Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: /NiPEwuh895tJ64wAAPDwmeyQ0UwGWSScjdJfGmo6ok=
Subject key identifier: C9:90:F7:CD:2D:BB:49:99:9E:D6:7E:8F:AA:74:D2:37:69:6D:98:F9
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 019629A9467B53E5265E583B58F2EE4F30B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 14F0
Signing time: Sat 12 Apr 2025 11:01:21 +0000
Manifest this update: Sat 12 Apr 2025 11:01:21 +0000
Manifest next update: Sun 13 Apr 2025 11:01:21 +0000
Files and hashes: 1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: ozHoBE2FuHui4v5UERXkc2XR5V9P+OCwzrb6oY7Dqhw=)
2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=)
3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:a9:46:7b:53:e5:26:5e:58:3b:58:f2:ee:4f:30:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Apr 12 11:01:21 2025 GMT
Not After : Apr 13 11:01:21 2025 GMT
Subject: CN=c990f7cd2dbb49999ed67e8faa74d237696d98f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:4c:d5:0f:1f:71:1a:13:21:8d:da:39:46:
79:d5:cc:95:d6:e9:a5:7e:eb:ff:43:0d:13:b9:2c:
1d:98:28:21:ca:2e:6c:94:35:4c:94:61:70:99:85:
b8:a9:cb:17:22:de:72:02:b5:53:be:c6:55:6f:c6:
a3:ed:93:92:16:75:39:8d:53:0d:bb:90:4e:25:ab:
b2:a8:ce:05:d4:82:d2:6a:89:dd:62:98:d2:c2:26:
96:4b:85:31:d2:78:52:59:53:91:15:2d:de:dc:0f:
dd:06:c7:bf:91:bb:17:19:41:8f:93:2b:f2:0c:0f:
ac:2d:69:4b:16:f9:c6:d7:3e:a3:08:a1:2f:1a:b8:
6f:a9:07:68:9e:04:ff:6a:78:ef:74:8d:cc:45:86:
de:ec:04:40:70:2f:81:11:d6:bf:cd:ae:3b:00:ee:
c5:61:7a:45:dd:b9:ab:40:0d:a0:bc:97:f4:69:74:
ef:30:57:17:01:d0:79:26:db:83:81:2d:74:e0:69:
93:87:44:bc:78:8e:b9:c4:28:7f:e6:ed:65:a6:28:
f6:34:98:ec:80:b6:12:98:f3:82:95:df:67:60:06:
f3:8e:31:72:b6:a6:1a:20:14:14:81:1a:cf:94:84:
39:63:3c:3e:53:5d:f7:60:4f:ca:f2:e5:c8:28:8b:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:90:F7:CD:2D:BB:49:99:9E:D6:7E:8F:AA:74:D2:37:69:6D:98:F9
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d2:b8:ef:bb:00:33:af:60:70:67:3c:70:f9:12:7d:2a:92:
3f:bb:8e:d4:8b:49:a1:88:e1:6e:be:96:7c:d1:82:c7:e6:70:
25:1a:99:db:f5:ec:31:21:34:d0:e3:a5:f4:09:fa:ef:b6:e3:
37:17:0f:66:25:df:15:67:3a:20:23:53:2e:9d:dc:24:f8:30:
07:06:77:f2:f8:ea:f0:ee:ed:71:13:df:41:52:22:eb:cd:3c:
44:c3:de:b3:72:3b:05:df:6f:46:7d:16:3d:8c:cf:98:9e:bc:
11:bd:ab:da:15:48:88:6c:e1:df:c4:9f:08:d8:fe:8b:53:9c:
60:27:d3:18:05:60:46:8b:4d:60:8e:12:07:61:39:c9:0b:d1:
c0:ec:c1:db:c7:ad:d6:f3:0a:37:74:e4:d0:d0:2e:c2:f9:d9:
be:24:4f:66:57:b6:ed:db:2a:e3:12:ef:d5:6d:8f:4a:04:99:
bc:de:5e:12:83:e6:cb:c3:38:b1:e4:29:b0:c3:ca:42:99:ba:
7f:8b:e3:41:1d:2f:53:10:73:1e:61:22:57:c8:77:c5:8c:9f:
0e:59:98:0a:98:67:25:5e:84:1a:27:87:aa:a6:33:cc:d1:9c:
d9:7c:15:66:a1:c2:4d:53:ae:18:4c:b4:0b:29:3b:68:39:7b:
b1:02:67:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:47:49 2025 by rpki-client