Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier: 0wHOvz1D+gv/aZ/XoRdG1apdrFHJhIHFyxs8AFkP6aY=
Subject key identifier: FE:21:5E:93:10:6B:35:79:47:73:CD:DC:2F:AC:40:D0:C2:13:4C:F5
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 01965613634727E19908164BA6E7AE3AA128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number: 0206
Signing time: Mon 21 Apr 2025 02:00:33 +0000
Manifest this update: Mon 21 Apr 2025 02:00:33 +0000
Manifest next update: Tue 22 Apr 2025 02:00:33 +0000
Files and hashes: 1: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: kYmBcBzYSgYkOtNSbz16wAcdH0VV+kRz9L3w7mqlJlg=)
2: RcZOQzwVPzta74FZUHn3H3BrDfw.roa (hash: V0krQJ1xo1MEn7oEhb7Dh/z9l1NykVrobd6V77UbzAQ=)
3: _ZjRtovsCOJczXTJb78gNEIXWRA.roa (hash: o+YLeLrWzFxVnwd97MbT9/S72tuJZDl5Wl2Z8cJ7fEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:63:47:27:e1:99:08:16:4b:a6:e7:ae:3a:a1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Apr 21 02:00:33 2025 GMT
Not After : Apr 22 02:00:33 2025 GMT
Subject: CN=fe215e93106b35794773cddc2fac40d0c2134cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:9c:45:e1:f1:2c:60:e3:16:fe:e6:a2:bf:
43:0e:a2:bb:9b:cd:40:f7:68:94:f5:67:90:76:84:
00:ba:70:52:9e:a0:bc:35:fc:4a:0c:fa:32:bc:1a:
9e:ff:02:06:73:27:ff:d4:4e:b1:06:1f:1a:cb:b4:
31:c1:0a:fa:b7:5a:74:f5:09:3a:69:87:07:b5:3d:
36:0e:bf:1e:7d:2b:41:3b:78:50:35:b0:06:0f:31:
97:d2:5e:ed:cb:b8:b3:a1:0d:c9:47:03:b2:50:82:
57:22:e8:a8:b2:4c:03:09:3f:44:73:66:bb:ec:06:
fa:67:7f:8e:8f:95:88:9c:e5:ef:21:c0:18:e6:dd:
00:01:8d:8b:72:41:f4:79:55:cd:aa:bd:1f:07:be:
f6:e0:82:21:eb:33:08:8e:7e:e3:e5:14:84:3e:c4:
ca:39:3e:69:8b:1b:33:ff:f1:a6:af:70:2b:5f:a6:
11:c9:55:aa:10:4e:06:2e:7c:8d:81:61:1f:87:d4:
30:ca:9d:3f:8e:74:9e:c0:50:c3:2a:d3:0b:87:31:
28:b2:32:9d:67:76:c0:cc:bb:8b:01:62:d4:1f:a1:
c3:51:d4:d7:45:9c:00:ba:41:b3:26:34:45:c3:b8:
1b:11:e2:10:ed:d6:9d:6a:f9:c8:73:7b:c8:4d:65:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:21:5E:93:10:6B:35:79:47:73:CD:DC:2F:AC:40:D0:C2:13:4C:F5
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bc:fd:52:33:27:8d:90:61:3b:82:e4:db:d9:c8:71:4a:eb:
cc:8e:02:3b:f1:e9:2d:f4:b7:a4:cc:d4:10:5d:f6:5e:8b:87:
8c:4f:4d:6c:73:1a:42:11:a9:97:20:70:7a:f1:fc:d2:38:f5:
06:28:ba:7d:95:9d:eb:5e:3b:59:7d:d9:e3:f9:99:fc:2f:4d:
8b:f6:1c:be:b6:6a:19:5f:e5:a7:9f:c2:63:05:48:33:1a:d5:
dc:e2:74:0d:f7:62:85:82:a5:76:2c:9c:ae:a2:9a:fd:c4:2a:
c4:a5:55:40:e6:83:68:3a:38:87:6a:35:c3:ca:ff:b5:1c:a9:
71:7a:88:c3:ae:9d:7d:17:86:eb:d0:49:e6:c7:b9:17:29:a4:
67:69:8f:6d:f3:f4:7c:3b:11:93:5e:35:f7:34:ab:22:42:7f:
51:1a:a4:d9:70:b7:3f:cf:a6:d2:77:6c:f7:0d:dc:af:ea:3c:
b8:e1:b2:d9:f0:be:a7:d0:68:ed:56:3e:dd:73:8c:80:c9:0a:
cc:c6:2a:4a:59:65:01:94:45:9a:6f:01:70:10:b4:64:ad:ca:
ea:58:bb:cf:7c:15:26:55:7b:2a:f8:ec:89:3d:00:3b:1b:51:
67:cc:e6:02:46:a8:b3:72:f8:f0:20:40:ac:23:77:81:f2:b0:
14:37:2d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:00:10 2025 by rpki-client