Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier: scBPbaoInYZF6bHwYSe1JQp1CTtecDc3yHgliVZc4Cs=
Subject key identifier: BD:EE:23:EB:CE:98:5D:8E:79:40:F8:0C:7F:C5:D8:EA:D6:39:6F:64
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 01960A54F670D3085940751B8DB7560F3322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number: 14E4
Signing time: Sun 06 Apr 2025 09:01:02 +0000
Manifest this update: Sun 06 Apr 2025 09:01:02 +0000
Manifest next update: Mon 07 Apr 2025 09:01:02 +0000
Files and hashes: 1: EOilBiIenaox7njpqs3_DfcHwlA.roa (hash: fzNbr06IBLk41vJ4PfPSo6OIziKfU6CFjSqPnCza+iE=)
2: SrPm1i3skuiVEboXgAOiwvJ0e24.roa (hash: yv8h4FDHS+rMOcdFcyHu/1yEMbW/iUuOt5Oggkr9ddY=)
3: mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa (hash: xqGJM6N0Wj7tHelbHPs6OohD0rdA/bMhZJppwS9pXD8=)
4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: 3vjUPJVui0zW1wQt0khgvc5/2g2hVQNHWbZ0aM2Ig6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:54:f6:70:d3:08:59:40:75:1b:8d:b7:56:0f:33:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Apr 6 09:01:02 2025 GMT
Not After : Apr 7 09:01:02 2025 GMT
Subject: CN=bdee23ebce985d8e7940f80c7fc5d8ead6396f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:53:19:78:ed:22:0f:26:ed:b0:d9:76:df:
60:70:ac:9a:72:2c:d3:01:ae:e5:02:6c:85:90:bd:
43:fc:a9:89:8a:e4:f4:75:78:7f:7f:01:66:68:78:
8e:d3:a9:e0:3a:b3:54:d8:87:f8:e1:3a:44:31:c1:
07:2e:41:0a:c9:bc:7f:59:44:a8:8b:a2:c6:04:af:
4b:16:e1:f8:39:20:a6:6b:53:e6:94:53:49:80:d4:
a5:a6:a1:b0:06:bd:2a:bd:d4:62:c9:d9:79:9e:dc:
4b:92:00:23:4b:44:a3:1a:eb:c7:99:1d:5c:ba:40:
ed:6d:ed:fa:6e:6f:ec:07:d5:76:a6:78:cc:93:c2:
24:5a:6c:71:fe:1d:56:47:35:43:e9:27:2c:16:89:
83:00:41:7e:2f:43:e0:72:a9:69:2a:28:ae:52:d3:
22:16:14:06:ff:a3:af:ec:18:82:a8:bf:0d:41:6f:
03:46:ab:17:e3:56:a7:45:1b:44:70:c1:ec:83:6d:
00:4f:a5:af:03:76:ce:30:a2:e1:d6:ac:18:d5:29:
a4:39:8f:e1:ed:a3:4c:88:74:c9:f8:92:17:f5:cf:
dc:1e:84:10:9e:87:50:10:7f:70:76:1e:67:ca:36:
8e:87:a2:46:22:31:19:5f:e4:bc:2b:24:58:a7:67:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EE:23:EB:CE:98:5D:8E:79:40:F8:0C:7F:C5:D8:EA:D6:39:6F:64
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8a:27:66:66:4a:a1:b2:13:92:86:ea:45:ea:26:27:d0:0b:
ab:a2:14:7e:58:70:f0:bc:74:b3:ab:d0:2e:de:2f:dd:2a:97:
b7:bc:8d:4e:f7:47:68:c1:52:79:f5:a0:e5:eb:86:e9:6d:b7:
00:85:6c:96:47:e6:04:16:f3:dc:48:a7:91:0a:19:64:39:0e:
db:dd:15:d8:93:ea:2e:fa:9f:92:6e:1e:5a:5d:e2:13:84:0e:
99:da:f6:db:fe:b3:4b:a9:a6:20:e3:b0:7d:9c:90:de:f9:b5:
53:0e:d5:a4:85:3a:fd:25:03:1f:d8:37:ac:1a:a5:d8:74:cb:
71:00:e3:cf:87:15:44:77:03:24:51:e4:af:5e:d4:d0:d7:22:
2c:fa:e3:28:af:78:bc:42:0b:88:4c:d1:36:75:65:af:9f:f4:
52:d0:6e:66:9a:81:d4:a7:27:8f:bf:2d:3c:13:6b:68:87:38:
bd:6f:44:40:d0:b9:80:9c:72:07:63:c6:1c:7a:c7:16:58:36:
62:4e:0c:97:14:e7:8c:ae:79:b8:34:97:d5:21:08:d5:b3:57:
27:1e:17:34:be:34:2c:af:c6:6f:1a:f2:da:25:49:e4:e4:a5:
1c:d3:f6:64:c5:29:bc:74:35:a5:8f:28:ec:a9:6a:84:76:39:
c3:e7:6c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:39 2025 by rpki-client