Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: FSktXpM1W2cPqNmdfbYgZOuSwOYjA06lAupaztaadhw=
Subject key identifier: 4F:7A:5A:F7:72:6C:59:8C:F4:2D:51:9D:AC:15:09:13:79:E4:C6:83
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 019658DDBF0628C6C6491268E98C323FC1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 05C6
Signing time: Mon 21 Apr 2025 15:00:49 +0000
Manifest this update: Mon 21 Apr 2025 15:00:49 +0000
Manifest next update: Tue 22 Apr 2025 15:00:49 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: bL251mnQ20lFOpjnaxmwE99NctaT+LrsHd/MNHq5B/M=)
2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:bf:06:28:c6:c6:49:12:68:e9:8c:32:3f:c1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Apr 21 15:00:49 2025 GMT
Not After : Apr 22 15:00:49 2025 GMT
Subject: CN=4f7a5af7726c598cf42d519dac15091379e4c683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:b7:c3:3d:a4:b4:c0:dd:13:8b:09:20:35:
b5:cb:21:53:55:64:ea:f2:a9:4d:11:cc:be:58:80:
66:9a:80:4a:99:02:5b:5c:c7:97:6d:cb:26:c4:41:
83:c5:2c:82:57:7d:b1:dd:48:a3:53:5b:b0:6c:21:
99:b4:49:8e:af:d1:cd:08:d4:f5:a1:94:42:ab:90:
25:e3:3a:8e:f4:98:89:06:90:56:79:8b:35:f1:de:
b7:9a:4e:28:45:14:89:ac:a1:e4:a4:71:56:6a:d1:
51:02:a0:56:0f:7c:ef:83:a5:f5:35:3a:7f:c9:4c:
07:27:8b:70:bc:9f:c6:5b:ae:15:22:91:80:c5:b2:
02:54:c3:90:60:c2:a5:07:9f:41:94:7d:36:d1:7f:
a7:98:ef:01:1d:ec:83:1d:d6:10:27:f5:90:e7:5b:
f3:90:24:59:ec:e3:e7:c0:19:29:ac:8b:7c:1f:50:
d4:3c:fa:49:ca:fb:d2:e8:e7:80:33:0c:09:0a:55:
55:bb:57:fd:3b:2f:04:ee:9f:97:e2:df:04:1a:d5:
2d:93:c2:a2:44:ce:7b:4a:ca:dd:a7:ba:b2:a0:64:
8d:49:c8:25:4f:5a:54:16:6e:05:36:b1:92:de:ac:
81:e8:cd:e8:cb:0e:93:82:9b:3a:2c:be:58:12:77:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7A:5A:F7:72:6C:59:8C:F4:2D:51:9D:AC:15:09:13:79:E4:C6:83
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:95:20:94:0d:ad:a8:4a:18:d8:64:e8:0f:c8:e1:e6:76:ee:
c3:61:e8:5d:59:58:fc:bf:a7:9a:23:8b:0a:c7:c0:08:89:75:
13:0e:08:da:c8:9c:50:81:f8:38:30:45:67:5d:7f:fb:97:1d:
6f:22:11:26:d5:53:70:4d:de:47:56:d4:db:94:17:af:d5:df:
53:08:d8:e6:e4:4e:76:a8:6e:3a:6e:cb:88:ce:d4:3e:40:56:
43:d6:33:14:90:ec:94:89:24:54:27:8b:38:bb:3c:d4:23:d5:
8a:66:bd:93:65:08:8a:53:90:3d:8a:2f:25:6d:1f:96:01:ba:
e3:3a:73:62:6f:15:29:09:81:78:81:53:b1:52:36:71:a0:8d:
58:20:c2:e4:8f:4e:a2:6f:3c:77:b3:bd:b2:1f:33:8f:0f:4f:
54:16:79:5c:93:07:24:78:9c:8c:d7:e4:15:a1:5b:53:fa:6c:
02:c3:43:25:c3:df:e4:2d:44:bf:02:17:6c:81:5e:e0:66:e1:
6b:e4:f9:64:7c:d0:c1:31:ba:20:f5:7d:f8:38:af:92:27:ec:
62:28:6f:52:e9:24:20:f2:92:5e:15:15:dd:f2:a3:15:d6:ba:
08:52:f8:59:91:25:47:d5:84:ea:6d:c4:2c:a4:d1:c8:5a:9d:
b8:ff:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:49:49 2025 by rpki-client