Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier: /9vgJ6Jp5SwzQ9CY5PLgTGgyVeahdytGnKn+21AYHjk=
Subject key identifier: 0A:94:5C:73:95:3E:C9:11:91:EE:4C:4B:FF:9A:64:F3:23:05:5C:25
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 01960B30A01E13339C44D6FC4291D2056F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number: 0BA8
Signing time: Sun 06 Apr 2025 13:00:58 +0000
Manifest this update: Sun 06 Apr 2025 13:00:58 +0000
Manifest next update: Mon 07 Apr 2025 13:00:58 +0000
Files and hashes: 1: MxLcAgXC0vRpPyT-3NXtB6NlTcM.roa (hash: glwD9i/+OFABXNduZaHp2v7di44Ewcx6kWVCmGzy8h8=)
2: g1QBI0oBpZMDfLnVbzlJh58dtno.roa (hash: DThH0UYff9JRlzHoLRkutIVBWjbtodZbQuiDh8h2xSo=)
3: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: E3vu+++i5O1M+agxNT8fuwlaRT/tFS6pz1E9HSzplPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:30:a0:1e:13:33:9c:44:d6:fc:42:91:d2:05:6f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: Apr 6 13:00:58 2025 GMT
Not After : Apr 7 13:00:58 2025 GMT
Subject: CN=0a945c73953ec91191ee4c4bff9a64f323055c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:f4:d9:20:f8:7a:45:c4:3d:0d:78:06:ac:
d9:51:a8:7c:b6:bb:ac:af:04:cf:6c:7a:03:17:e3:
b7:96:90:0f:57:8b:b3:2f:1f:99:d7:cf:d8:b2:eb:
53:cb:bf:5c:8b:f3:8e:bd:c7:be:c5:36:e5:d9:62:
69:ec:f5:5c:1c:e9:fd:f0:66:42:ac:77:20:aa:6c:
f2:b3:c1:91:6b:59:25:ae:11:34:f4:a3:0d:ba:c3:
3c:74:97:27:e7:8e:9e:d8:18:4c:5b:00:cb:a1:e8:
2f:2b:0a:a6:50:ff:01:2e:72:2f:67:36:58:ac:4a:
1f:e4:df:0f:dd:7b:4c:b7:a3:b6:f5:ee:96:40:f4:
e9:23:0a:f1:bc:cb:6d:27:a2:6b:59:ae:5a:ce:47:
e8:00:4b:15:c3:5f:8b:f1:4a:d4:a5:8a:e1:5e:8a:
72:61:b7:4f:4e:02:26:f8:69:55:5c:d9:0f:d6:68:
2a:ec:79:63:8c:c7:bc:67:91:30:8a:2c:ae:0a:3b:
c6:1f:10:ea:86:f2:b0:70:2f:b0:83:07:6b:63:8d:
b3:61:54:ba:93:77:24:4f:80:88:c6:8b:92:71:f4:
0f:ae:a6:9f:41:d4:ff:01:6e:20:e8:02:c3:bc:bd:
88:9a:18:cf:bb:1b:8d:20:64:6b:c1:0d:ca:21:2b:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:94:5C:73:95:3E:C9:11:91:EE:4C:4B:FF:9A:64:F3:23:05:5C:25
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:83:b0:98:d8:ef:e7:05:1e:c9:6b:fe:04:63:5d:ac:88:2f:
43:b2:5d:8c:d2:c0:c1:26:3e:8e:44:b9:dd:47:a8:75:93:1b:
04:2b:40:11:96:a4:06:52:7d:da:20:33:26:79:a4:ef:5e:4c:
1f:33:99:db:40:04:f2:33:e8:de:2f:31:19:c6:f2:ec:40:52:
3b:0e:6f:2c:bb:94:66:4f:05:ce:c7:21:31:91:06:94:7e:72:
1e:dd:22:ee:f7:ad:4c:29:31:3d:b6:4f:dd:66:b4:26:85:59:
58:7b:c0:2f:77:fe:8c:ac:72:07:79:a7:a3:e5:b4:61:53:37:
a2:16:d7:ce:69:e0:bc:57:a4:5a:bd:44:b0:5d:71:5f:1b:d0:
74:3c:98:6f:59:4b:1c:f4:4b:f5:57:b0:76:c9:4f:6d:43:da:
76:ed:15:03:8d:23:35:91:67:31:6c:12:cd:3a:50:4c:66:6e:
cf:28:13:22:7b:51:a3:82:fc:24:bd:1c:7c:b0:4b:c3:28:5d:
c8:ce:96:08:fc:b2:6e:6e:bd:1e:b1:82:58:21:4a:13:3c:94:
a4:b1:94:cc:05:77:c1:3f:d8:36:0f:07:ca:8e:7e:b7:b1:8a:
b9:4b:d8:8c:a1:04:41:55:3a:8a:90:d2:eb:c1:07:3a:61:af:
d2:c3:7c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:53:33 2025 by rpki-client