Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: EszMbEl0LNU7RjEgMKE5unZm/E5BCyj0Swf/D0IthIw=
Subject key identifier: 5F:86:0F:D1:55:52:F9:2B:7A:FA:1D:9F:31:55:35:43:6B:03:0F:57
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 01969E2C82C90BC8FE967B2F57D82B547F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 08
Signing time: Mon 05 May 2025 02:00:39 +0000
Manifest this update: Mon 05 May 2025 02:00:39 +0000
Manifest next update: Tue 06 May 2025 02:00:39 +0000
Files and hashes: 1: VNpQWKbDASJ5_N6WOt8nNsE0C5Q.roa (hash: KBAzp38l8QV3VlfIrkv3N+Ntu4Rpg5TWLWtrnsaZDEc=)
2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: urglvtVx3ZJfC1es2lZKA+D+HBDtMHybmqig3kyeYsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:82:c9:0b:c8:fe:96:7b:2f:57:d8:2b:54:7f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: May 5 02:00:39 2025 GMT
Not After : May 6 02:00:39 2025 GMT
Subject: CN=5f860fd15552f92b7afa1d9f315535436b030f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:af:36:58:b2:91:72:45:e1:e4:63:49:b9:
26:2c:c1:9e:93:a0:e5:cb:98:b3:28:6a:3b:03:9d:
d0:c2:ab:3b:a6:46:19:d6:8c:69:53:b9:32:fc:59:
32:2c:aa:fa:a1:b6:69:da:b8:ba:8a:44:e4:c9:b7:
9c:64:d3:98:ee:b2:b0:65:be:a0:29:f9:d4:f8:fb:
3c:1b:a3:51:db:ba:94:e9:cf:11:08:3a:3d:e3:fa:
79:ee:7a:bb:21:8b:81:ac:ca:0a:d0:fc:ce:e9:cc:
08:26:24:0b:d6:cb:7a:3f:81:96:ca:88:bc:ce:82:
bb:47:92:b5:e0:b5:1c:e4:ec:7c:d7:61:99:d4:73:
1d:49:2a:b8:fe:90:da:dd:5e:a7:57:6e:35:12:02:
99:14:f4:32:8f:d6:f0:7d:6a:f3:c0:69:01:6c:60:
ba:5a:13:b5:e2:80:da:ba:d7:94:ac:a3:48:3b:bc:
8b:84:d1:4e:0e:60:6c:13:7e:01:95:4e:3d:03:59:
2f:5c:a6:7c:71:e4:aa:c2:ee:cc:88:2c:32:4e:22:
7f:5d:81:04:60:6e:83:f4:df:d9:cd:52:93:94:40:
41:cf:c5:e2:be:19:92:5f:5b:7a:4e:89:58:e1:72:
06:52:29:ca:b6:18:40:2c:6b:ad:dd:62:42:1f:6c:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:86:0F:D1:55:52:F9:2B:7A:FA:1D:9F:31:55:35:43:6B:03:0F:57
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:66:82:e9:6b:9c:51:4f:f8:01:42:4f:51:a4:0f:50:d1:91:
a9:10:bf:a8:32:42:c8:e4:71:4a:7c:35:fc:2e:7f:bc:8e:4a:
a6:37:f3:12:6a:8a:75:41:40:67:75:27:0d:f4:5d:af:7b:fa:
40:4b:91:60:67:fe:33:d4:e7:b3:ff:8d:bb:5f:41:c4:09:23:
b5:3b:e7:30:cd:a2:83:53:76:38:18:f7:dc:37:9c:38:91:88:
7e:09:02:2b:d2:3a:1f:20:64:e2:83:53:da:82:f8:d0:d1:f7:
a2:91:34:3e:3b:20:a4:c0:60:3f:3c:07:22:50:c0:02:7f:2a:
e6:a3:b2:49:5e:94:bf:3e:53:cf:e3:9b:b0:63:8d:50:57:fe:
7c:91:52:3b:27:6c:14:a4:2c:99:45:d5:0b:53:a7:91:88:b9:
f0:d8:b8:07:7a:aa:9e:b2:7c:b7:08:3b:90:0c:b1:2b:3d:30:
e2:c3:a8:63:16:4e:95:a9:56:94:3b:e0:be:35:72:06:00:b3:
fe:e6:a5:9e:1a:c3:88:a1:8b:3a:13:60:89:d7:a4:b9:68:01:
b2:85:ad:40:df:61:87:e8:a8:ef:8a:15:dc:0f:fb:31:09:18:
53:04:96:9a:96:c0:0b:14:90:88:b1:22:a8:b1:8f:8a:fb:44:
97:dc:2f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:15:31 2025 by rpki-client