Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier: Oa2hh/Y48Ud7UbRxTOUfUSJE0gKsoO9dCBBuJtFU0cM=
Subject key identifier: 69:03:55:36:18:9F:02:E1:F5:76:92:FE:40:63:84:62:4E:CA:29:D3
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial: 01965E71FA4BB1A6180A571C4937D4FB2DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number: 0E01
Signing time: Tue 22 Apr 2025 17:00:50 +0000
Manifest this update: Tue 22 Apr 2025 17:00:50 +0000
Manifest next update: Wed 23 Apr 2025 17:00:50 +0000
Files and hashes: 1: Symg0jAPVS-ti1ruCDzymyj_CR0.roa (hash: GUIXVLB8gdm1fu+e7gBbFfA+4MoEzWz7SkljoSB1b/4=)
2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: fSMdkiIbfuAWhF2n/TZ8QtfeCLRiAGhsGNY9HfCEgF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:fa:4b:b1:a6:18:0a:57:1c:49:37:d4:fb:2d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Validity
Not Before: Apr 22 17:00:50 2025 GMT
Not After : Apr 23 17:00:50 2025 GMT
Subject: CN=69035536189f02e1f57692fe406384624eca29d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:c5:19:1d:54:d1:20:c0:82:d7:47:04:49:
f3:b6:63:82:ee:41:20:c6:c5:96:71:34:44:18:a7:
a2:59:bd:9a:31:57:d2:18:31:8b:8e:d8:f7:b9:57:
8e:32:bc:cc:15:af:68:3d:f3:90:ba:99:ad:fd:19:
43:94:14:65:07:52:22:58:e6:f0:f5:67:e3:d2:85:
7b:07:c1:58:5f:70:da:14:7b:aa:74:05:16:b3:69:
66:df:e6:00:f7:04:b2:7e:97:34:ac:38:4d:e5:c1:
46:39:9f:e4:e2:e9:61:57:e2:ad:b7:5e:66:48:77:
c4:43:81:1c:4b:63:7b:31:ad:2b:6b:85:30:94:d4:
fb:09:7e:1d:d3:61:24:0a:fc:ed:67:5f:2a:6b:17:
a9:06:55:9c:5c:78:16:48:28:e6:dc:54:2c:b9:13:
82:ab:c7:57:48:36:8d:60:f9:25:5d:50:30:7e:7e:
ae:bd:6c:1c:2a:50:00:48:78:16:96:ad:36:a3:8b:
d4:9d:87:b2:95:99:67:ed:06:cd:d9:f2:a2:85:74:
38:a2:da:57:51:43:bb:c9:ad:52:68:8e:a2:88:d2:
7f:c8:2a:50:c8:79:6e:08:9f:3d:ee:9b:c3:c6:89:
cd:6a:7e:39:ca:7d:8e:64:46:d6:81:4e:48:87:c2:
aa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:55:36:18:9F:02:E1:F5:76:92:FE:40:63:84:62:4E:CA:29:D3
X509v3 Authority Key Identifier:
keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:40:0d:97:40:17:95:28:4b:40:3e:e2:24:5a:6d:aa:55:a7:
d2:90:c8:52:e5:62:fc:04:0d:c2:35:61:3e:0a:f6:19:99:6e:
68:6b:f4:bf:28:19:25:46:4a:50:81:ab:4c:f6:4b:ca:f6:ba:
dd:40:d7:20:07:97:a9:98:62:39:13:e7:0a:c9:45:98:82:c5:
8b:5b:00:3c:6f:f2:78:77:76:52:e0:25:03:bf:5c:47:e4:51:
99:2b:ae:05:61:bf:82:09:55:85:c4:ce:c8:22:22:e4:4f:7a:
bd:9a:97:c9:01:4f:0f:8a:9f:5f:6a:16:c6:80:ac:96:1e:1e:
09:90:29:90:9f:75:59:48:8c:0d:47:e5:cb:ae:20:bb:6d:cc:
8d:98:e3:6b:01:90:00:19:13:79:eb:26:bb:d1:6a:15:7b:61:
19:c2:85:4f:6a:13:cc:ee:c2:72:af:cd:83:9b:91:ab:ae:f7:
de:f4:a3:2e:42:12:ec:25:50:03:ec:ec:70:9c:14:cc:78:b2:
09:e5:1a:c7:c6:48:4b:db:64:22:a5:02:d1:36:e4:ac:0a:00:
e0:c4:0e:60:bb:e0:9a:21:84:fa:99:cd:81:d1:48:e1:dc:8c:
5a:8c:f0:37:ca:e1:47:f3:27:f9:5e:32:a2:f9:d7:f5:4b:99:
25:5d:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:38:14 2025 by rpki-client