Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
File: nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft (raw, json)
Hash identifier: GwHsI6tpWGOS2QbPjsKZe2g4iqNiPG0o0D9ZK5/29zM=
Subject key identifier: 8C:0F:F4:69:10:53:25:55:7A:29:7F:5F:B9:FD:3A:9B:E7:86:5B:F2
Authority key identifier: 9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
Certificate issuer: /CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Certificate serial: 0196D88A58819F08AF803255974D27B1EB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
Manifest number: 14D2
Signing time: Fri 16 May 2025 10:01:07 +0000
Manifest this update: Fri 16 May 2025 10:01:07 +0000
Manifest next update: Sat 17 May 2025 10:01:07 +0000
Files and hashes: 1: nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl (hash: twTmugzb1ffVfjxJTVcp5RPq8sMVvfxM2m0FpGoOT4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:8a:58:81:9f:08:af:80:32:55:97:4d:27:b1:eb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Validity
Not Before: May 16 10:01:07 2025 GMT
Not After : May 17 10:01:07 2025 GMT
Subject: CN=8c0ff469105325557a297f5fb9fd3a9be7865bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:ab:c9:59:69:18:b0:5d:4f:68:d8:7c:a7:
8a:9f:dc:2d:52:03:6f:b4:db:68:72:68:26:e0:38:
ff:46:28:b8:d0:aa:98:bc:3c:cc:83:08:8e:d6:4b:
d4:d7:b2:d0:3c:15:85:1c:1f:1f:b1:16:bb:fa:9c:
21:db:78:9f:50:ff:64:cb:67:77:f0:a0:1e:e5:0d:
d4:a7:68:56:a4:56:b8:31:d2:ec:e9:af:46:09:54:
9d:64:5d:c2:33:df:a4:9d:84:a1:a3:4d:2f:f3:6a:
03:93:dd:6d:63:1d:bb:78:84:1c:88:53:f9:64:ea:
82:a8:30:b0:74:62:e7:0c:9d:69:8a:5e:89:8c:e2:
f3:c3:0f:52:e5:58:09:5e:a8:9a:ce:bd:01:d5:8d:
4d:5a:01:32:a1:d3:81:1e:d4:23:7c:66:34:5e:ff:
4f:86:5c:df:0d:83:11:b9:da:44:6a:81:7c:d6:9c:
e2:ea:6a:2b:75:be:0e:a6:36:33:15:7a:32:b6:e4:
f2:62:7e:87:b3:2e:ff:ef:cd:c4:49:c5:6e:b2:23:
c9:98:9e:65:eb:9c:22:68:9c:ae:8f:cb:b8:0c:67:
12:15:7c:00:68:51:49:f3:05:fe:75:ab:73:5c:81:
9a:bb:b0:8c:d3:aa:d7:e3:f4:cf:7e:a2:0e:b7:3e:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0F:F4:69:10:53:25:55:7A:29:7F:5F:B9:FD:3A:9B:E7:86:5B:F2
X509v3 Authority Key Identifier:
keyid:9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:09:3c:77:08:39:3a:d1:81:b7:3e:90:3a:64:d2:80:a6:0a:
56:7a:ae:30:08:e8:4b:80:a7:c7:52:c4:f5:f2:42:98:bc:2d:
23:06:98:9b:96:91:9b:95:bf:7e:9f:4b:ae:b4:a4:c1:17:42:
b8:e7:04:83:57:b2:2d:cb:02:ed:23:91:88:da:aa:8d:f9:04:
b0:07:86:f9:6b:70:65:18:66:55:15:57:ed:de:6d:74:b0:ad:
c0:7a:0c:fb:5c:ef:9b:d1:a9:16:67:7f:14:2a:b0:36:88:fa:
05:44:7d:fd:db:b9:93:d7:27:df:cf:61:39:b2:7d:6e:17:1d:
c5:88:00:5a:b6:ed:2d:53:f1:c9:f9:30:1d:c1:4d:c6:0b:ac:
60:bb:b6:cd:51:6c:74:d1:17:92:d4:27:b5:8a:5a:5e:c2:07:
55:36:a1:18:47:3d:3c:47:a2:de:79:0b:c4:04:37:eb:93:ac:
41:a4:96:e9:9d:a1:f4:e4:1d:9f:18:89:98:09:5d:86:c7:e7:
6c:7e:ba:ac:d2:27:dd:ff:c2:ef:de:41:52:2c:08:cd:d9:e1:
7c:5c:41:d7:ee:36:de:3e:17:a6:9b:9b:ae:c5:2f:77:bb:c8:
d0:0b:82:94:ce:e1:2c:3a:1b:d2:f4:fc:b0:bd:74:06:6a:1d:
02:99:df:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 11:51:32 2025 by rpki-client