Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: wbr8DMB5eiTzqPjKOx77ABibkZUTVWulk93KeKrdVbI=
Subject key identifier: 93:F3:91:42:9F:DA:29:A2:0A:E6:38:3C:CE:98:B4:89:18:95:55:8F
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 0196C5A870DE0807C17F18159C1785CCF061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 14BC
Signing time: Mon 12 May 2025 18:01:12 +0000
Manifest this update: Mon 12 May 2025 18:01:12 +0000
Manifest next update: Tue 13 May 2025 18:01:12 +0000
Files and hashes: 1: 0h3Xfcral2IubnxmY9_tstWMwfs.roa (hash: 1nhiOKUXN9GzK8aVndHDOX8caRYt3h/1uQ8akkf2jNw=)
2: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: bbWCvyVbRTmAnsz2MhR5Ie9xA5ZdQdtWl59+gFRp8Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:70:de:08:07:c1:7f:18:15:9c:17:85:cc:f0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: May 12 18:01:12 2025 GMT
Not After : May 13 18:01:12 2025 GMT
Subject: CN=93f391429fda29a20ae6383cce98b4891895558f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:32:7d:86:7d:ea:6b:a9:ae:bf:53:3d:dd:
30:6b:ca:03:79:d0:e1:6f:3d:ee:3a:04:4f:de:8d:
5f:5b:ed:1c:a2:6b:44:b6:ca:80:b7:1b:ef:e1:62:
fc:f5:ed:9b:cd:02:50:83:29:52:86:7f:bd:6c:79:
1c:62:6f:ad:b5:ac:0e:12:18:7e:89:19:2e:e0:fa:
af:15:3c:2d:43:d0:30:bd:11:0e:71:74:87:28:df:
1c:44:05:f5:e1:e3:57:77:78:2e:27:f2:e4:d2:46:
ee:a5:1e:4c:6f:66:f3:d2:04:86:6e:7c:3c:b1:eb:
0c:a4:f3:d1:5f:a5:82:31:bd:4d:7f:a7:0d:7a:f4:
50:14:c9:64:8e:df:dd:eb:ea:0c:2d:f1:b2:9a:29:
f8:76:d9:f1:85:c5:d1:e8:90:62:24:e3:1e:16:f2:
a7:c2:2e:b4:2c:ff:52:bd:7e:2c:57:22:86:98:92:
05:9f:67:91:0b:2c:bb:48:fc:de:5c:1e:63:5f:74:
f7:e2:94:8c:e5:54:5a:15:f8:97:5e:d0:a5:82:66:
2f:5b:32:7b:14:93:2c:83:90:af:80:e7:9e:be:e8:
5e:bf:42:33:c0:b4:9b:30:4c:3b:24:13:48:fb:fb:
fb:e5:9b:b8:36:2a:2e:1d:72:d3:15:d5:4d:4d:6c:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F3:91:42:9F:DA:29:A2:0A:E6:38:3C:CE:98:B4:89:18:95:55:8F
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:82:f2:41:e0:72:98:9c:6e:15:08:79:85:27:c2:8a:c4:f3:
cc:3f:b1:e9:b7:a9:88:0d:76:a7:dc:70:83:00:b0:50:2c:26:
f1:ff:a8:92:8d:ac:59:dd:c9:ef:ae:73:6c:4e:ae:df:aa:ee:
9a:29:3d:01:f2:d6:83:35:17:5a:11:9c:20:3f:f7:ed:9e:a3:
60:7b:9a:fa:60:b8:5e:c2:77:e2:d5:15:af:08:cd:7f:28:8b:
6a:63:69:7c:1b:68:4e:ef:ad:16:23:2d:94:3a:b3:e8:fc:36:
f4:71:c3:cd:58:30:40:bd:12:a2:a7:d0:33:b2:8d:ba:32:7e:
1e:86:76:69:ea:4b:74:92:2a:14:c3:3e:da:c3:48:fb:83:2c:
30:bf:67:91:3c:f8:0f:39:7d:dd:76:da:dd:1a:2c:75:bb:90:
15:d7:e3:4b:85:fe:19:13:0f:bb:54:6d:a0:99:bd:f6:3c:3a:
f2:26:95:73:fd:e4:53:e3:64:86:f5:b3:17:76:ac:d4:2d:00:
e6:6e:f9:ba:ef:bf:91:fc:60:cb:b0:b7:c9:1a:74:8e:42:f9:
65:d6:9c:cf:ef:2f:cf:99:df:52:60:a0:e7:33:1c:98:d9:02:
67:91:bc:1b:90:a5:40:c8:0a:85:f8:45:03:9a:35:1e:b6:d9:
fe:ec:18:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:01:34 2025 by rpki-client