Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
File: n92vITJX0XbfUKpud2SKDMcqX6E.mft (raw, json)
Hash identifier: ++oVkZItyclDyw8RVxJRIOtmaiNPFCO9kXFqC3wXSWc=
Subject key identifier: A0:EB:4C:CD:B1:32:A1:D8:89:9F:52:ED:D8:80:2B:8A:EA:FC:07:11
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Certificate issuer: /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial: 0196192338174E564E04191A9635985A7411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
Manifest number: 14E2
Signing time: Wed 09 Apr 2025 06:01:00 +0000
Manifest this update: Wed 09 Apr 2025 06:01:00 +0000
Manifest next update: Thu 10 Apr 2025 06:01:00 +0000
Files and hashes: 1: 6WWGMBEJeVUhw0je11LNLXob3Fk.roa (hash: UR2dxpbdtKcSXZI0WPnuoltcK0Rk3PFpyvHQx4QFc88=)
2: WoPeWJaFNpjFYUzEs1-L7Kn02Eg.roa (hash: 6m5mRBxhAtLezaGJS01k05wi1I80hDZQZcqXylk3PEs=)
3: n92vITJX0XbfUKpud2SKDMcqX6E.crl (hash: kLzBXKCPk5VCzDZ217L4JonMaHoM22d2Rzrdz1X77Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:23:38:17:4e:56:4e:04:19:1a:96:35:98:5a:74:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Validity
Not Before: Apr 9 06:01:00 2025 GMT
Not After : Apr 10 06:01:00 2025 GMT
Subject: CN=a0eb4ccdb132a1d8899f52edd8802b8aeafc0711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:a5:bc:7f:9b:47:6f:f2:a6:b5:e8:f4:b9:
a9:be:19:12:7f:d3:ed:71:2c:fd:e9:aa:74:75:b5:
44:ca:a1:26:cc:be:e5:2f:ed:23:2e:23:0d:f3:35:
4f:f2:ed:e1:e5:43:d8:00:6c:f8:40:5b:21:8e:fa:
da:73:22:5e:c0:35:2c:eb:ba:54:19:76:b7:72:10:
cc:4f:e3:a2:2a:dd:07:2c:bc:47:18:29:ed:2e:85:
a0:d4:bb:d0:dd:14:5d:98:dc:30:77:3e:53:40:57:
63:2f:e8:58:fd:0a:18:80:b5:ae:2c:7d:54:c9:8f:
6e:5b:c0:e0:7d:ea:1f:ff:a4:d3:af:fd:18:61:ea:
37:7a:cf:d9:0a:9b:46:45:31:14:d7:55:ce:a3:a8:
bd:eb:7f:83:5c:4b:83:a5:d8:eb:12:a2:86:d6:2c:
66:41:e5:49:7d:f3:1c:fc:e2:90:c2:56:02:b7:47:
52:70:5d:cc:2d:b2:ea:27:ba:f3:e1:90:5e:ca:b0:
94:b5:33:2d:8c:82:26:03:bb:5e:fc:12:21:4d:e7:
5c:c6:af:39:fb:3f:51:15:5a:ee:df:48:40:79:53:
03:00:4f:35:81:7c:20:30:ab:1e:1e:56:11:0b:fc:
65:04:7f:26:67:46:a5:1b:c1:f7:35:bd:c2:f0:a5:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EB:4C:CD:B1:32:A1:D8:89:9F:52:ED:D8:80:2B:8A:EA:FC:07:11
X509v3 Authority Key Identifier:
keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:00:74:ee:5a:41:26:43:b4:c7:73:43:d1:46:ad:17:ea:5d:
20:7f:d6:64:75:0c:3d:78:e1:1b:b5:aa:d0:b4:e2:e1:4b:72:
c8:cf:68:a6:c9:1b:e7:70:cb:5f:dc:dd:e0:f8:d4:5d:90:75:
a6:b8:b2:a4:85:cb:48:50:9f:24:a8:cd:f1:aa:78:b4:90:92:
71:38:ca:bc:18:1e:27:09:ee:0c:a8:6f:ea:bd:80:47:30:6a:
a0:96:35:c2:7a:f2:0d:29:61:61:70:a7:1b:f1:07:04:8d:1c:
a8:ec:48:5d:2d:94:bf:b2:f0:25:46:03:f9:c1:69:5a:76:9a:
75:f6:31:db:c5:b0:29:c0:d2:b7:50:7f:f2:75:d3:93:42:c9:
0b:6e:7f:50:f5:de:b8:31:7d:89:55:6b:09:f5:f7:9e:a8:14:
54:81:27:69:62:6c:80:90:23:50:22:b8:2c:61:af:e9:f7:dd:
f0:63:9f:6d:37:1d:ef:f8:86:d8:43:ed:25:50:8e:88:a0:0b:
27:d4:a7:47:98:29:2c:72:d0:10:03:3e:b6:7f:f6:b3:c2:f8:
b0:95:f1:8f:0f:d2:49:8b:54:80:71:8a:c6:7e:42:32:86:5e:
d2:9c:c5:9e:8e:91:50:72:25:ac:37:03:be:a2:6e:99:c7:03:
77:f5:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:32:13 2025 by rpki-client