Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: NsX+U3B05iSssRDOkD0RzhODFys/vX8hHR+hd3vmrYM=
Subject key identifier: 2F:15:CA:D2:C4:F4:FB:AB:42:79:82:CA:C1:32:D3:05:34:2C:80:A8
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 0196BAED82135EB365A7C6397F3FA6C0256D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 0128
Signing time: Sat 10 May 2025 16:00:49 +0000
Manifest this update: Sat 10 May 2025 16:00:49 +0000
Manifest next update: Sun 11 May 2025 16:00:49 +0000
Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=)
2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: /Wxi6vJgQjWYnKDAXmCYKv7YjWzCin/51Yl+SRD8D8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:82:13:5e:b3:65:a7:c6:39:7f:3f:a6:c0:25:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: May 10 16:00:49 2025 GMT
Not After : May 11 16:00:49 2025 GMT
Subject: CN=2f15cad2c4f4fbab427982cac132d305342c80a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:6e:83:5f:39:a5:b6:b0:1a:52:32:d2:93:
dd:77:48:62:9b:06:90:79:ca:e7:45:db:a2:24:2b:
2b:41:63:ee:41:93:70:82:85:1a:52:ab:4f:f5:6d:
1d:0c:ab:eb:4d:55:58:c0:2e:4d:fd:d5:6b:c0:b9:
a8:49:45:31:f1:d9:2f:38:25:0b:8a:ad:1b:7b:e7:
9b:da:0e:6f:9b:a5:ea:ee:4e:5e:0d:42:59:79:89:
f7:54:52:00:8f:45:7d:3b:3e:6e:17:c0:f5:6b:ea:
75:ea:90:b7:63:64:15:1e:49:74:94:db:f7:1b:81:
aa:55:f9:0e:b0:b0:38:b5:a5:1c:35:59:59:1c:d8:
1a:aa:d3:e7:5b:34:40:88:eb:a5:17:8e:24:17:ee:
f9:9a:ba:12:8a:d1:9f:90:cc:7c:a9:66:f3:5d:92:
3e:e7:5c:46:44:25:c4:f4:93:ba:a4:2d:41:d6:69:
fe:82:52:1a:5a:fe:58:2c:ed:51:e6:d4:80:3c:07:
c6:9c:97:67:8e:f2:d1:31:69:a2:fb:c7:03:17:df:
4e:09:d1:00:db:81:d4:d1:93:c1:70:b8:79:ff:94:
a3:6a:7b:67:8e:67:0a:c2:c7:7b:35:27:7f:d3:19:
89:e3:e0:6f:27:3a:54:0c:27:e7:86:28:4d:ea:21:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:15:CA:D2:C4:F4:FB:AB:42:79:82:CA:C1:32:D3:05:34:2C:80:A8
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6c:bb:f5:98:4b:a5:ed:40:4e:20:4c:07:f9:bb:8a:b0:fb:
52:d0:53:19:42:c4:2f:ab:5e:c1:f4:cd:66:a2:b2:87:cd:28:
61:55:aa:d2:4d:fb:b7:be:43:4c:fa:38:43:6a:ec:f3:4b:74:
6f:aa:3c:ab:5b:ab:48:7a:70:55:50:6a:c5:5f:20:8a:02:f2:
cd:b0:e2:60:12:0d:80:e5:45:ae:2c:3c:12:79:f1:2e:e3:97:
bb:63:d0:43:8d:ff:80:c0:12:ae:b8:39:49:d5:c6:9b:59:a5:
98:46:7b:b2:fe:ea:94:ed:53:10:a3:02:90:7a:b1:3e:67:68:
45:ad:48:33:d7:01:3b:5b:62:45:2c:81:6a:0e:a7:a5:b7:fe:
a6:10:70:4f:9a:9d:fd:67:9a:57:f0:63:04:c1:68:cf:4b:53:
52:5d:51:26:63:c3:f5:56:ba:d3:72:22:79:82:5c:02:6a:1c:
ce:fe:57:92:88:81:08:36:9d:34:29:74:fd:b3:68:8b:8e:cf:
54:a2:34:b8:a3:15:23:34:6d:f6:2b:a2:f8:df:b3:a8:77:26:
19:2d:80:f3:21:0e:49:91:ab:49:f2:8d:05:b7:41:51:9b:8a:
96:09:d0:e1:a0:32:bd:5e:76:d8:5e:27:7f:0d:db:ce:f2:50:
aa:09:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:56:11 2025 by rpki-client