Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier: 7YAaMtr6MxVewyILTocS8sqmb3x/sKVrrpT28l/djn8=
Subject key identifier: 4E:E1:DC:C0:D0:D4:1B:7F:98:ED:44:B3:48:10:C6:E5:FD:C7:41:80
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial: 0196C3B9A7068BE3DD47C0D3EFFD7C13E52F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number: 1279
Signing time: Mon 12 May 2025 09:00:46 +0000
Manifest this update: Mon 12 May 2025 09:00:46 +0000
Manifest next update: Tue 13 May 2025 09:00:46 +0000
Files and hashes: 1: _1ZVUyiWiKcUkDQ7d9MEjN-Qxjg.roa (hash: B9N8iWkGu9FMB4JofKmJJULgTYSFoSVSwpeNEHQNG3o=)
2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: DnM0Fkynr2w5JtwB2YByzK6HMycLc9iwDqPZYfMRKDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:a7:06:8b:e3:dd:47:c0:d3:ef:fd:7c:13:e5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
Validity
Not Before: May 12 09:00:46 2025 GMT
Not After : May 13 09:00:46 2025 GMT
Subject: CN=4ee1dcc0d0d41b7f98ed44b34810c6e5fdc74180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:80:79:ea:4b:0b:9a:a0:f0:28:5d:69:90:
3e:35:45:fb:1f:5b:87:84:0d:91:6c:ae:58:88:7e:
c8:1c:87:16:5b:e1:13:8a:f8:1d:3f:b6:19:c3:d0:
ea:c4:d1:74:bd:a5:0c:63:ce:c0:2d:cf:5c:0f:cc:
07:13:80:e1:88:74:8a:a3:6a:25:85:04:fb:53:26:
4a:3b:d0:26:34:36:17:78:1a:95:b0:3c:2e:58:19:
a6:24:68:da:db:53:8c:8a:8f:5d:cd:04:c7:86:c0:
79:9e:7d:7d:b5:3f:4d:b4:a2:58:1b:c3:97:f3:b7:
42:85:5f:a2:a4:46:0c:c6:da:b8:20:b6:17:b6:91:
e5:eb:fb:8f:d1:5c:6b:0c:20:7f:59:1d:0b:a1:4a:
7d:69:78:c8:31:33:c6:54:77:f8:ef:ea:06:21:ca:
30:ce:a6:08:9f:74:60:a1:89:9d:3e:b6:d6:dd:7e:
53:7b:d5:52:ca:06:b3:fa:56:22:ba:93:09:a4:34:
67:5a:e5:98:54:53:91:8f:3e:f7:60:c4:6a:2b:0c:
d4:12:5f:1e:c6:14:bc:8b:3b:2a:59:d7:2d:f9:39:
79:6b:cb:05:02:1d:e6:91:66:4f:41:d9:a4:9d:99:
fe:c8:b5:23:4d:88:df:70:ef:e8:8f:35:6d:0a:76:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E1:DC:C0:D0:D4:1B:7F:98:ED:44:B3:48:10:C6:E5:FD:C7:41:80
X509v3 Authority Key Identifier:
keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:63:7b:c0:a3:e7:95:bb:d0:8d:f9:11:8d:70:31:4e:38:3b:
e9:69:f8:c1:ce:d1:51:ef:48:a3:80:f0:09:d5:06:ff:bb:a0:
91:dd:b0:53:32:0d:e1:77:33:6e:7a:aa:4d:9c:ea:e0:5e:43:
e0:b8:37:70:2b:74:bd:6a:6f:f7:80:f1:7a:13:f9:b7:cb:00:
55:2f:dc:d8:6b:f9:df:ba:98:29:42:5b:a9:40:c7:8f:d5:04:
0c:a7:df:7f:ff:39:ab:35:9a:ef:d6:de:19:00:80:ef:7a:67:
26:e2:7a:ae:69:1d:a9:76:0a:69:f9:08:6b:9c:2d:94:4c:f6:
f5:3f:f6:fe:af:ca:5e:ef:45:55:dc:6d:d9:70:c0:01:fb:b0:
ab:9d:2e:aa:02:51:30:c3:8e:af:37:eb:41:66:80:0f:3e:b4:
d5:00:17:d6:2d:dc:ff:15:7d:88:92:66:8c:67:ec:ff:bc:06:
3e:80:cc:44:3b:23:fd:09:9d:71:46:c4:e6:f8:af:b1:c1:c6:
ef:ba:13:a3:d4:6a:62:3c:d0:cf:27:7c:80:10:f9:9f:ee:ed:
3f:14:8f:70:ff:03:e0:9a:2f:9c:b5:df:ba:ec:c8:4e:83:2b:
4a:9e:11:f2:a9:88:21:e4:50:11:54:38:4b:00:43:1e:df:5f:
ee:fc:64:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:46:10 2025 by rpki-client