Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: OcqVXu/sTH0MqsOEn1sUn7pMhZGWHcMDW1eQprjjtlQ=
Subject key identifier: 49:1B:BF:BE:DD:1F:C4:0F:E1:17:A1:CE:E6:70:57:B9:B2:CE:28:95
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 0196D32CE9BBE8B85E3E89008B350BB786C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 1542
Signing time: Thu 15 May 2025 09:00:57 +0000
Manifest this update: Thu 15 May 2025 09:00:57 +0000
Manifest next update: Fri 16 May 2025 09:00:57 +0000
Files and hashes: 1: mtkhlYdRRxy7HTt4lejr_BK0O0E.roa (hash: XUZOJXssCKIIh5ucQaDh2vYICFb1VOST7rkiATGvktw=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: oLz+SgIqdkOmyZ8yjZZb5CeGepHn8s6DmNo8QNgY4AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:2c:e9:bb:e8:b8:5e:3e:89:00:8b:35:0b:b7:86:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: May 15 09:00:57 2025 GMT
Not After : May 16 09:00:57 2025 GMT
Subject: CN=491bbfbedd1fc40fe117a1cee67057b9b2ce2895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:1d:c5:2b:e8:53:56:93:93:c6:5c:4b:ae:
5a:45:8b:fb:12:51:64:b5:8c:47:ae:3e:0b:d7:62:
0d:f2:50:f2:e6:4b:c1:5a:64:81:b6:7a:18:72:41:
69:d1:89:51:7f:8b:53:30:3d:78:45:bd:6c:d5:f4:
20:71:67:45:6d:3e:eb:77:90:a0:82:56:a4:53:86:
ef:c4:c7:b5:c3:52:a9:72:4d:90:e9:57:7d:d7:81:
5c:85:73:5c:dd:a3:68:ec:35:d9:1a:c8:7e:b4:dc:
40:ab:ce:e2:e9:f2:85:d1:22:70:71:30:ae:f8:17:
6e:b9:5d:ed:48:3a:e4:07:54:78:f4:4a:bd:0f:d1:
28:cc:cc:e0:d0:82:6d:8f:fe:50:42:44:09:2f:c7:
a5:94:62:13:de:fa:36:df:c3:51:e5:b2:68:b5:a4:
38:1c:6a:02:4d:dc:61:10:7f:03:9e:d5:c8:2b:e5:
e8:0c:e4:58:47:c4:08:c1:34:4e:c6:c9:15:68:df:
5f:e0:52:57:4b:6f:14:22:90:b7:95:12:39:11:bb:
96:e9:62:37:d2:c1:de:08:a7:26:53:31:ff:07:7a:
ff:59:a2:d8:95:9f:fc:12:38:44:65:34:88:f3:af:
f8:e0:f7:e3:01:3e:2d:6f:ee:89:32:b6:d1:4e:52:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1B:BF:BE:DD:1F:C4:0F:E1:17:A1:CE:E6:70:57:B9:B2:CE:28:95
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:83:99:91:9b:3d:84:6c:61:84:95:52:95:e1:4d:cb:c6:51:
a8:27:21:87:98:11:f6:ea:be:28:ea:39:20:09:a2:48:ad:b9:
fc:58:5b:14:0f:c8:5a:4f:5d:79:02:03:5d:59:45:5e:11:89:
82:15:80:06:49:46:4f:6f:f9:c8:8e:11:21:e9:99:04:1b:be:
e2:3d:a4:ee:0c:dc:84:e2:6c:48:94:a1:b1:43:68:ab:9b:86:
5c:f9:3c:ed:ef:12:19:14:dd:87:75:4c:67:04:ff:03:6a:0a:
7a:8e:1d:22:d6:40:6f:22:a8:a3:21:74:b7:92:24:ea:f1:a0:
b2:6d:20:b0:0a:6d:45:6e:73:e7:83:fb:65:57:bd:78:36:9c:
e3:f7:07:97:ad:ed:54:5c:c4:88:77:a0:aa:91:48:c3:2b:84:
01:91:6e:bc:1b:41:74:24:f7:2f:3f:6f:ec:8e:71:ed:4f:7f:
a7:10:3a:65:20:44:b0:bc:c1:9d:25:de:63:28:22:e5:9e:71:
ee:46:56:77:6c:5b:df:72:db:55:57:d5:4f:74:b3:4d:0a:6a:
8d:13:9b:8d:dd:86:6d:00:ad:ea:37:f1:ec:c7:3b:bb:00:69:
e4:54:8b:10:9b:d3:5a:40:04:25:17:81:34:ca:72:10:c9:19:
a8:80:cd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:45:07 2025 by rpki-client