Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
File: b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft (raw, json)
Hash identifier: k64a+HtOIv26499VhDnaP9hE5S2+AEKWZA2TTWWzK6k=
Subject key identifier: E1:D0:14:52:85:B8:67:B7:15:EE:17:F9:EF:D7:27:EE:FD:41:FC:24
Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
Certificate issuer: /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Certificate serial: 0196B8C7BDFDF7B2640508991E605532E683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
Manifest number: 10C1
Signing time: Sat 10 May 2025 06:00:20 +0000
Manifest this update: Sat 10 May 2025 06:00:20 +0000
Manifest next update: Sun 11 May 2025 06:00:20 +0000
Files and hashes: 1: K1yirsr-iaS7nREQciotspB8RVo.roa (hash: hy+JqcAOeQKytaM3EAomiIfLy4MHrS39bRFVCLNpTzc=)
2: b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl (hash: KEPv8gDsfbITbft+Qvq0dg/wDT1LDMBg2JrOwqjcDRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:bd:fd:f7:b2:64:05:08:99:1e:60:55:32:e6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Validity
Not Before: May 10 06:00:20 2025 GMT
Not After : May 11 06:00:20 2025 GMT
Subject: CN=e1d0145285b867b715ee17f9efd727eefd41fc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:47:1e:40:4d:b5:4e:75:d2:65:d2:cb:1a:
56:54:87:34:25:73:21:7d:71:e6:5b:0f:78:25:6b:
cb:f3:0b:3a:0b:6b:93:6b:05:97:05:b8:02:ac:16:
42:4c:ba:5d:37:fa:60:06:a7:54:0d:61:11:56:d8:
2f:11:98:88:9b:88:cd:ef:56:e0:92:e3:cd:21:3e:
8d:08:b2:3e:91:3a:da:b6:34:6c:9d:f2:9d:c3:64:
b6:55:6b:a0:3c:28:0b:8c:3a:59:f9:72:c7:cd:03:
52:05:3e:fd:69:c7:01:f4:f8:a2:65:bd:f5:d9:8e:
09:33:d6:a8:c7:39:cd:aa:79:56:28:27:32:cf:cf:
2d:06:28:04:e5:ae:1e:a7:5f:18:cd:e5:9c:31:72:
11:96:42:7e:18:ea:42:08:60:2d:6d:91:a8:8e:72:
25:b1:fb:75:ef:d8:34:f9:d7:ce:ca:91:9e:78:5e:
5e:31:fb:b5:cc:ee:ab:59:86:c8:a5:9d:0c:41:fc:
13:88:65:7f:96:1d:ad:a7:bb:5c:b9:8f:59:17:9b:
d3:b3:65:a1:ca:4e:8c:2a:8b:b4:a7:c3:d9:3e:07:
bf:14:ad:44:e9:73:5c:10:9d:6d:e3:80:fa:8c:0a:
b9:c6:9a:35:32:c3:59:3f:fe:53:8c:74:50:96:f7:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D0:14:52:85:B8:67:B7:15:EE:17:F9:EF:D7:27:EE:FD:41:FC:24
X509v3 Authority Key Identifier:
keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d8:9f:d6:1b:a0:04:c4:45:c0:2c:f1:86:0e:c2:b1:34:fa:
38:bc:ad:b5:a9:cf:1c:37:ee:d5:55:96:1a:ac:16:6f:9d:da:
42:02:79:c1:a3:79:0d:5b:bd:63:0a:dd:8d:c9:bd:d6:3f:a2:
a8:4a:0b:a6:68:ee:b4:11:58:a3:0d:1d:2d:30:34:dd:b3:c8:
ce:41:2f:2b:77:8d:7e:20:0d:a4:e6:c0:f8:dc:19:46:c8:d6:
1d:2b:48:39:26:53:e8:7e:b7:73:ed:e1:e9:ff:52:72:c4:1a:
50:bc:ac:9d:21:66:33:12:6a:17:a7:f5:a2:fd:e1:9d:46:c2:
8a:3b:15:be:1a:70:d5:cd:92:fc:0b:ae:28:fb:11:c4:e9:af:
bf:41:c8:d9:06:86:3f:4c:5e:05:63:b3:28:f7:36:e9:61:fb:
42:a9:cf:af:8b:05:e8:e1:87:cf:97:3e:aa:cd:02:01:ee:d7:
06:7d:e4:62:f7:18:5f:17:0a:10:1e:2c:85:09:f0:ee:3b:aa:
3b:7c:7d:3e:7a:a9:83:b3:20:f1:f7:8e:5a:76:b1:b7:45:48:
e6:ac:84:a7:23:c1:55:ff:d3:50:06:ce:6c:28:13:57:b4:ae:
ae:44:9c:f1:b3:47:82:70:20:ef:cb:85:81:bb:a4:49:6e:99:
62:1b:e1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:58:26 2025 by rpki-client