Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
File: nkVus5ycwGznHHdUoD8_PwCSgd0.mft (raw, json)
Hash identifier: l+nYPGNj9szCdG78/KubXGvwB8Q36c7yWQk5eMQ9Yrc=
Subject key identifier: BF:91:B6:0E:1F:94:50:A5:6D:1C:82:D9:44:EA:E5:C1:E5:AE:67:28
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Certificate issuer: /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial: 01965123EF3025F4900E978E0F258BCB030A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 03:00:31 +0000
Manifest this update: Sun 20 Apr 2025 03:00:31 +0000
Manifest next update: Mon 21 Apr 2025 03:00:31 +0000
Files and hashes: 1: 0e3XvmLgCCLyXX2Pnl1oUQprG1Y.roa (hash: FMORsyXFiyuBPfP/wfzNQt83A1mlYj2dL5G6obhc0aU=)
2: nkVus5ycwGznHHdUoD8_PwCSgd0.crl (hash: vrKyzPbJFNyuCbSTLp10Kuy1ox/qAbD1kdFtB332gbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:ef:30:25:f4:90:0e:97:8e:0f:25:8b:cb:03:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Validity
Not Before: Apr 20 03:00:31 2025 GMT
Not After : Apr 21 03:00:31 2025 GMT
Subject: CN=bf91b60e1f9450a56d1c82d944eae5c1e5ae6728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:88:9e:ed:d0:67:b0:52:0e:eb:20:3b:58:
7a:1b:79:cd:b7:fb:79:d4:f9:f4:cf:69:d4:94:29:
7e:5a:85:6f:75:9a:29:c0:d6:e6:f1:72:06:31:87:
10:fe:5e:b2:94:2b:5a:37:52:56:ba:90:78:19:97:
20:ec:87:2e:d1:6f:27:06:21:9d:bc:e4:84:51:71:
66:bc:70:2c:14:fd:51:07:7f:e4:bb:d2:fa:4d:50:
30:c3:cb:1c:db:b2:2f:b8:8b:4f:df:94:32:7e:2a:
5f:dc:c2:2d:c7:b9:f4:d3:28:11:a6:34:e2:5d:a9:
08:80:66:12:79:a4:cf:54:4b:31:b5:6c:2e:8a:68:
d9:b7:92:08:8c:7a:cb:3e:38:fa:e9:2e:6d:46:13:
69:8b:0e:21:84:f7:ce:e7:63:27:c0:96:43:e8:cc:
e2:36:cb:28:10:38:78:27:68:73:bb:35:d8:a8:7a:
3b:0f:e4:1a:b0:37:2c:ff:bc:50:f4:1b:9a:81:40:
77:d2:6e:43:24:3c:14:17:52:e5:72:12:07:a2:99:
be:2c:ec:8d:20:f2:b5:7d:02:52:6b:d3:47:cd:de:
27:f8:2a:a2:11:77:4f:e2:82:46:4f:8d:80:24:54:
84:5a:0d:45:b5:c7:df:b7:50:4d:7d:65:c3:a6:48:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:91:B6:0E:1F:94:50:A5:6D:1C:82:D9:44:EA:E5:C1:E5:AE:67:28
X509v3 Authority Key Identifier:
keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f5:8b:90:68:dd:00:68:6c:1d:35:11:e5:f3:26:da:31:ea:
e4:2a:5f:42:92:c7:7a:9d:a7:d0:52:e3:e9:20:ef:9b:f7:c2:
c2:5b:df:30:0e:82:f9:58:8d:d9:1c:0b:b0:85:5a:aa:5e:d8:
b7:fa:98:6f:0d:3c:48:10:9d:04:9c:4d:c6:d9:e7:2c:94:c3:
2b:56:30:ae:e9:b2:01:53:4c:4c:1e:02:a7:ce:df:b6:ae:96:
e7:71:36:80:7f:bd:b9:0e:6e:94:ed:9c:fa:41:f7:2f:5f:29:
87:9d:03:e8:c3:90:6d:03:f9:c9:e5:a5:ba:84:31:7c:c9:7e:
e9:e6:5f:c2:bd:91:8f:64:13:fa:e7:e2:dc:18:76:10:fa:e6:
b8:25:ba:5d:36:f2:d2:5e:3d:c0:cc:d0:e2:cf:d5:35:7b:80:
7a:77:cd:81:9a:c7:90:83:e5:bd:2a:fe:d7:56:d0:f3:2a:15:
fd:52:ba:d3:92:12:dd:ce:61:b9:73:ee:2a:d9:14:e7:25:c7:
91:82:19:8d:20:4b:cc:28:31:78:a5:d9:2c:b6:a8:72:75:1d:
ad:1b:99:a5:b0:97:26:20:59:9e:44:81:cf:ea:05:e0:02:35:
cd:67:9a:04:41:3a:c6:ac:d8:5f:b7:f4:3a:3a:67:18:27:b6:
ff:22:84:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:01:56 2025 by rpki-client