Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier: H9zfPOX6bZDlF9ZeIhchPmSiFrUqWgFCIsKtDjxjV60=
Subject key identifier: B8:D7:57:8E:FE:4D:A5:EB:8A:B1:1A:4A:70:4C:04:6C:06:23:A3:46
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial: 01965D966866919E8FEEA2D650F3FF9AA84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number: 020B
Signing time: Tue 22 Apr 2025 13:01:00 +0000
Manifest this update: Tue 22 Apr 2025 13:01:00 +0000
Manifest next update: Wed 23 Apr 2025 13:01:00 +0000
Files and hashes: 1: F_kIbrNoezU2xST1IGJ7znM97So.roa (hash: SL4bD3bCY+6YeKuV14y0PigmsFs9RgYCxYhDjlPIAW4=)
2: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: E41xinMW1/94t2OX2TwFnGwl4f/g7N14klCoofjJ4E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:68:66:91:9e:8f:ee:a2:d6:50:f3:ff:9a:a8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Validity
Not Before: Apr 22 13:01:00 2025 GMT
Not After : Apr 23 13:01:00 2025 GMT
Subject: CN=b8d7578efe4da5eb8ab11a4a704c046c0623a346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:85:50:c9:c5:50:3d:c2:29:57:ad:04:bd:
c3:34:6d:91:53:52:5f:ae:0f:c6:72:88:ea:d2:f0:
2a:04:65:c0:33:5a:38:07:0b:30:d0:1b:f5:4d:a7:
dd:de:2c:2d:9d:dc:12:2e:d1:d7:ab:35:74:4c:d2:
1f:ff:96:dd:ae:e2:cf:11:5a:6c:51:69:50:27:af:
d3:0b:20:26:f3:80:6d:35:09:cd:3d:ed:27:82:10:
05:3b:61:c7:54:c8:93:48:61:86:05:cd:0f:3a:69:
f7:f2:48:a4:b6:14:ac:2c:a9:74:c1:24:33:26:d5:
5d:cd:e0:b4:ce:92:d3:a3:28:87:e8:e0:9d:91:87:
6a:fb:dd:9b:ca:a8:c2:cf:3a:98:04:40:07:d1:3f:
f6:cd:9b:75:09:30:ab:53:5f:dc:ff:92:3b:25:3b:
c4:27:30:25:2f:28:19:5d:fa:bb:99:6a:02:32:59:
cc:56:82:47:31:33:97:2e:eb:41:02:a0:0c:2b:fa:
da:50:47:da:e3:2e:6a:fa:5b:7f:05:ff:e8:e8:b6:
9a:ae:17:88:5e:e7:5c:5c:a7:c4:97:e8:0f:69:ae:
ee:82:1a:90:00:73:40:8f:f5:02:f6:d5:99:a6:c8:
a6:37:b5:5e:8a:3c:12:fc:7d:7f:76:84:38:85:ce:
c6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D7:57:8E:FE:4D:A5:EB:8A:B1:1A:4A:70:4C:04:6C:06:23:A3:46
X509v3 Authority Key Identifier:
keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:62:2c:86:3b:fe:8a:0e:fe:89:ab:47:79:95:11:90:9a:e6:
be:26:38:32:b7:d2:42:c7:86:19:d5:e1:ca:fa:b5:f4:bb:24:
32:77:50:0e:82:01:1c:7b:f4:a7:83:1e:cf:ce:f2:e2:7b:ab:
59:0a:c7:5b:11:2a:20:52:0d:3a:f4:69:bc:49:a0:a0:b7:04:
d0:2f:24:35:0c:5b:b7:b3:ad:0d:62:1f:17:50:6b:a8:36:a7:
af:94:5a:ca:36:65:05:eb:03:b1:d8:9a:02:a2:98:14:c1:7d:
99:ca:fa:d6:51:d5:5b:af:52:ae:b2:d3:e8:5c:e2:5e:c4:fb:
2d:23:86:16:b6:c3:45:73:28:c0:9f:d7:86:6c:d7:42:99:86:
f0:7b:3e:ed:fa:cd:46:65:f5:77:43:8b:ef:e1:bf:3b:38:54:
44:4a:6c:4c:c8:16:ce:7b:f3:00:24:03:fc:8e:6e:76:b6:2d:
ab:e9:15:7c:cc:87:5b:52:64:65:e8:f8:5d:89:0a:4d:bd:89:
e1:0e:2a:26:e7:e3:a7:89:01:2f:16:81:97:f6:12:a2:ef:c8:
e3:79:48:99:52:d5:4d:64:9e:6d:af:84:90:98:c3:e4:77:1b:
12:c2:d4:37:f7:86:0c:00:96:94:37:b9:46:3e:d1:f0:0d:96:
2f:f9:f5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:42:19 2025 by rpki-client