Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json)
Hash identifier: Di4LRaxM3GFOR1nfwdxcppUoA42bJsKGU9/mn412Ct4=
Subject key identifier: 8D:A8:D6:75:B5:B6:9F:D1:4D:8A:E8:7E:47:44:3C:CC:5C:65:68:C7
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial: 0196B6D9892E6A82EA9F76C0F946E95F6F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
Manifest number: 0AA5
Signing time: Fri 09 May 2025 21:00:31 +0000
Manifest this update: Fri 09 May 2025 21:00:31 +0000
Manifest next update: Sat 10 May 2025 21:00:31 +0000
Files and hashes: 1: G2aa7vj-d_CA2HuKW-IASCzWaSQ.roa (hash: pv32os3ZPwMAxeQUj3RBQ+FwWykK77hFOgeqqDGQkeE=)
2: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: WytHCHtoN3nIUs9u0+Z+Cu04u4+/07tCdx3ZUMwTsM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:89:2e:6a:82:ea:9f:76:c0:f9:46:e9:5f:6f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646213198899edfa8b42add473ada218748e104
Validity
Not Before: May 9 21:00:31 2025 GMT
Not After : May 10 21:00:31 2025 GMT
Subject: CN=8da8d675b5b69fd14d8ae87e47443ccc5c6568c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:c2:1c:43:f8:8b:40:72:36:c1:39:2a:d7:
cd:9c:2e:93:d3:0f:e8:83:66:8a:36:40:cd:a9:86:
c7:9d:8e:bf:ba:b6:9e:de:35:4a:60:de:d2:39:3f:
03:c7:aa:b5:0e:86:4b:b2:5d:fc:06:16:94:fb:31:
02:11:69:a3:f5:3f:b6:51:e1:9e:5a:08:a6:43:b6:
eb:09:64:6b:98:be:41:33:0a:f7:9d:ce:22:28:a7:
1c:e7:3a:03:67:58:1e:53:22:1f:36:7d:f5:2f:8c:
41:72:05:0b:eb:9a:aa:cf:b6:8a:55:a9:65:25:70:
a2:ea:ba:77:63:b2:26:18:d6:e3:9e:aa:b5:68:c5:
f8:87:4a:0f:44:ee:ea:e7:78:bc:8e:ea:75:2b:3f:
98:7e:4b:19:b8:b1:ac:8d:6d:08:2d:e6:e0:0a:b7:
dc:cf:47:ac:d8:b9:28:6b:5a:99:9d:3c:e1:46:7f:
fb:67:2f:78:fb:f4:fa:b0:98:5c:3a:e4:4b:10:13:
cf:47:58:a3:1b:68:c4:90:50:7e:ad:6a:ec:7d:73:
21:ab:99:92:db:50:c2:af:0b:4d:a6:51:fd:b2:a7:
87:bd:f7:32:42:ee:46:12:1a:e8:55:24:9a:82:84:
79:a8:e4:e9:77:7d:91:23:61:98:2c:64:4b:e5:76:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A8:D6:75:B5:B6:9F:D1:4D:8A:E8:7E:47:44:3C:CC:5C:65:68:C7
X509v3 Authority Key Identifier:
keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a8:3e:c3:a9:ba:fa:e2:9a:71:47:49:80:4f:4c:59:ac:e9:
19:76:18:11:b3:9b:29:f7:0b:1c:7b:f5:08:3c:2b:f2:95:9d:
99:10:e4:00:2e:b5:a9:01:84:9f:b0:d4:9b:9b:f8:c2:cb:bb:
f0:cf:1d:8b:1b:a9:59:13:33:ce:b1:35:95:44:bb:2a:21:57:
a0:09:ca:74:37:eb:d5:fd:f8:b3:5c:55:2b:c7:6d:2f:15:ac:
ea:94:67:58:2a:0b:d2:6b:6d:c8:5e:84:93:c0:89:56:f7:88:
bc:0e:42:7f:9a:23:81:73:ad:2d:f2:37:f1:77:7f:4c:e1:eb:
e3:82:c5:85:72:b5:5e:c2:27:27:25:b2:7d:98:01:30:d5:d1:
45:7d:d5:00:8e:cd:89:ca:ac:f5:9c:0d:c6:e8:99:8c:c1:ab:
db:ae:15:23:35:db:0d:ed:65:c1:09:2c:b3:27:4f:43:4c:d3:
27:8a:d9:43:6c:cb:54:ec:fd:22:e7:49:10:84:a9:2d:3e:71:
30:71:e0:00:96:85:48:26:40:dc:88:d8:93:e3:e5:ab:65:bb:
9e:5f:be:36:19:9b:cf:00:b3:27:f6:59:2f:ac:29:72:66:f6:
c5:5d:aa:d1:90:9f:68:7c:5f:10:1e:b0:1d:89:51:ba:24:df:
16:9b:89:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:31:58 2025 by rpki-client