Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: zr7r03dwZMG/eXNqyIZCTry14/ss7pKRzxKOQx83II8=
Subject key identifier: DF:94:41:9A:6D:40:C7:F5:A3:65:1B:00:EB:CB:1B:67:39:3E:B2:D6
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 0196556E4F374ECC033A43914DE982AE5769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: 018A
Signing time: Sun 20 Apr 2025 23:00:14 +0000
Manifest this update: Sun 20 Apr 2025 23:00:14 +0000
Manifest next update: Mon 21 Apr 2025 23:00:14 +0000
Files and hashes: 1: bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa (hash: EJPg3LL1a0LdpJ0FryPnZdGj4+/hRiOP31APEGYRAlc=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: ZBxkO6r7oDYrVnjN+tX/eVCX6rxSc320dcx/9vEgGFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:4f:37:4e:cc:03:3a:43:91:4d:e9:82:ae:57:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Apr 20 23:00:14 2025 GMT
Not After : Apr 21 23:00:14 2025 GMT
Subject: CN=df94419a6d40c7f5a3651b00ebcb1b67393eb2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:62:f3:8f:10:1c:45:1d:06:b0:e5:b2:09:9c:
14:07:f1:b9:4b:62:8d:f7:55:92:66:8d:a0:18:2f:
04:0f:9c:9e:9c:13:28:05:d8:9e:f7:0c:0d:e6:90:
29:35:05:87:df:82:cc:69:46:19:33:6e:67:66:d6:
86:66:0e:86:e6:22:01:4e:18:8d:37:eb:9d:55:60:
60:bf:21:a2:25:55:2c:8d:70:ed:10:25:e1:69:ef:
63:8f:bc:91:06:61:8a:47:ce:51:18:ff:e6:82:32:
a6:13:c3:30:67:cd:61:a7:36:7e:17:be:50:d3:fd:
6d:c0:a6:4b:cb:24:c6:3d:fe:8d:9c:52:e0:ca:cb:
19:c3:e4:44:80:3e:ab:72:8e:44:8a:ae:64:70:62:
bc:b1:ea:14:0d:6c:2c:04:93:3d:0c:0c:6a:b3:48:
06:8c:d5:12:b7:38:21:9e:2b:e1:c9:e9:a8:51:51:
7c:e9:06:17:30:46:e4:68:95:da:7a:07:14:e0:86:
13:37:89:b4:f0:15:b8:c1:ce:a3:8b:89:2e:22:0b:
b3:76:ec:c8:e7:29:3a:60:4b:16:52:4a:c3:68:b1:
e6:34:c0:de:b6:2a:ef:fa:c7:9a:db:3e:90:a4:fa:
13:25:4c:99:82:ee:aa:30:e4:93:ca:01:b3:8e:0a:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:94:41:9A:6D:40:C7:F5:A3:65:1B:00:EB:CB:1B:67:39:3E:B2:D6
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:45:ce:e9:75:2e:bb:63:65:af:bc:d9:c8:d1:15:40:25:e5:
2b:1b:06:07:80:fd:6e:ce:d1:b4:37:07:48:95:27:33:4a:99:
f8:a6:c7:b4:59:3f:93:6e:a3:c3:54:fc:a6:87:e1:7d:50:38:
01:10:4e:7f:18:3b:b2:f3:27:58:4b:8b:d4:ba:a4:d4:f4:98:
af:9f:b8:ff:10:d0:58:33:65:06:f2:bd:85:45:8b:20:2d:5f:
c5:6f:fe:14:5b:d9:e2:df:97:1b:b1:ba:64:5d:3c:6d:9a:17:
af:23:a0:ad:50:58:60:7c:8c:fb:ad:96:c5:12:05:75:6c:c6:
f2:7e:5e:69:9e:38:19:c8:94:24:c3:bd:55:d0:19:ee:94:1b:
6a:19:b1:66:d4:c7:27:40:c8:42:81:51:e2:c9:4d:06:80:e8:
0d:71:28:70:01:07:91:ed:d8:00:25:8f:d0:4b:08:16:e3:c0:
45:b0:d3:1d:8e:72:17:ac:31:92:6b:3e:b8:43:0a:63:dc:07:
7f:ab:d0:1d:82:38:f5:97:ee:82:87:57:c1:1a:94:2a:74:4f:
44:70:e3:01:62:fa:30:6a:3f:43:26:02:af:c4:9c:f6:35:de:
9b:1e:33:fd:55:b1:da:f9:eb:77:7a:5c:c6:b5:84:b3:85:3e:
89:14:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:47:17 2025 by rpki-client