Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json)
Hash identifier: yk+2yOjAELSPry6lwmXGGw8yd9nrGrqxw3bZcHXIp0o=
Subject key identifier: D0:B6:74:22:CB:43:4A:C1:AC:EB:A0:70:8D:A1:D1:1D:EB:61:F0:C4
Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270
Certificate serial: 01969DBE6050E581D13ABBD1D91FEC743103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
Manifest number: 0405
Signing time: Mon 05 May 2025 00:00:21 +0000
Manifest this update: Mon 05 May 2025 00:00:21 +0000
Manifest next update: Tue 06 May 2025 00:00:21 +0000
Files and hashes: 1: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: ctpnRorysnxeu2Bly0qX9tS5i23ni4h4xOyUWlpdJG4=)
2: n0AXPwRf-K9EtXP4CXMMlBMF6Bk.roa (hash: 7TR2iYrwp41DPDqkwdlRqLbA+06InGzZQMMITyfkpPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:60:50:e5:81:d1:3a:bb:d1:d9:1f:ec:74:31:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270
Validity
Not Before: May 5 00:00:21 2025 GMT
Not After : May 6 00:00:21 2025 GMT
Subject: CN=d0b67422cb434ac1aceba0708da1d11deb61f0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:45:e2:15:0e:7c:39:61:b0:6f:03:6a:5b:
3e:9c:b3:d4:f3:da:2f:5f:07:92:79:41:cc:b1:4c:
ea:f4:3b:5d:cd:60:37:e1:d3:1c:49:9e:ec:bf:10:
f4:98:8c:fb:83:02:d6:3d:a1:86:61:61:a8:db:28:
53:2b:3d:e9:ff:cb:15:59:0b:dc:b9:57:98:a1:72:
6f:a6:f8:b0:6d:c5:2b:95:9d:16:d9:e9:9d:e0:a6:
b7:10:89:af:30:04:6e:d8:21:1c:a4:12:95:63:82:
8f:c8:e9:f1:6e:80:aa:60:5d:83:1c:5f:6a:da:36:
84:c9:31:c1:e5:b9:cd:c2:12:9f:2e:60:4b:8d:6c:
c4:d1:d5:b1:51:e1:98:2a:ca:ab:61:8d:ef:38:80:
e7:41:fb:5d:c2:cb:67:a1:04:23:0c:2e:26:1b:8e:
b9:99:dc:ae:13:88:be:e9:16:e2:f4:8b:5f:66:82:
f0:8e:55:75:f1:c0:e6:da:fc:cc:c0:91:9a:0b:28:
44:50:e2:85:e1:d5:f8:ac:17:30:fe:9f:65:32:de:
15:ed:dd:61:01:7b:75:d7:b1:81:0e:56:20:a3:28:
79:ce:ea:52:56:a0:26:0c:8b:d7:bc:aa:9e:9f:ef:
c3:c7:26:4a:57:cb:58:89:04:0a:76:ec:f4:6d:01:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B6:74:22:CB:43:4A:C1:AC:EB:A0:70:8D:A1:D1:1D:EB:61:F0:C4
X509v3 Authority Key Identifier:
keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:12:13:2e:9f:f1:b9:4e:8b:a3:3c:67:1a:a3:bb:64:98:88:
f5:5b:97:e5:de:d8:67:2a:36:45:49:c4:e1:fb:5a:10:db:c6:
00:28:f4:8e:f0:ec:5f:65:d5:51:5d:93:7b:17:13:02:1c:ce:
1e:f3:53:3b:f8:97:3c:3a:14:01:f5:20:09:dd:96:a8:94:01:
b1:56:5e:03:64:1c:e8:e9:87:6a:53:a4:48:0d:bb:a5:fc:f2:
a2:e4:69:a2:3c:15:f3:31:af:e4:ac:51:23:de:b7:f6:50:c2:
b8:58:70:47:dc:91:b6:0e:38:33:71:49:0c:72:e3:4f:16:1d:
9a:f8:0f:a8:7b:cb:4e:6f:4f:f1:62:26:1e:67:be:a5:8f:ca:
fb:cc:17:5b:45:fc:21:2b:95:7a:7e:33:e1:06:a6:f8:b9:d0:
5a:e8:a9:c3:0b:9e:e1:9f:cc:5e:6e:0f:18:a0:0b:7d:c9:0d:
42:d1:96:69:93:c9:ed:fe:5d:be:7a:3d:4c:ac:1a:a1:f8:03:
cf:59:e7:70:b5:23:80:7c:5c:05:58:7e:1d:2b:13:20:de:ff:
0b:0c:f2:34:4e:28:d0:2d:b1:45:88:dc:d3:7a:6f:a9:b4:91:
0e:b0:31:ba:c9:29:35:83:ab:e0:b3:ae:78:2d:36:16:04:4d:
34:a0:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:29:35 2025 by rpki-client