Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: qAdsux0fK33Opteo0/l3e475tDOO317rZakXKt59hUc=
Subject key identifier: 49:C0:7D:90:C8:44:42:75:2C:32:D8:2D:68:FA:BB:68:1B:EE:FF:76
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 0196C64C5AFEFB4E7875149DE98F7658BCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 1345
Signing time: Mon 12 May 2025 21:00:14 +0000
Manifest this update: Mon 12 May 2025 21:00:14 +0000
Manifest next update: Tue 13 May 2025 21:00:14 +0000
Files and hashes: 1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: cs6sbITBX4KDhgMI+j4alaRtSHrZQ85w1/s2iMB+kp8=)
2: dYJMd1xHra4qPvxWQ63pWL2NPkE.roa (hash: lMxX8BkZ02l91WMGdaFajJSu4NcGeGtSFmauEg/qSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:5a:fe:fb:4e:78:75:14:9d:e9:8f:76:58:bc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: May 12 21:00:14 2025 GMT
Not After : May 13 21:00:14 2025 GMT
Subject: CN=49c07d90c84442752c32d82d68fabb681beeff76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ee:25:9a:59:e7:24:de:91:07:dc:7b:6e:ba:
d0:6b:82:c1:76:cb:e3:fb:20:c3:40:f2:a6:2d:c8:
78:6e:30:40:04:dc:4c:c8:0f:db:1d:f9:c5:bf:8d:
ea:bf:0d:e5:63:32:31:c8:76:b9:1c:f9:f3:e7:98:
8a:da:99:5c:8c:be:bb:fe:7a:b4:d0:8b:d0:d7:94:
c7:9d:3b:c9:be:ca:44:46:1a:80:79:9c:b4:15:60:
49:f0:a6:47:50:bc:62:3f:94:55:f2:bf:25:97:cd:
76:41:12:89:03:d6:e5:2c:ba:39:8c:31:0b:8b:3d:
f7:88:9f:84:ea:75:16:61:84:aa:18:f8:33:b4:40:
22:6d:5e:dd:b3:17:31:00:ea:54:e7:45:0e:90:45:
92:04:f0:73:db:bd:ef:75:08:34:60:a6:51:0e:d6:
f8:04:44:a3:25:bc:ee:15:43:18:80:e7:69:85:55:
26:1c:e8:9f:03:c4:c4:0f:89:8e:3d:8a:5c:15:14:
a8:ab:96:6b:c3:23:f2:24:96:9f:bf:96:e3:f0:86:
e9:8d:cf:6e:a8:df:f3:b9:63:19:20:e2:d3:3f:db:
81:af:72:bc:1e:5d:e7:3d:98:62:76:19:38:b4:e9:
50:fa:d3:1a:b1:44:b7:f2:8b:d2:20:84:39:0a:61:
fe:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:7D:90:C8:44:42:75:2C:32:D8:2D:68:FA:BB:68:1B:EE:FF:76
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:59:d4:04:b7:df:70:f9:05:7a:09:b2:84:00:f7:56:74:0a:
63:fb:ba:1f:cd:11:2b:0e:05:38:65:9e:32:2e:7e:32:91:22:
93:9d:b3:78:54:2e:64:4b:95:9f:9b:d8:72:d1:0d:a4:dc:83:
ea:57:b3:57:ed:c8:a3:0f:3e:cd:1b:05:b5:99:11:fc:5f:93:
05:71:ad:9b:2b:f5:e9:d1:47:50:f7:d0:fc:6a:09:8c:33:66:
6b:98:0a:fa:64:05:4f:4b:8b:4f:74:84:6b:82:f1:cc:ee:1c:
95:43:8e:3d:e9:64:8e:77:7b:31:c8:68:96:9d:26:be:cb:1f:
c8:12:89:ef:f6:33:3e:cb:5e:e0:f8:ac:eb:2d:55:93:9a:f2:
0e:fb:b3:10:33:c1:5f:e7:16:77:51:8f:5c:a6:1a:2d:0e:99:
72:bc:77:12:96:0d:2b:90:b5:22:40:26:8c:db:88:b3:23:20:
f5:43:0e:bd:37:d9:73:fd:a0:5d:5e:ea:b6:b1:ec:94:f3:7c:
32:0e:3a:17:7e:b4:ef:b7:0a:e2:b4:40:84:e5:50:4a:05:85:
94:cd:48:b9:87:47:4c:93:b8:ba:40:51:77:07:26:e3:f8:b2:
94:aa:3c:d3:c4:55:a8:6e:fb:dc:bc:5b:dd:c7:cd:14:87:f9:
ac:ba:84:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:05:03 2025 by rpki-client