Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
File: nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft (raw, json)
Hash identifier: YYZPLU07NFBrIorclXWoDKH3m075kj6ilOKZq8ASZAI=
Subject key identifier: 27:41:B2:9C:92:03:05:82:31:F6:81:96:AD:C0:81:6C:A0:C5:B1:16
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Certificate issuer: /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial: 0196C8A8F0FF148241AAA7DD9D583FF0905A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
Manifest number: 1430
Signing time: Tue 13 May 2025 08:00:36 +0000
Manifest this update: Tue 13 May 2025 08:00:36 +0000
Manifest next update: Wed 14 May 2025 08:00:36 +0000
Files and hashes: 1: D2puN1AdZ1JNvFyB30_yGN8jQe0.roa (hash: 2k+YekT8y6pWHIhQMm8Q342e5tW1eRByVypogLnX8G0=)
2: U_LNSvlDlkkr0YEu8loP_N3lVG8.roa (hash: sfDFxTDzQkmKbFdSJOmY1OQKmiVJ1hkpwWXjIhD3ogw=)
3: nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl (hash: yeHCGAxg3t4JH9y9Sacp6vp0+UfyPciNhSp82zVZaPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a8:f0:ff:14:82:41:aa:a7:dd:9d:58:3f:f0:90:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Validity
Not Before: May 13 08:00:36 2025 GMT
Not After : May 14 08:00:36 2025 GMT
Subject: CN=2741b29c9203058231f68196adc0816ca0c5b116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:82:66:1d:a7:e6:1d:83:9b:b6:21:17:7f:
ea:ec:26:64:c7:d6:bd:15:a7:b2:d0:8d:7e:eb:1a:
95:fb:ee:36:b9:13:b7:c2:84:c3:8c:fb:f9:d0:7f:
6c:c4:54:72:e1:30:0f:dc:ec:f4:e5:82:0d:9a:9e:
42:ff:c5:03:a4:ca:18:3c:46:d6:43:50:36:17:20:
36:19:73:93:24:cd:15:b0:a9:48:a6:45:21:60:07:
e2:d9:51:2e:59:aa:8a:72:0b:c2:03:3f:27:ce:bb:
55:85:b3:3c:c1:78:00:99:fe:97:54:21:1e:56:11:
35:81:79:43:90:db:74:45:bb:c9:ad:3b:d9:a9:cb:
90:89:b0:71:69:95:06:1e:f2:ce:73:0d:64:8e:1e:
2f:f2:71:17:f4:f0:29:d0:56:d4:ac:08:36:99:21:
d5:71:53:46:a2:94:f4:58:93:90:b7:3a:13:9c:95:
fd:35:9e:71:a1:8c:ee:25:9e:0d:72:84:0d:f6:24:
d4:9e:3c:a8:47:dd:fa:97:ac:f4:7e:d2:cd:04:6b:
16:22:6f:3e:3a:23:0b:46:4a:fe:79:78:94:db:b0:
41:8b:62:6b:cc:dd:b4:8f:5c:35:11:70:7b:00:11:
97:63:4c:2e:ea:69:df:5f:89:3c:a7:f3:86:eb:94:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:41:B2:9C:92:03:05:82:31:F6:81:96:AD:C0:81:6C:A0:C5:B1:16
X509v3 Authority Key Identifier:
keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:31:ce:b0:a3:e5:4e:e7:4c:a3:b1:19:ed:c2:2c:25:99:05:
0c:71:b6:06:51:ee:08:cc:9f:03:61:92:93:c7:57:b6:e5:c4:
4f:21:f5:23:b6:0c:a2:c4:87:70:1e:c6:40:58:2c:9c:6c:eb:
7b:a9:50:65:9d:0e:6e:4a:b7:f8:f1:41:b3:67:f3:8f:6d:06:
09:87:25:91:3b:7f:ad:43:e8:96:f2:1a:62:04:ad:80:cf:20:
5a:ae:74:75:58:fa:57:8c:cc:ff:a4:0d:68:2b:fe:bf:a3:07:
16:29:f3:76:10:a0:24:f1:fb:45:6f:5f:d7:35:df:10:cc:12:
ff:06:28:00:92:e7:88:dc:2d:4b:e5:86:76:8b:fa:3e:42:fc:
23:4b:10:e6:75:e4:c3:f5:16:fa:cd:5d:7e:a3:e2:d0:9f:26:
b3:2c:9b:4f:49:a8:83:4c:b5:83:93:22:cd:b4:89:0f:32:5d:
f7:25:ff:90:4e:48:79:3e:86:da:26:57:6c:0e:d3:5a:f6:1c:
b7:d3:4f:63:28:70:61:8e:06:8e:61:ae:0c:b2:34:77:66:4d:
bf:5e:03:85:0b:9a:ee:1e:0b:82:00:22:e5:38:98:0a:22:ea:
1e:32:2f:d6:8f:86:89:19:81:a5:4d:38:48:53:00:8d:59:42:
9d:a2:87:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:33:30 2025 by rpki-client