Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: no2/QoCs9rmEQqqSvkkjyKI3z72QA1vBSvelbcvEhTA=
Subject key identifier: 40:26:47:D3:3E:B4:76:2A:2D:3B:BD:5E:86:BE:07:7C:97:2E:5A:7F
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 0196C201EFDF08A4552B1103B0FAF7D93BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 04F3
Signing time: Mon 12 May 2025 01:00:28 +0000
Manifest this update: Mon 12 May 2025 01:00:28 +0000
Manifest next update: Tue 13 May 2025 01:00:28 +0000
Files and hashes: 1: 1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa (hash: eDwV2kux0bA6vYCRB0ZxUOPv76wEVLU7G2rZyoTStqs=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: WYiC92QiTy9Uy9beUnbDpepUSa3UODN0oMooZn5Lp34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:01:ef:df:08:a4:55:2b:11:03:b0:fa:f7:d9:3b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: May 12 01:00:28 2025 GMT
Not After : May 13 01:00:28 2025 GMT
Subject: CN=402647d33eb4762a2d3bbd5e86be077c972e5a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:4a:cb:7a:3f:6f:fc:b4:44:47:49:62:ff:
bc:e8:af:67:ef:51:67:a5:68:52:a9:c6:29:c8:72:
44:6e:fd:61:35:81:3c:9b:65:60:0d:09:84:da:9c:
db:1a:70:71:51:32:eb:41:a7:e9:0d:f0:99:2a:8b:
f2:27:52:fd:fb:6f:8d:e5:8f:fa:f8:a1:cf:af:28:
c7:c9:5e:3e:a4:99:c6:e4:1d:70:7d:ca:2f:b1:ac:
8b:ed:11:b8:0d:3d:95:45:96:56:11:83:6f:9f:7a:
78:7a:dd:5d:99:18:e2:1e:cd:a1:4c:46:00:db:59:
0a:fd:15:aa:83:a0:ea:5c:97:34:36:77:2d:95:e1:
0d:8c:5b:8e:02:0b:ca:4b:c6:24:3a:35:c1:53:e7:
79:f0:4d:19:9c:7f:66:e5:f2:47:63:1d:14:96:40:
91:07:d9:a8:69:b7:7b:46:6b:08:67:9a:23:78:33:
ca:30:2b:46:c9:6c:fa:d7:dc:47:da:9d:66:76:ab:
dc:10:ad:8a:44:0a:30:0b:4d:81:bb:f4:d0:03:ed:
f6:60:9f:7a:95:36:54:8f:90:0f:c5:d5:e2:d2:e7:
4f:ba:1d:83:12:e0:2b:65:bd:37:63:c0:b5:53:07:
4f:a3:7b:10:ae:5f:24:53:8a:0e:3b:0c:87:ea:89:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:26:47:D3:3E:B4:76:2A:2D:3B:BD:5E:86:BE:07:7C:97:2E:5A:7F
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bb:ec:72:94:07:9a:58:d0:66:6c:d4:6e:2d:29:07:36:24:
19:56:eb:12:60:e1:12:49:c9:d3:82:6d:f9:2e:c9:35:a1:f0:
7d:02:d1:f4:6e:92:e3:bc:b0:b2:92:59:2e:be:b7:de:32:9e:
50:49:52:a1:2f:79:42:64:27:0c:b9:af:75:ab:fc:95:c6:04:
eb:5c:87:a4:d2:4c:96:31:9f:34:2e:1d:5d:9a:c3:54:52:10:
d9:d3:4d:40:b2:30:39:83:86:89:ef:f4:a1:33:6b:0c:b5:dc:
c5:0d:75:ff:cc:f6:db:a0:36:87:91:f8:57:89:e4:5c:6a:ce:
a8:ef:cf:7d:9f:3a:38:26:d3:5e:d0:22:7f:7e:b0:13:f3:02:
00:87:02:0b:29:f9:07:0d:41:0c:fa:c0:29:57:72:a8:41:ea:
82:49:b8:77:c9:72:fc:c2:2c:a7:95:a8:6a:c5:04:02:34:c8:
aa:08:b7:f5:81:f7:da:71:9f:68:40:80:35:7a:9a:8c:2e:fb:
f2:17:f7:a0:aa:6a:ad:58:e5:68:58:43:73:54:b2:3c:84:3d:
57:b7:9f:91:f6:39:a0:c0:2b:28:82:08:59:c3:23:d5:91:97:
93:94:b9:87:6a:70:55:36:9f:7c:cd:5a:34:82:05:09:1f:1d:
9f:f6:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:41:26 2025 by rpki-client