Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: Cx1htfCRDwTXTYsZDo/Q/QTF+ifS5PjvCCtBnOnoUKg=
Subject key identifier: 78:36:DD:1C:1A:8D:3B:A3:87:9F:0A:37:23:92:DA:DD:DD:26:00:0C
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 01965C8320B40C9BB8B271179C6B5551D5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: F4
Signing time: Tue 22 Apr 2025 08:00:19 +0000
Manifest this update: Tue 22 Apr 2025 08:00:19 +0000
Manifest next update: Wed 23 Apr 2025 08:00:19 +0000
Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: gSv8z/wWPTdkyLGbAdg58pS01SBiWGrH86xG5Dap47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:20:b4:0c:9b:b8:b2:71:17:9c:6b:55:51:d5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Apr 22 08:00:19 2025 GMT
Not After : Apr 23 08:00:19 2025 GMT
Subject: CN=7836dd1c1a8d3ba3879f0a372392dadddd26000c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:74:4c:f1:28:8a:75:61:e1:e4:1d:6a:41:
bd:7f:21:4f:1f:c0:fa:f2:0e:09:4a:11:f5:e6:b7:
54:67:a9:92:c3:96:6c:fb:3b:53:ff:12:07:73:2a:
a6:b6:ce:6b:f0:79:6d:c9:60:8d:b5:28:62:7c:4f:
9b:6a:a8:be:ea:78:3e:f4:cc:a0:2e:76:40:39:c9:
f3:67:a7:eb:ad:08:63:cd:5c:54:cd:47:7e:7b:cf:
c3:2f:b2:f8:75:a5:37:67:af:97:44:5a:30:44:3a:
f5:2e:90:dc:f5:bf:1d:98:20:7e:b2:2a:f1:2d:e8:
c1:dd:57:57:8d:9e:80:ff:a7:19:0a:e5:33:90:d5:
da:20:8d:fc:cb:8e:03:e4:df:1c:40:a8:fa:8a:47:
f1:c3:5b:c7:17:81:e3:5a:2c:b3:14:5f:9c:d4:a7:
9d:45:4a:b0:1c:ec:db:16:4c:a2:0c:30:ca:59:35:
da:f7:f4:61:14:7b:81:e2:dc:81:39:6b:bb:be:e4:
9d:2b:cc:78:e2:66:82:99:04:4d:e9:e0:7c:8b:c7:
b4:9a:9d:cb:df:ef:52:be:1d:cb:82:16:39:0c:fd:
7e:dc:78:96:f4:a3:43:f9:be:35:df:23:04:c9:0b:
12:90:88:8b:44:b5:5d:c0:8b:e3:36:d1:c4:95:46:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:DD:1C:1A:8D:3B:A3:87:9F:0A:37:23:92:DA:DD:DD:26:00:0C
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:25:2d:04:7c:aa:d4:1e:1b:d2:97:97:68:0a:36:f2:30:ee:
21:1b:1e:8f:bf:42:c7:f7:58:23:37:bd:36:f4:5d:76:ae:42:
42:b5:03:f4:36:68:03:0c:ec:8c:ac:7a:2b:d1:7f:17:0e:1f:
64:c2:b8:e2:9c:91:55:12:36:8c:b8:99:45:e2:39:75:bf:25:
ab:85:1c:3f:61:43:6e:b3:4b:fe:af:58:b9:45:26:49:6c:65:
65:84:5a:1c:cc:ad:c2:63:3c:b9:74:8a:d0:29:fc:c5:8c:9a:
4a:4e:36:dc:00:7e:83:4b:5d:3d:c0:3f:f9:97:39:8c:e6:4c:
98:b9:c0:b8:b4:ac:da:b4:c6:74:28:ce:db:10:e7:19:5b:58:
7d:c6:28:c2:3f:69:77:f2:30:7f:2c:a4:b6:48:9b:c6:ca:64:
37:bd:90:22:dd:77:bf:44:03:50:e6:a6:91:65:cc:3f:41:e5:
b0:53:46:d8:ee:ea:7e:f4:fe:13:fc:a5:81:ab:8d:61:f3:6d:
bc:81:fa:68:e5:92:c8:3c:47:40:87:6b:ee:8d:94:09:75:84:
20:d4:dc:b1:ab:23:37:54:36:39:28:94:99:20:cf:28:88:96:
26:a6:7b:fd:1b:02:21:55:a4:f0:dc:c7:24:3c:95:fb:14:93:
28:48:16:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:03 2025 by rpki-client