Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
File: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json)
Hash identifier: Zc5hM0Iqz2gnlp25mN/eSpHdu1YYA2W3yQox8mDuLxo=
Subject key identifier: B0:FC:8C:A5:77:BF:F0:B1:11:6F:09:E9:B8:CD:A8:9E:08:C6:F9:49
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial: 01962ABBA10D13F383FBA8BAB47BECF99603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
Manifest number: 14E7
Signing time: Sat 12 Apr 2025 16:01:01 +0000
Manifest this update: Sat 12 Apr 2025 16:01:01 +0000
Manifest next update: Sun 13 Apr 2025 16:01:01 +0000
Files and hashes: 1: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: 9k9t06LxUf6KD6FYhuGH+YGnAg0LeQydpioFEmpLRMc=)
2: ZxlhkpSeT22co3ElobaCavDtI1I.roa (hash: RsOVTQimQxoF2zeQAP5zv2htNZo2elUQhLdSPHG+MC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bb:a1:0d:13:f3:83:fb:a8:ba:b4:7b:ec:f9:96:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Validity
Not Before: Apr 12 16:01:01 2025 GMT
Not After : Apr 13 16:01:01 2025 GMT
Subject: CN=b0fc8ca577bff0b1116f09e9b8cda89e08c6f949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:38:ea:dc:97:a3:11:f4:24:93:7e:a1:7d:
7c:48:db:c1:40:fd:5c:0a:57:5c:c8:96:af:7c:e0:
dc:3a:01:35:ac:aa:eb:b3:e1:bf:81:41:59:93:b1:
d3:95:29:d3:6a:28:70:ef:70:2e:cc:53:41:e9:28:
d1:06:ed:23:5d:fb:cf:ee:0a:61:c9:b4:19:de:04:
fe:d6:45:54:1a:62:cb:c8:ff:90:be:96:7f:c3:85:
c2:78:2e:04:f8:f2:f6:05:f0:fc:4a:4c:73:ad:c9:
59:51:c8:b2:61:0b:bd:fa:8e:8d:18:de:45:de:fb:
f3:e4:cd:92:5d:92:38:64:85:ab:29:f7:1d:dd:09:
be:5b:3c:64:85:3f:d8:69:7a:56:8e:45:29:ab:a1:
7c:2c:2e:cb:28:ba:96:6b:c5:70:96:2f:c5:c2:3c:
01:a1:23:3a:57:73:80:89:57:9d:1d:4b:42:8e:51:
ff:ca:9f:8e:30:fa:9d:68:e2:9f:b0:bc:35:4c:1b:
98:6d:d0:5a:fa:ae:fb:15:62:9d:4c:64:0e:d1:64:
7b:f0:69:44:80:4d:2d:0a:df:17:07:32:00:8b:5a:
6d:be:e0:59:9d:a9:08:d4:d5:1c:25:4f:fc:ff:c2:
f8:5b:e4:65:2a:03:24:57:e5:49:dc:d8:88:29:db:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FC:8C:A5:77:BF:F0:B1:11:6F:09:E9:B8:CD:A8:9E:08:C6:F9:49
X509v3 Authority Key Identifier:
keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:1e:48:27:64:66:35:02:cd:c3:dc:5c:fb:aa:3f:a4:69:13:
17:ec:e9:60:63:49:e2:ab:16:3f:d3:e1:8b:5a:0c:c1:5c:af:
04:38:28:be:03:85:2d:3c:80:7a:f7:93:80:58:39:8e:0e:db:
a5:d7:e4:43:b0:12:6c:ee:72:38:e4:f9:dc:b8:c1:38:37:03:
d1:33:77:7b:4a:c7:46:44:08:22:aa:b7:4f:92:9d:76:c7:c1:
3f:7d:6c:22:b3:ee:72:b8:67:16:d3:10:76:d2:12:42:e9:1f:
74:f5:a1:0b:13:55:68:8b:04:d6:6c:f7:ed:d1:0f:c2:f2:71:
ff:56:f1:88:20:ba:d1:cd:09:7d:15:64:46:3d:57:f7:17:c6:
84:78:bb:ed:02:0c:35:f9:5f:3b:fd:56:ea:37:27:cd:d0:9f:
f2:89:67:0d:d1:c6:c2:f2:8e:2f:64:8c:58:fe:08:c7:08:6c:
29:19:76:d2:f1:05:8d:e9:3f:7e:b2:2f:5c:a4:df:0d:7b:72:
c9:af:cd:b6:d6:93:81:cd:fd:12:3a:85:dd:d6:e7:4d:1f:e4:
73:1e:d6:ea:4b:69:a9:e0:8b:c0:5f:35:69:5a:7b:70:f2:db:
dd:42:e8:4d:6a:f2:53:3e:77:76:4c:eb:5a:a4:98:6f:1f:b9:
e4:d1:db:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:05:53 2025 by rpki-client