Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: nekTt2qfYtNI+Lq66/CGuUUv6nJmnV3qYzt8VTTGHwo=
Subject key identifier: 6C:95:E0:30:D4:99:49:1F:20:ED:04:DF:A3:C0:FC:37:89:4F:E8:7A
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 0196B823A2674C5AD87200E26E7C4E6B7489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 03:01:05 +0000
Manifest this update: Sat 10 May 2025 03:01:05 +0000
Manifest next update: Sun 11 May 2025 03:01:05 +0000
Files and hashes: 1: BhSQf1yX1uLwgzRbSbyaxC2Eyyk.roa (hash: QYypOcFPdcc9ArENcLdBU9X1TsVQ+7g/yqAYCtsdaqk=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: JU3XIJ+ZMZBqSwfMuGln/PQslxBATl+wbvL/ZhAsD1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:a2:67:4c:5a:d8:72:00:e2:6e:7c:4e:6b:74:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: May 10 03:01:05 2025 GMT
Not After : May 11 03:01:05 2025 GMT
Subject: CN=6c95e030d499491f20ed04dfa3c0fc37894fe87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:75:16:8a:66:79:1c:07:59:8c:9d:07:47:6f:
96:c9:cc:0c:a2:f5:22:58:ad:bf:2c:b6:86:04:20:
0e:2d:77:5d:8a:18:32:63:60:db:52:84:42:a4:28:
b4:03:1e:5b:66:14:2f:af:eb:ab:f3:94:b8:c0:dd:
e4:93:fe:29:70:92:c1:2f:af:02:2d:6a:25:df:cc:
0e:8e:0a:7e:0b:ba:c2:63:26:77:49:03:38:6b:d5:
a8:f1:51:35:f1:81:ea:0b:b0:47:16:ac:f8:20:ce:
1c:e3:82:3d:2b:87:5f:34:5b:22:89:3f:a2:1b:0a:
fb:ef:24:06:5d:19:ac:10:3e:13:58:b8:e5:19:b3:
1f:d3:da:2c:1e:94:78:29:0a:4c:12:9c:04:aa:7b:
71:ed:af:60:dc:df:23:13:b6:95:fb:92:50:94:37:
49:3d:ff:6c:30:eb:9c:12:47:3e:b7:0f:f2:20:f0:
b0:6b:5f:56:e2:5b:e6:4b:c5:d9:a1:ea:5e:5e:69:
d5:90:94:c1:b6:d6:77:f4:ec:41:69:e1:72:e2:51:
38:d3:38:a5:ee:63:b0:9a:bb:62:a3:10:7a:44:78:
34:9b:09:a0:70:4f:33:e6:a1:b5:2f:54:9e:36:4c:
55:2d:bc:ee:63:dd:9b:27:4e:98:c1:ba:22:35:e5:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:95:E0:30:D4:99:49:1F:20:ED:04:DF:A3:C0:FC:37:89:4F:E8:7A
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0d:b9:c5:95:dd:12:ac:cd:1b:12:a4:d3:2e:a3:d3:78:4b:
4d:f1:f6:ae:ab:9d:3e:86:43:66:e5:94:d7:e9:15:ae:58:93:
34:93:d7:1c:e2:f5:ee:c2:25:87:8d:6a:f7:84:95:79:f8:85:
c8:32:96:e9:45:85:c8:fb:93:a7:2a:91:72:3a:fc:62:2f:df:
51:89:cb:c9:1e:11:6c:cb:54:0f:c4:f0:a1:d8:ae:f9:11:d4:
45:2c:76:2e:3b:07:af:8e:f5:29:f4:08:1a:9a:22:88:c4:2c:
42:7a:42:35:c1:c7:f0:fc:c1:1c:73:98:1c:9e:8b:d5:2e:36:
01:52:a2:2f:6e:82:d4:64:d5:47:04:b7:93:44:9f:cb:7f:83:
d3:70:31:80:4e:d3:82:75:19:47:8e:9e:10:0a:22:58:96:ba:
ac:3a:3c:2c:f0:a0:6a:8c:a5:3c:41:20:16:17:25:25:96:32:
0c:f8:25:21:15:8b:5b:ae:26:79:7a:b1:ae:90:81:c4:d3:b2:
11:db:b2:ab:c8:b4:b5:7d:85:1f:9b:80:2e:97:e3:24:0c:bb:
bc:4c:5a:41:84:fc:74:52:40:03:85:48:9f:e8:4e:c4:1c:72:
2b:c4:e7:17:6a:c9:e1:57:fc:e2:4f:96:77:e2:a6:0a:95:5b:
bd:3d:e3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:01:12 2025 by rpki-client