Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: wxtccnDeOEHT/uDtwLSbCVVvKFtSlxX2esdE1/bmeEE=
Subject key identifier: A4:9A:23:17:69:20:D6:4C:48:F3:E0:4B:1E:0B:E5:39:B7:CC:F4:07
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 01958BF288AD1E1C1913B9E23018028C27FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0808
Signing time: Wed 12 Mar 2025 20:01:22 +0000
Manifest this update: Wed 12 Mar 2025 20:01:22 +0000
Manifest next update: Thu 13 Mar 2025 20:01:22 +0000
Files and hashes: 1: JY_1PGRtW2cwmX0NWILz4PaMA8o.roa (hash: AxD4kbD5rAUUpHE8TMidnBB9N4smWhsO8xiIIFzpjU0=)
2: Vsn3jYRWMir2G2-W8jrydR_iJwk.roa (hash: +JLCfjRT9K7qAkhsFi/9o8pUTPcML+dFZemwYUpHZ7U=)
3: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: e1YfE1HsoaqP6iSqmSmLDwi9fD9r3v+M7BHwIoSTmTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:88:ad:1e:1c:19:13:b9:e2:30:18:02:8c:27:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Mar 12 20:01:22 2025 GMT
Not After : Mar 13 20:01:22 2025 GMT
Subject: CN=a49a23176920d64c48f3e04b1e0be539b7ccf407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:64:64:c6:b3:73:28:4d:97:9d:f1:31:f8:
73:ce:e8:f9:16:7e:4f:d7:f8:f6:04:b0:c6:09:ae:
62:5e:00:4a:34:b2:b1:3f:b7:ba:ae:96:10:cf:f0:
1a:61:96:c1:f7:59:5f:c6:87:52:95:d9:95:85:95:
1d:9b:0a:54:2d:20:0d:67:af:f9:05:0a:2f:4d:a5:
67:d8:85:fd:1b:37:cf:48:0d:fd:c4:ff:56:4a:45:
ba:f4:65:15:93:8a:ad:94:bd:a7:1c:de:df:9b:44:
be:8a:0f:f7:44:8c:8a:45:19:b9:34:49:e1:44:5d:
24:d3:04:18:d0:e9:73:93:c0:7e:6a:0e:31:c8:ec:
ee:3c:e1:80:3c:dd:10:62:62:0d:29:87:25:0b:5b:
a5:cd:e4:29:99:79:b4:de:98:72:7f:7f:34:80:69:
82:6d:e9:7b:1a:92:70:8c:90:4a:6f:5f:88:d4:f0:
54:c6:9d:37:d5:8e:67:45:91:42:b0:ab:dc:5f:5b:
61:32:c5:8f:2f:a8:6f:eb:d5:38:cc:10:4a:c8:41:
f4:4d:10:71:49:18:a5:48:51:5e:57:bf:83:99:29:
12:35:d4:f3:d2:86:d8:61:fe:70:27:ad:35:b6:40:
72:71:2c:68:2b:f4:e8:85:d7:14:74:3f:6b:30:81:
27:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9A:23:17:69:20:D6:4C:48:F3:E0:4B:1E:0B:E5:39:B7:CC:F4:07
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:78:d4:af:7c:af:29:41:4a:70:e8:72:ae:49:32:37:fb:93:
0f:89:d3:b4:86:fb:87:00:59:b1:63:d6:be:01:5f:8b:78:bc:
6e:0e:8e:88:18:9d:d7:f8:df:77:03:7f:57:aa:ac:99:d9:81:
18:f0:4b:b5:f9:4a:f6:d6:15:cc:e5:66:36:23:24:3b:89:2a:
75:52:69:45:8c:b0:2f:dc:30:39:52:80:12:1f:a9:a4:dd:1c:
42:4f:2c:2e:f3:20:e7:bb:74:0b:50:9a:13:bb:52:d5:dc:65:
72:68:99:de:4f:47:b7:68:e5:54:fa:a1:6d:f0:34:0b:b1:83:
b5:1c:18:cd:97:71:15:9b:88:09:b1:45:2d:77:a7:b9:5a:8c:
9c:18:94:31:b6:cb:9a:41:01:17:a0:52:f7:9d:e1:cb:6e:85:
c3:6a:9f:df:af:1f:ca:fa:24:b5:f2:8d:3f:0f:ab:07:7b:d4:
f2:39:6b:a5:8b:88:f2:76:d1:0b:93:e2:da:14:43:fe:96:da:
bd:7d:ce:27:e8:be:af:e3:1d:e1:df:bc:0f:6b:e5:2b:92:58:
06:d2:57:06:d2:6b:24:0e:8f:7c:6f:81:7e:15:18:36:dd:60:
5a:74:af:bb:84:a4:96:b6:04:57:f4:3c:c1:62:e8:41:56:ea:
0e:60:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:18 2025 by rpki-client