Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: XfVFAF0y+Kj9TDivAqMbqgijDNkNIXcpuY/8IKW/YAw=
Subject key identifier: 0F:C1:3C:31:81:07:4B:3B:AD:B8:CA:7B:65:AA:B3:E5:F4:DF:52:5E
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 01964A0FB6212E9FD5F02DA1ED391E7FEF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 09EA
Signing time: Fri 18 Apr 2025 18:01:05 +0000
Manifest this update: Fri 18 Apr 2025 18:01:05 +0000
Manifest next update: Sat 19 Apr 2025 18:01:05 +0000
Files and hashes: 1: dOMaomaM3zc_oZf2l_KGgZkjQjM.roa (hash: ZA8CPvYUiDN0MdAy8uYPcmT72kE+r1MAEa1eMhF5nMk=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: Lp6lIOtYLyLdPjvPJH6YF5eNHPjXZgTji2Q+FHxMe4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:b6:21:2e:9f:d5:f0:2d:a1:ed:39:1e:7f:ef:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: Apr 18 18:01:05 2025 GMT
Not After : Apr 19 18:01:05 2025 GMT
Subject: CN=0fc13c3181074b3badb8ca7b65aab3e5f4df525e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:b1:09:bf:07:f9:62:e2:4d:8c:d9:fc:5f:
51:31:f7:b5:fc:4e:aa:75:19:85:ee:e4:f4:d3:12:
7b:83:63:de:9d:92:60:e9:77:1a:62:74:14:e9:27:
52:d3:28:41:c3:3c:e0:17:3c:e6:5f:20:11:fd:f5:
43:06:3f:f4:34:5f:a7:2e:06:8a:b8:00:64:6b:00:
b5:7a:fb:e8:53:1f:fa:20:3f:cf:59:9c:e4:7a:1f:
e4:48:b2:6d:dd:93:78:41:42:29:77:3d:cc:ad:5c:
82:00:90:e1:2e:fb:c4:5b:11:e2:8a:1e:1c:b1:13:
b9:b2:f0:3a:db:f1:07:84:df:be:17:e6:d0:70:13:
de:18:ee:76:13:58:ab:de:1c:82:38:46:f2:93:72:
3d:c0:2a:08:d1:aa:a0:b5:16:4d:ec:59:f6:36:71:
22:c7:ab:36:96:9f:94:c9:9e:0c:4d:02:00:a2:2e:
d4:21:85:20:79:4e:8b:59:90:55:59:a0:29:42:5c:
58:54:4b:18:9c:e9:d5:b5:22:88:f9:92:dc:86:7a:
9f:ad:e6:e5:f3:ad:fb:7c:26:62:f2:7c:59:12:66:
85:c1:03:2f:f0:bb:40:9e:04:ca:d1:35:a5:aa:41:
e4:c5:03:a5:c7:3f:fd:0f:ca:29:24:6b:51:af:6a:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C1:3C:31:81:07:4B:3B:AD:B8:CA:7B:65:AA:B3:E5:F4:DF:52:5E
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:61:ea:00:23:f9:7a:7c:88:c5:75:e5:f9:3d:c1:9b:78:9f:
b4:54:8c:f3:d8:cf:14:fe:53:c7:1f:61:b2:6e:b3:cf:e8:50:
25:02:97:82:90:83:ab:f0:94:4c:ed:17:c7:5a:e5:ff:c6:1f:
24:72:84:9d:60:ab:5e:29:ad:1c:84:a2:5c:54:b7:84:1e:1a:
ab:4b:b0:d3:7c:9e:11:ab:75:48:f3:d6:c9:2c:32:90:95:70:
ce:0b:bf:e8:84:1d:ad:79:ba:b9:a2:22:5d:22:98:87:68:0a:
d2:9e:4a:ca:ec:e9:94:c9:8b:d8:90:f7:b3:ce:8f:93:db:df:
99:6b:45:7c:72:b0:77:79:be:c3:f2:7c:01:4a:f1:80:81:f4:
07:fe:55:90:ca:62:49:b7:52:4b:2c:af:66:3f:5a:42:8f:07:
df:30:d2:6c:25:9b:2f:2b:cf:08:c5:33:61:82:25:cb:23:79:
63:4c:27:d0:19:52:45:21:5b:ca:d9:72:89:05:0d:78:1d:d4:
90:1e:cb:cf:ba:9c:4d:00:75:60:99:20:5a:a5:0c:65:2e:d5:
f7:4f:96:19:d2:6e:bf:20:bd:5a:7a:78:7e:72:52:da:c0:e8:
94:a7:b0:2c:dc:82:e2:b5:81:86:e8:c9:13:fb:e0:f6:57:c3:
dd:56:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:36:59 2025 by rpki-client