74:2e:3a:d2:57:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A9:99:9C:9A:85:02:C6:49:F5:71:BF:D7:2A:52:35:F9:2B:2D:84
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:05:e6:04:eb:a3:7b:10:0c:61:6e:19:37:a2:bf:2f:ac:a9:
fe:c9:da:8e:e9:37:29:7d:b0:0e:1d:73:4e:c3:8f:e9:82:c9:
13:e4:89:57:22:75:9e:41:72:34:22:62:21:1b:cf:a5:0f:df:
37:7d:e4:83:15:51:f4:86:57:30:c5:49:4c:de:b5:35:0e:10:
e7:d8:66:b0:ce:e7:11:4b:f4:4b:93:b8:d2:c5:0a:76:a7:91:
04:34:df:12:2a:59:b7:49:a7:76:96:6d:34:33:5d:8b:6a:97:
fb:1f:10:f3:01:b5:a1:19:b6:f5:ae:e6:da:c7:e3:03:72:af:
d9:32:6b:c0:15:09:80:30:c5:8e:f6:47:63:66:90:d5:a4:3a:
2a:94:ca:55:09:c0:a9:58:54:70:09:b9:d8:52:70:a0:33:e0:
18:80:c3:06:6a:ef:a7:d8:8f:ee:77:6d:db:7b:f3:53:8b:65:
ce:03:dc:a3:ea:64:1f:7a:f3:44:f4:58:8c:08:52:97:43:65:
4b:c3:70:76:a7:28:59:df:bf:af:80:fc:6b:6b:f6:65:e9:1a:
68:6a:5d:4c:9a:99:89:45:0e:51:4f:61:ce:91:0d:6d:a1:58:
6b:84:21:0b:54:e6:9e:af:28:15:61:20:9f:e6:fd:9c:15:1b:
24:fa:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:25:49 2025 by rpki-client