Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
File: nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json)
Hash identifier: ixwdmGK2KBZSmClafi+/YaTYpQpc/jtI3IW8acwT4UA=
Subject key identifier: 26:86:44:65:15:86:20:16:AE:E0:A7:C5:0A:66:1F:CD:A7:A9:10:21
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 01964DEC9CC19385D83A23C4BD6D8F190A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
Manifest number: 0FF5
Signing time: Sat 19 Apr 2025 12:01:14 +0000
Manifest this update: Sat 19 Apr 2025 12:01:14 +0000
Manifest next update: Sun 20 Apr 2025 12:01:14 +0000
Files and hashes: 1: B5L5vO55nBhfniljBpOUow8aXpw.roa (hash: DIMd34dyf8uJUIUl3TvafcV9IS2e08ZcTMFZLeGk8KM=)
2: JafDMsZo_2WlBv1_b3upjycXmLU.roa (hash: cGcJ9xKOVuAlrxxUBxsd3T744wFpR+9phZElM6fNzW0=)
3: SHsQx5nLK3je9BRJdGpJA5FmBJw.roa (hash: w1LS0Na0/a/or8fsG3pHVRaGF64EW4fSRED25Ol57DY=)
4: bVTa17baMARG71NZ_lURgWWh_4Y.roa (hash: A1ALFNaBHdD7deqRm4EdGoE1FRnMJSkvg8oyd+Kqmgc=)
5: lkc-0MlfE6wjagT9foeguXGZhBk.roa (hash: Dk9iF0id/HpCNZDFa+BXpH9AMMGx3UOmasYJ8e7rqkM=)
6: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: qK9BX7W3dI0BncVtTdNiG6YeEwq323VqLOiTJZc6CIc=)
7: rfouL44lCXKFlJx3f-T9zbjuGS4.roa (hash: tCYRZzQeGaABrV6yDW5xOTTpQ0NtqSv/VFgzFAs4QHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:9c:c1:93:85:d8:3a:23:c4:bd:6d:8f:19:0a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Apr 19 12:01:14 2025 GMT
Not After : Apr 20 12:01:14 2025 GMT
Subject: CN=2686446515862016aee0a7c50a661fcda7a91021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:72:43:e2:3f:7d:29:f1:f4:4c:f0:37:a9:b0:
c6:c0:b8:14:3e:6a:b4:0c:ea:4d:3b:ad:c3:c5:dd:
d5:5a:ef:61:bd:c7:41:60:87:e7:06:77:27:6b:53:
ae:e6:9b:71:10:4e:cc:a2:04:5d:5a:5b:9b:22:0c:
13:00:60:bb:f5:f0:ea:63:0d:08:a0:59:fe:fa:d8:
95:5c:99:1d:2b:96:25:29:0c:93:54:19:7f:9c:01:
09:8b:66:d7:3a:7a:63:e1:2b:b8:45:33:ec:da:a6:
6f:68:09:08:d5:54:64:c1:69:b4:b2:95:c0:71:ac:
02:93:bf:c7:66:04:71:d4:9f:98:d2:1d:f2:cc:64:
7f:ff:0a:ac:1d:23:40:f5:5d:86:08:5b:e5:25:a2:
03:92:c0:a3:e1:d0:e4:9b:51:76:8f:2b:61:8f:eb:
82:11:1f:b9:c4:36:cf:4e:63:92:ce:92:2d:4c:82:
23:ad:99:59:0a:d0:b1:de:6b:7a:0d:48:e1:ab:f2:
18:04:19:5b:bc:2f:76:87:a6:be:a6:4f:1a:e5:06:
31:f6:75:9b:6e:c6:95:da:8a:81:f3:c7:41:94:9c:
b7:94:30:65:8f:78:7c:e0:3a:a0:b9:52:f0:18:eb:
68:93:22:12:f6:ec:98:4f:3f:df:ab:0e:5c:fe:ed:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:86:44:65:15:86:20:16:AE:E0:A7:C5:0A:66:1F:CD:A7:A9:10:21
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2b:05:0e:26:c6:f0:a1:7d:e7:12:49:68:1b:d4:ad:0f:12:
8c:da:ea:37:ca:b1:18:82:3d:b0:74:03:64:4a:c9:6e:2b:3b:
37:11:ec:cb:c6:9c:d3:5f:2f:4d:64:53:e1:86:f5:84:8c:72:
f3:a6:0c:6d:1a:44:1c:96:7e:f6:fb:d0:93:48:ea:d4:6a:12:
41:47:4d:9a:38:ae:fb:87:fc:53:04:bb:9c:ed:a1:20:b1:51:
ef:49:71:ee:b2:2c:82:e1:84:60:09:64:bd:61:39:8d:3b:d6:
78:12:11:75:07:a2:0c:15:68:8f:77:93:45:d1:62:19:1b:54:
3e:6b:a7:a9:cb:69:ee:6f:1e:2b:22:6b:30:15:98:a4:08:2a:
eb:16:7d:97:77:ad:be:67:ec:ce:d1:86:48:cc:48:3e:f7:59:
99:eb:21:5e:7a:89:75:2a:3c:af:7e:c0:74:97:54:3b:cb:fb:
1d:3b:40:ec:19:8b:f9:35:ec:36:22:dc:8d:93:a2:52:26:59:
ec:bb:4b:02:be:f5:9f:62:1b:eb:0e:dc:45:51:37:6b:e6:2d:
e5:f3:e1:f0:92:a3:3c:92:37:64:33:bb:c0:31:ed:46:ac:2c:
f6:e4:ec:c2:35:b7:d7:01:d2:92:b8:e9:f4:3a:e1:cc:83:40:
44:37:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:20 2025 by rpki-client