Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: +2YVShM/bY+8skZQ+a2VYlIWa4gsjf2em8LG/Wup0Rw=
Subject key identifier: 3C:03:0A:48:7F:39:9A:EC:9F:93:2A:A9:94:9E:39:85:B1:BE:AE:FB
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 0196A277D29C22262101214BD8995027ADDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 0EE7
Signing time: Mon 05 May 2025 22:01:23 +0000
Manifest this update: Mon 05 May 2025 22:01:23 +0000
Manifest next update: Tue 06 May 2025 22:01:23 +0000
Files and hashes: 1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: ezF0T24GIlNwcNfeKTnQZGVkteMA48zlefE40OW+Qw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:d2:9c:22:26:21:01:21:4b:d8:99:50:27:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: May 5 22:01:23 2025 GMT
Not After : May 6 22:01:23 2025 GMT
Subject: CN=3c030a487f399aec9f932aa9949e3985b1beaefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:e1:1c:b1:60:bb:27:33:7a:01:a0:40:a1:
4e:bb:d6:32:5b:61:1b:b0:79:89:01:34:c4:b9:63:
c8:f2:f6:4a:c6:7b:41:1c:d5:95:b0:9a:18:3a:7d:
22:90:21:ff:2c:67:0c:b4:d7:82:51:c1:74:9c:d7:
d4:ed:ab:94:bf:ff:2d:6d:b4:79:59:0b:57:d0:72:
e5:ed:85:a0:fe:a3:2b:dd:cd:b5:66:5a:9e:6f:4f:
8e:29:17:46:37:63:c7:74:bb:b9:36:ea:cf:c3:27:
2a:5b:74:d2:6a:c4:26:a1:67:d1:97:16:50:f8:da:
82:1a:06:75:4b:44:3d:65:2d:8b:32:16:6b:07:e7:
22:91:3b:2f:55:1d:72:a9:3a:ed:d1:03:2b:29:ed:
a2:5f:85:06:01:33:0c:06:6a:ba:af:9f:d8:77:66:
49:b9:32:8e:a1:6a:06:cc:87:0a:47:5d:dc:6d:73:
25:0f:de:ea:aa:ba:ea:02:76:88:dc:25:87:e0:af:
d8:b6:6c:e1:37:51:dc:cd:8d:0b:08:09:26:db:f1:
0f:99:e3:ff:a6:14:b3:c8:4c:0b:e1:f5:a4:ee:74:
0f:72:2b:ad:68:e3:b6:3c:ca:ea:84:4a:f5:ef:f5:
de:20:2e:3f:2e:8d:01:c7:40:dc:34:d4:06:69:85:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:03:0A:48:7F:39:9A:EC:9F:93:2A:A9:94:9E:39:85:B1:BE:AE:FB
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c7:7b:cb:e7:c6:e5:2f:8b:42:dc:c6:ce:ba:8f:ef:4d:89:
d0:e0:15:8c:dc:64:d5:b6:f3:59:d5:27:03:70:2b:a4:1b:c0:
b5:b9:e3:16:7a:ae:48:13:d7:c3:99:06:09:f6:2e:a6:f9:5b:
81:be:2e:45:3d:42:1d:11:53:ed:33:4f:3a:f7:62:21:28:5a:
33:ce:b2:09:f3:97:75:99:58:5c:a3:16:d6:69:52:7c:b6:8b:
0f:d8:f5:8e:e6:34:1a:90:a4:3c:bd:3e:cf:f2:41:8b:40:a2:
a1:dd:3b:9d:b5:ba:b9:3c:2c:d5:98:35:32:53:6a:1e:bd:2b:
b6:73:6a:c4:a1:f6:54:27:bb:e9:14:f3:ec:f2:fd:fe:15:95:
9a:56:6c:f3:42:f7:cd:0c:fa:ec:3d:0c:98:3d:11:e3:6b:e1:
98:07:9d:e9:08:61:0e:6a:10:cd:72:2f:1f:51:6d:cf:d4:9a:
75:19:2b:ff:d3:c7:09:53:20:cd:59:83:9d:5c:ff:4d:2d:9a:
41:0c:18:5b:fb:27:42:7f:49:94:83:ce:a1:48:b6:d6:c1:78:
78:93:69:97:5d:09:9e:16:45:57:1d:52:df:26:94:18:b0:03:
05:3f:b9:10:4c:52:58:ad:8c:fb:a2:55:79:dc:19:af:cb:50:
e9:53:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:16:03 2025 by rpki-client