Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: azFCDO6mld18JGm8ihgscwt9YMHWCSK3R8BJy6owKyE=
Subject key identifier: 0B:D0:0F:23:51:8A:1F:C6:B0:14:F6:DA:A4:3F:48:CA:87:21:49:A3
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 0196C502E0AD616CECE37EDA551A8E989C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 0DE6
Signing time: Mon 12 May 2025 15:00:22 +0000
Manifest this update: Mon 12 May 2025 15:00:22 +0000
Manifest next update: Tue 13 May 2025 15:00:22 +0000
Files and hashes: 1: VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa (hash: js4ojfLf5VJc1gb3AG5cMspDXL3JZYEKqGj/N4sAQU8=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: bqjms/bH+2kT9gYKYdodb46Gtx7tG5p9Gp76MVAsdwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:02:e0:ad:61:6c:ec:e3:7e:da:55:1a:8e:98:9c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: May 12 15:00:22 2025 GMT
Not After : May 13 15:00:22 2025 GMT
Subject: CN=0bd00f23518a1fc6b014f6daa43f48ca872149a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:03:0d:fd:37:b1:48:b1:c8:73:d5:68:86:
fe:d3:10:1f:ab:ba:45:46:52:6b:ff:5f:e5:a6:97:
74:80:5b:b2:17:43:5d:a1:c7:e8:71:90:31:d9:c7:
0b:6f:3a:96:de:a5:55:c3:3e:7f:1b:32:4f:74:46:
db:0d:05:6a:fc:56:c1:47:85:4b:da:13:a0:94:37:
83:db:02:c5:c6:d3:29:23:db:2f:d5:08:5b:4e:b3:
61:91:be:11:c2:d8:e4:86:ab:29:e6:e0:14:f7:8a:
f6:38:a6:28:cb:1a:82:db:fe:e4:ad:e7:94:be:35:
0f:70:2b:86:ad:c6:e1:06:8b:64:37:84:91:e3:12:
1a:64:62:9e:d1:d9:6e:6e:6b:0a:1a:81:e9:0a:2b:
e9:aa:1e:84:98:af:01:a6:fa:c7:23:5a:2f:6c:b2:
ca:fa:86:b6:1f:b9:b4:1f:7d:bd:5f:ee:c0:a4:3b:
6b:dc:7d:ec:cd:6b:0b:30:31:1f:cb:63:62:ed:2e:
21:da:1a:19:28:5f:1d:4c:4e:fd:10:60:c8:07:63:
2e:82:0d:af:e4:cb:1d:cc:74:bf:25:ff:cf:ec:03:
b9:26:0c:c9:c8:30:63:92:a8:0a:fa:04:3c:4f:35:
b8:82:8e:6b:1d:9d:69:6d:33:90:f1:28:ac:2f:20:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D0:0F:23:51:8A:1F:C6:B0:14:F6:DA:A4:3F:48:CA:87:21:49:A3
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:28:fc:29:a3:d5:15:9e:66:d2:a6:50:01:9e:7b:99:e6:d4:
d4:bc:eb:f3:7e:b8:b6:51:ea:dc:8c:b0:f3:88:60:83:45:d3:
06:db:de:60:bb:67:79:28:c6:79:cd:e8:bd:0e:c4:c3:f5:39:
42:51:7f:af:0c:d1:53:c6:57:74:61:e6:3f:b6:38:99:c9:dd:
67:b4:5d:a2:2c:8c:94:62:c9:43:a0:40:1c:82:6f:e3:46:80:
e8:9a:92:74:cc:1f:f2:dd:e3:8a:93:73:5e:12:d1:63:3b:14:
87:71:e7:0c:53:58:a4:36:c8:7a:27:67:ae:26:b7:21:f9:bd:
c5:f2:e5:81:60:fc:9d:46:0d:24:c3:e9:9d:1e:b8:35:fe:92:
89:12:b1:aa:10:a7:95:58:16:ca:49:e6:ff:37:7d:b2:6a:ad:
85:d5:04:54:b2:41:60:44:9a:fd:b0:b7:6d:e0:c9:81:a9:3e:
90:af:88:9a:11:60:e3:30:05:50:fb:91:d7:e4:3f:38:72:66:
55:4c:37:4a:57:fe:72:06:da:99:83:ff:02:15:3b:73:e4:ff:
47:9b:22:d3:be:1d:6c:f9:08:57:65:ad:70:0a:ef:11:eb:3d:
2f:f3:60:bb:eb:d3:e3:3b:52:aa:9f:70:e2:5e:9c:b7:34:c8:
e9:85:13:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:00:36 2025 by rpki-client