Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: BifDfLxyP807oR8no5Z1K9LK21tFPBPdQ96G++iuIG0=
Subject key identifier: C1:11:0D:B0:7D:B7:5B:98:F6:DD:3B:25:AD:9F:C4:F0:46:01:A4:39
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 0196BDB73C64190F6AB4BBD9B561BACA974F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0911
Signing time: Sun 11 May 2025 05:00:24 +0000
Manifest this update: Sun 11 May 2025 05:00:24 +0000
Manifest next update: Mon 12 May 2025 05:00:24 +0000
Files and hashes: 1: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: Y5nKRUfxD1tWj42nNTPCUJzCJPMlMEofDS0DUPrzoyg=)
2: T5kWJ0zgWJZajIuh22W4Yozr5Js.roa (hash: nOTln1QfZH/4DaY3ZoWPaEWuEELecZ3pWov8YJOX40U=)
3: yrfnq6Apo3g6hYK2SXicNIxd3BQ.roa (hash: mz8tGW+kk5vYLIpkvgBjBz5ynzM4w4t5pl379UMfAPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:3c:64:19:0f:6a:b4:bb:d9:b5:61:ba:ca:97:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: May 11 05:00:24 2025 GMT
Not After : May 12 05:00:24 2025 GMT
Subject: CN=c1110db07db75b98f6dd3b25ad9fc4f04601a439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:c7:f7:c7:7f:85:c6:7a:63:4a:81:5f:30:
bf:46:a5:01:aa:a2:e6:b2:6c:9a:e1:67:6d:35:ab:
d0:2e:4d:62:ef:b2:2a:35:75:e8:4c:53:1f:ff:8d:
6a:df:d0:20:f0:c6:3d:fb:1a:bf:25:85:48:66:da:
c0:2d:e9:d3:3f:5a:a2:97:87:95:b5:9c:be:d5:dc:
ae:cc:f7:23:f4:35:0a:c5:8e:7c:47:a5:b4:b7:91:
4a:cb:a9:65:e5:73:c8:33:f8:1f:f0:b9:6e:69:e7:
c7:56:16:aa:64:e8:62:14:26:4b:97:ef:42:1d:f9:
ab:21:93:8a:6d:42:41:1e:4d:36:4d:fe:40:c6:9c:
93:b9:8c:72:25:27:d4:fe:4d:d5:46:fb:bf:4b:63:
3a:a3:60:bd:1f:df:4a:c0:6d:04:ce:7e:74:23:4b:
e2:13:d7:8a:7c:04:2d:90:12:9b:3f:4b:f4:fb:03:
14:d8:ba:17:50:a8:d2:ae:58:9a:1e:cd:36:ff:e3:
38:cf:5f:1e:3b:87:6d:bd:ca:f8:34:d4:5a:ba:46:
58:34:b5:f0:69:01:8f:62:cc:d6:92:3c:33:f4:22:
f2:0d:2d:4f:97:c9:48:e3:46:44:7f:83:30:99:81:
27:f5:16:90:e2:eb:e9:92:d9:30:45:b1:58:0a:6f:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:11:0D:B0:7D:B7:5B:98:F6:DD:3B:25:AD:9F:C4:F0:46:01:A4:39
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:02:b6:bb:9b:ea:38:f8:28:e3:b4:8e:04:c8:f1:fa:0c:71:
90:aa:a4:77:d2:c9:11:40:3c:c3:9f:9c:72:15:e3:c5:fa:4a:
f6:0f:62:7b:0d:27:b1:ce:09:53:18:36:d4:68:e9:ad:e2:d4:
27:d5:4e:9f:8b:8b:cf:33:03:88:8b:e6:7e:6b:b8:1b:49:33:
ef:cb:eb:71:bc:8d:74:4f:13:16:ec:e2:d3:ff:99:f8:fc:19:
f8:03:04:0a:83:a1:ee:31:33:ad:71:cb:93:05:50:2d:e4:8f:
61:ae:c9:58:17:61:a5:81:87:55:0b:ae:33:4a:b0:36:d5:1c:
c1:66:7a:8c:8b:f5:3b:cf:ad:4d:11:2b:39:59:54:32:ba:b0:
5e:1f:f3:18:fc:41:bb:80:68:11:ec:5e:12:9d:db:be:95:f3:
74:05:08:bc:63:71:0c:54:e9:9a:27:2f:47:5f:2d:07:b6:1e:
1e:02:f7:0e:ad:ed:cd:9b:a0:11:5e:05:d6:cb:4f:4d:1e:fb:
96:e6:b2:98:49:9f:4f:fb:99:a7:4b:b4:fb:74:49:f0:de:6c:
8f:54:50:cb:57:0e:20:44:61:f7:7f:1c:c5:69:ac:81:a4:8a:
f0:04:71:64:aa:76:2c:06:7b:11:3b:8c:76:68:32:28:71:90:
c3:b5:a6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:29:05 2025 by rpki-client