Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: FJNH+r4XMNMmZtibBNZY4mqVq5LvLat9fVjLZG14fHY=
Subject key identifier: 16:29:F3:9C:77:AA:CD:B7:CD:84:F1:9E:63:C9:80:51:D9:33:BC:42
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 0196BE93192D0899638E516D0CC0A07A1EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 0157
Signing time: Sun 11 May 2025 09:00:33 +0000
Manifest this update: Sun 11 May 2025 09:00:33 +0000
Manifest next update: Mon 12 May 2025 09:00:33 +0000
Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: I/wTqgqkM5WWtdj+jfxOzDLeALD5qYqHjmJfBXPu2No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:19:2d:08:99:63:8e:51:6d:0c:c0:a0:7a:1e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: May 11 09:00:33 2025 GMT
Not After : May 12 09:00:33 2025 GMT
Subject: CN=1629f39c77aacdb7cd84f19e63c98051d933bc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:13:f3:42:a4:e8:c2:da:c4:2a:55:f5:9c:
a6:cf:80:00:cd:2f:9b:a3:13:88:3d:67:dc:3a:8e:
f1:28:a3:e8:10:c2:2d:c5:60:4f:a4:03:f4:11:f7:
3d:e3:d6:1f:38:b1:1b:2e:5b:d7:21:e8:02:db:ff:
62:72:79:02:e1:af:58:33:a5:70:75:84:b1:09:ec:
1a:d1:dc:b1:03:1d:78:bf:aa:7b:5c:02:7d:5a:ef:
da:70:6d:73:18:0d:8a:09:4a:5e:6c:59:77:8b:4b:
92:ef:03:a6:6e:d6:2d:bf:10:b9:76:1f:6c:cf:f3:
5d:3b:34:c2:cb:f0:b4:12:c8:cf:a9:f2:8a:07:ec:
55:19:90:22:4c:80:8e:a0:90:28:7d:78:c7:5f:61:
cd:b2:ce:8b:aa:70:d9:d8:d9:ce:3c:9f:b1:26:c9:
72:66:df:4b:4f:19:14:1c:0c:6e:7c:58:0c:22:ca:
09:34:69:fc:55:64:12:0b:4b:80:36:44:2e:ac:23:
74:6f:c2:a9:73:37:9d:87:4a:60:01:03:29:90:96:
aa:56:ea:0d:40:a3:4a:1a:93:3f:df:4d:d4:7d:1d:
f1:9a:a5:1b:30:b7:72:ca:d8:0f:7a:db:41:84:68:
e3:2b:6d:da:90:fb:91:c4:26:12:20:34:e3:87:52:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:29:F3:9C:77:AA:CD:B7:CD:84:F1:9E:63:C9:80:51:D9:33:BC:42
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:15:78:24:11:63:48:65:52:b0:30:ed:68:38:80:cb:71:e6:
73:78:1f:cd:84:51:62:3d:c8:97:22:62:0d:9b:0c:5b:77:b0:
8c:ac:b7:81:cc:f1:7d:6e:e8:41:e8:88:95:dc:ff:c9:86:66:
10:14:18:83:33:8a:62:4f:22:05:ca:72:f2:e0:2f:64:b6:d5:
b9:d9:ff:5c:c9:18:81:98:c5:53:88:7b:9e:ce:97:21:aa:3a:
c9:83:96:d1:93:13:dc:4d:be:a3:2e:6c:5e:52:0a:a3:70:cb:
73:8a:6a:91:f8:5b:04:90:45:c8:9c:81:34:0e:0a:0e:1e:52:
2d:63:b1:c1:78:16:29:d4:e8:10:36:f8:16:3e:f8:4c:0d:cf:
de:47:e4:a1:49:a7:f6:82:79:08:91:6b:9d:bd:ea:e1:ef:c0:
81:0a:0c:26:62:14:24:f8:46:2a:37:9b:f8:6a:c1:35:e5:2d:
88:8b:fb:00:89:a8:50:b4:49:ca:00:8e:80:9b:c2:cd:75:4c:
10:12:1f:3b:1b:ec:7e:81:6e:32:66:bb:f2:2e:fe:25:9f:4e:
eb:2a:09:a8:1c:5a:94:1d:d9:97:a9:00:bb:9c:06:c3:b0:03:
12:b3:67:98:c5:d6:51:2b:f4:7f:87:64:bc:a0:50:d4:64:bf:
ec:e1:5a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:36:12 2025 by rpki-client