Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: ZdvO7fVGebxAIrdSikj8lJJAB8iK9pnB3sZhXaTD7sg=
Subject key identifier: 89:5E:D2:30:41:4E:A1:CE:DF:E3:24:DB:38:49:4C:D9:67:33:D6:F6
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 0196C5A87606690C2BFE56563BE2955DAC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 0924
Signing time: Mon 12 May 2025 18:01:13 +0000
Manifest this update: Mon 12 May 2025 18:01:13 +0000
Manifest next update: Tue 13 May 2025 18:01:13 +0000
Files and hashes: 1: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: TQONjmmVHZPMC4+6Dw8OolQqyMhoBAANy1aFvWd7scc=)
2: O5DiGBxXgxkBCTZNGMQgecNF7aI.roa (hash: 0ahwaWUfVDJYD2wF/x/njO0sF76KorNYpLUQSfP42Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:76:06:69:0c:2b:fe:56:56:3b:e2:95:5d:ac:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: May 12 18:01:13 2025 GMT
Not After : May 13 18:01:13 2025 GMT
Subject: CN=895ed230414ea1cedfe324db38494cd96733d6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:38:4b:08:5e:41:c1:df:b4:83:79:94:2b:
c6:4f:e7:2a:bd:d0:5a:68:e7:1e:ec:c0:fd:25:6a:
ea:55:5e:da:55:ef:18:3e:ef:49:85:a6:0a:c5:1d:
3a:64:20:46:64:83:d9:f2:71:d3:98:db:c4:04:bf:
b2:e6:69:93:36:65:e3:c4:06:f1:bb:7f:79:6b:42:
b3:89:d5:5f:e4:03:8e:7b:09:47:90:b2:02:45:af:
b7:b1:e1:17:a3:52:4e:98:c8:bd:32:b6:2f:f3:3b:
ee:78:b8:83:1b:a0:53:cb:c2:c5:88:02:00:ea:94:
ac:71:29:4a:7d:d1:4e:ab:54:78:80:d1:7a:13:26:
05:11:88:48:12:25:4c:b6:a5:27:dd:ef:9d:99:bf:
5b:b5:9e:0c:8e:e4:19:35:83:bd:9d:63:d0:4b:45:
74:bb:da:2b:46:ac:65:f7:a2:a2:59:22:19:45:cc:
6c:52:47:fe:b7:6a:3e:55:0a:d8:ae:86:7d:85:e2:
ba:03:ca:34:65:51:7d:19:66:00:94:d9:d7:ff:43:
a8:ca:f4:af:8c:a4:65:d3:d7:ab:dc:42:2c:c2:7a:
fa:88:ea:73:83:e9:d3:f9:33:d2:63:4f:80:82:ed:
fe:7b:3e:be:eb:e0:6d:a0:54:1b:2f:a2:e0:75:64:
d7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5E:D2:30:41:4E:A1:CE:DF:E3:24:DB:38:49:4C:D9:67:33:D6:F6
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4b:bc:a4:0d:ba:c3:b2:1d:74:1b:22:d6:13:17:50:1e:16:
bd:8f:59:c3:a6:67:0e:f2:c5:63:5a:42:1a:a3:9b:ab:ad:62:
f7:5f:e6:5f:57:07:cc:d9:af:4e:f1:cb:0c:cd:3f:b3:59:09:
15:de:d8:f1:ea:ed:47:f0:c7:2b:d9:56:55:c6:2c:a1:78:55:
87:e1:26:b4:e9:88:30:20:d5:fc:73:ce:99:6c:e5:a9:76:b2:
05:dc:88:6b:e0:1a:dc:df:bb:bc:48:cf:34:c5:da:ba:08:c2:
b5:58:2f:d3:ab:92:a4:b1:77:c3:af:f3:51:79:80:76:ab:2b:
ed:f9:d5:6b:43:fb:14:76:2d:36:34:a1:0d:9d:70:81:91:3a:
4b:f0:ea:4c:b3:9c:fb:8c:7b:9d:cc:86:34:3c:47:3f:ee:47:
7b:77:6c:78:26:a8:81:ca:7f:73:2a:89:f1:fe:5d:b4:66:79:
8a:57:75:0f:2e:32:62:f2:c0:34:41:0f:b2:9d:8a:98:9b:30:
4e:3d:35:63:a4:8c:aa:aa:28:9c:b0:4a:ee:b3:99:8b:79:04:
ee:7c:52:02:e9:55:36:66:3e:5f:d9:a1:f7:bd:b9:e3:0c:2a:
ac:f4:49:90:2e:52:dc:0e:67:8f:9b:c6:d2:1c:32:e8:91:3b:
7d:55:0f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:02:45 2025 by rpki-client