Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
File: nB7k05z6obOseZwX94grjOTigSA.mft (raw, json)
Hash identifier: rwAsdv+cqGRO4h9ANBwxlhcCCbJ2nWL4kV8LarQSivg=
Subject key identifier: 4E:DD:6C:97:0D:B8:09:23:08:20:83:6C:A5:8F:9B:4F:55:4C:CE:3C
Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Certificate serial: 0196C3B9F2D648585C34186961B4DFD7123D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
Manifest number: 07EA
Signing time: Mon 12 May 2025 09:01:05 +0000
Manifest this update: Mon 12 May 2025 09:01:05 +0000
Manifest next update: Tue 13 May 2025 09:01:05 +0000
Files and hashes: 1: egM_lo5hkg5KA7_uP-5h7pmD4BM.roa (hash: LWEk9cOjEXdGtew0n3bgwHhe3Zn8McfotK81AHI+3M0=)
2: nB7k05z6obOseZwX94grjOTigSA.crl (hash: Hlm5HqElNZh6tT5AR2uP/mRMkn9JXi5mJNHBwJEDgMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:f2:d6:48:58:5c:34:18:69:61:b4:df:d7:12:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Validity
Not Before: May 12 09:01:05 2025 GMT
Not After : May 13 09:01:05 2025 GMT
Subject: CN=4edd6c970db809230820836ca58f9b4f554cce3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:0b:ac:b4:68:99:58:56:02:14:32:5d:48:
c0:e1:70:b3:e1:79:aa:55:69:5b:5c:5f:b3:af:72:
a5:a5:92:c6:99:39:b2:84:4d:0c:d9:e9:8e:85:6d:
ec:93:4f:02:32:6d:dd:29:4e:35:8d:22:65:53:c0:
a0:40:b7:39:d9:56:c4:07:64:c8:e2:b8:55:fc:dd:
fa:5a:65:83:c2:2d:0d:36:6a:80:cf:3a:10:22:dc:
f2:ca:18:76:30:30:3e:27:0c:e2:b7:bb:e5:ae:80:
26:6f:3e:e9:f4:72:b3:bc:6f:7c:da:50:2f:86:0a:
05:48:fb:c6:f7:c4:c6:34:8e:1d:07:14:2b:70:43:
29:25:60:76:71:84:ae:5d:0a:7a:67:0a:37:1b:db:
02:18:5a:35:8d:33:b2:5c:c1:e2:4b:7c:3c:55:33:
ce:87:86:3f:34:f2:a6:d3:e1:c7:65:31:8b:62:df:
9f:f2:2c:43:0c:d0:be:55:30:8a:a5:ce:79:a4:8f:
9d:54:a9:ca:08:f7:d4:7d:ed:4d:31:ee:8f:ff:5a:
4b:34:83:9c:18:aa:60:16:68:45:71:55:28:88:01:
fa:93:27:44:11:cc:fc:b7:3f:e0:ee:b5:7f:e9:59:
69:a6:d9:98:dd:e6:23:96:bc:eb:08:53:2d:75:f6:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DD:6C:97:0D:B8:09:23:08:20:83:6C:A5:8F:9B:4F:55:4C:CE:3C
X509v3 Authority Key Identifier:
keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cf:d3:2c:8e:e3:ad:58:3d:37:a6:6e:6d:15:09:b3:c6:26:
52:19:24:d7:bb:69:6d:b5:90:09:1d:06:d5:af:02:7a:6f:6c:
99:74:41:b1:ce:bd:60:34:f4:0a:ed:83:7d:df:d6:70:1d:fd:
68:d4:65:79:b9:4f:19:f6:89:4a:cc:4c:43:ac:23:c8:f0:e2:
46:39:bb:9b:ea:7a:50:73:d7:63:5b:a6:dc:7e:c4:48:a9:c7:
85:ca:e2:13:5a:fc:2c:18:2d:db:35:59:1d:aa:a0:ab:49:6e:
69:43:23:e6:28:33:92:18:32:ab:79:32:67:3a:8f:c5:87:8f:
68:8f:aa:8b:81:ef:57:64:f7:55:9f:b1:1e:1c:48:f6:f9:c2:
54:a8:a2:04:42:ea:4d:f4:5e:5f:8b:10:0a:0a:5d:73:0f:d7:
34:b6:ac:44:0f:6b:6c:75:b6:76:db:e3:6e:a6:38:0f:1a:9e:
a5:83:aa:7e:b0:f4:ce:4a:8f:65:5b:11:ad:7c:68:09:c0:ca:
88:5e:a6:86:4b:c8:8d:0a:f9:be:72:59:39:fa:19:9a:ee:a4:
ea:32:0b:22:be:1a:4f:d8:5d:45:69:d7:f0:9c:82:50:5b:28:
2b:25:93:5f:a0:fa:fb:ed:b9:fd:43:65:8d:1e:04:9e:ec:71:
c9:cf:20:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:31:36 2025 by rpki-client