Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
File: nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json)
Hash identifier: L36kGFOGBF5Gn4Ycm3Rw+ol+7QhT7CDA8z79H8jeeBs=
Subject key identifier: 05:69:07:89:A8:AC:69:DB:DE:A6:52:D7:9B:02:7D:1E:9C:9B:9C:85
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Certificate issuer: /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial: 0196579465C96B695CCCE07477DDE5244C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
Manifest number: 03C4
Signing time: Mon 21 Apr 2025 09:01:05 +0000
Manifest this update: Mon 21 Apr 2025 09:01:05 +0000
Manifest next update: Tue 22 Apr 2025 09:01:05 +0000
Files and hashes: 1: MRDtmP98O0WNgH87Ax8nCcdZuLw.roa (hash: HrqGeHE20jy2rWDbz9uI3JnGeaBNl8AfA/5tH0i9z5o=)
2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: ///MIJNn9MeM/BJP8S6s6FW48yaCwdgK7ThVsVvpFuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:65:c9:6b:69:5c:cc:e0:74:77:dd:e5:24:4c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Validity
Not Before: Apr 21 09:01:05 2025 GMT
Not After : Apr 22 09:01:05 2025 GMT
Subject: CN=05690789a8ac69dbdea652d79b027d1e9c9b9c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:c5:f5:4c:a4:ae:ed:01:f1:12:30:76:3f:
4d:6d:b2:12:1b:b4:23:fa:da:8c:4a:be:52:0f:9e:
47:36:96:6b:c5:f0:f4:db:2f:65:85:ed:04:f6:da:
ff:66:f3:f8:d0:af:17:4b:cd:ee:95:ec:e4:59:d2:
57:15:d9:13:5e:47:84:39:4d:15:41:c4:ad:33:15:
8f:c9:25:cd:6b:b6:8e:03:eb:32:16:b7:b1:97:3e:
8c:d0:01:4e:72:e5:ab:a6:ae:cb:47:b4:3a:56:15:
37:d8:9e:37:db:29:16:a4:62:d8:c7:d2:6b:7e:23:
a8:31:2e:02:17:fd:77:74:b8:f8:47:d1:b9:aa:05:
2e:66:03:56:ea:98:e0:0a:f7:bd:82:78:fd:21:69:
d4:d7:d7:98:01:c8:b6:15:80:07:4c:e1:e1:e0:a8:
8d:d6:24:cd:f3:c6:9c:a3:57:55:b4:85:b3:f4:fb:
40:2d:92:9d:6b:64:0c:08:bf:22:e7:7c:07:43:c5:
a7:25:16:d4:2f:21:64:41:7f:81:a5:cd:85:7e:5c:
da:77:68:c0:62:57:c0:30:2b:e9:38:42:94:0e:45:
15:6d:18:61:46:72:4c:34:0a:af:d5:94:99:06:e3:
75:92:8f:2f:30:6a:cb:28:3b:0b:a8:b6:0e:8b:2d:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:69:07:89:A8:AC:69:DB:DE:A6:52:D7:9B:02:7D:1E:9C:9B:9C:85
X509v3 Authority Key Identifier:
keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b3:aa:2f:eb:46:37:e9:71:9c:e5:b2:20:a1:7b:8e:13:b1:
f7:16:7a:73:da:4d:7a:c1:d2:8f:f6:98:ca:09:ff:4a:5a:b2:
2d:73:10:99:81:14:73:b6:26:cb:f6:c3:f8:fc:14:44:a1:b5:
4e:11:69:58:40:0b:a4:60:98:5c:34:0a:2c:1e:6d:99:65:d6:
d5:c8:22:25:09:66:45:dc:84:d1:7f:9b:15:f8:b7:65:1e:2d:
6d:22:01:aa:fd:73:0d:f6:f3:6d:0f:0e:be:cf:d3:1e:41:6d:
e1:e7:3d:47:ff:06:e6:eb:fd:6f:97:41:80:aa:37:29:96:9c:
b0:ef:f5:89:b2:d7:66:37:fa:05:2c:3b:86:88:af:9e:c7:b7:
e4:fe:64:bb:49:4c:da:52:ab:5e:4d:b7:15:24:8c:f6:75:89:
07:dd:2d:ed:e7:b0:1d:0c:86:d3:bf:8a:48:65:3c:bb:f7:64:
e6:ee:fc:2f:4d:ed:5c:13:7d:99:92:ae:30:25:05:0b:aa:ca:
a1:1f:53:8c:62:ae:d0:4c:a9:28:f7:03:b3:00:73:2c:6b:5d:
29:91:32:c6:97:3d:21:46:da:7c:f8:6b:22:c1:18:5d:08:42:
f4:4a:f2:f4:4b:21:68:1d:da:24:41:27:38:78:fb:23:d2:87:
01:85:ca:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:02 2025 by rpki-client