Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: eUjHexAOLzapbaDWJ9Zoku3NbJCrV/fC7UeYQYjH6GQ=
Subject key identifier: 5A:26:23:C0:EE:EC:71:9C:AD:4D:DC:54:2E:B9:16:7C:11:6C:49:98
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 019659B93ADA1482B797F9834BCED9DB9B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 24
Signing time: Mon 21 Apr 2025 19:00:33 +0000
Manifest this update: Mon 21 Apr 2025 19:00:33 +0000
Manifest next update: Tue 22 Apr 2025 19:00:33 +0000
Files and hashes: 1: 5Be38N82i-kj4EuiNkalcK2iR3Q.roa (hash: J33WflhWlfLpbIfuokDfwd3Gd2ZFgGd5EDrdDXG7Eqc=)
2: QW6syWpnf0vqyILLjJUX4x26ONM.roa (hash: qFwWEKmzXxAiCGb5bVd4vtSjZ2jjOJwwjqw2pXbW8TQ=)
3: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: L6ossNH6teEfcEE8HQiHXeiY5u0eQ4zVtPatf/JUdGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:3a:da:14:82:b7:97:f9:83:4b:ce:d9:db:9b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Apr 21 19:00:33 2025 GMT
Not After : Apr 22 19:00:33 2025 GMT
Subject: CN=5a2623c0eeec719cad4ddc542eb9167c116c4998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:36:aa:99:78:87:42:cc:59:42:90:0a:7d:
1a:fd:4f:41:c6:13:c4:6e:4a:5d:91:e5:d9:65:ce:
fd:2e:11:29:da:54:ad:a4:70:f8:54:c8:a1:e6:78:
9b:8c:9d:65:0c:2b:ec:76:cf:20:0d:c2:46:7b:b2:
e1:e8:29:39:72:08:4c:f8:37:35:e6:b9:66:a1:04:
b2:77:2c:58:46:86:82:eb:93:6b:26:fa:a0:02:d3:
ac:52:0f:80:5d:20:1a:91:11:cc:ef:26:31:3a:7c:
10:78:7f:54:1f:93:58:91:cd:e5:b8:05:9a:ae:4a:
f3:ba:65:09:8a:69:46:ea:3b:d3:12:89:e5:e5:cd:
c5:b1:4a:34:80:61:68:13:13:56:8c:1b:9d:41:ae:
6a:e6:5a:6f:98:7b:63:2c:78:2b:a9:a0:ae:1d:11:
c7:ef:31:5a:30:ba:3f:5b:69:35:3a:0f:51:b2:3b:
e7:dc:1b:83:f5:ae:a9:73:42:d4:90:70:34:b6:ab:
62:c8:8b:0b:55:b1:79:a3:38:10:46:0a:1a:70:87:
f5:e5:08:da:eb:6c:f3:32:e8:8a:c8:e7:f8:38:98:
90:9d:aa:ff:0b:17:4f:c9:fc:8c:8f:26:be:9c:db:
73:b7:71:72:f7:97:ee:a4:a1:3b:9c:89:7a:1e:a2:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:26:23:C0:EE:EC:71:9C:AD:4D:DC:54:2E:B9:16:7C:11:6C:49:98
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a8:1e:84:48:17:54:a9:ce:f5:9c:1b:60:2e:84:00:7f:ea:
86:20:74:23:d1:7d:1d:dc:ba:25:f8:f3:b1:2a:46:af:26:11:
e3:18:d0:9e:f7:e1:41:32:67:95:9e:a6:e3:f5:ca:02:8c:10:
85:48:5a:3c:91:4a:14:35:b0:11:42:0c:16:1e:a9:15:23:e4:
38:2b:de:a6:e7:09:e2:23:bf:44:9d:53:2b:d1:fb:c4:54:8d:
bf:52:f2:45:c3:9b:1f:34:6a:b6:b9:2b:c9:96:e6:df:c9:dd:
e2:37:ee:f6:76:6a:a0:0a:c1:e2:a3:5e:a9:8a:b6:cd:11:dd:
a6:02:25:db:36:12:b4:ca:76:c0:5f:14:9d:8a:4d:9c:3d:4c:
0b:2f:d6:24:a9:85:49:cb:43:ab:d6:c9:12:51:87:c2:25:26:
66:96:4b:75:ea:aa:b3:ef:76:36:21:78:34:d8:05:f5:dd:05:
40:5a:6a:4e:71:3b:b7:11:f4:ed:05:61:92:50:c6:78:d0:ea:
13:ce:de:0e:5e:3f:a2:72:aa:06:ad:82:39:e2:35:42:fe:ad:
5e:62:18:73:6a:cd:86:02:ce:cb:b4:dd:5c:f3:b8:29:c2:73:
42:1a:59:e3:fc:83:51:ca:48:cf:b8:02:2a:44:c6:90:e4:04:
c1:6b:79:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:56:45 2025 by rpki-client