Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: S35jUNGd1KzeqjZ5j7hpzFyvD/BugWUMEsxGau5HQWw=
Subject key identifier: 2D:5A:91:AA:1E:C0:03:D5:88:C2:61:18:45:0A:4B:C1:FB:51:01:2F
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 019655A5AA007CB089F7E6F5F816E2B0ACD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 124A
Signing time: Mon 21 Apr 2025 00:00:42 +0000
Manifest this update: Mon 21 Apr 2025 00:00:42 +0000
Manifest next update: Tue 22 Apr 2025 00:00:42 +0000
Files and hashes: 1: 1iavcJFqwR6rzZKxM06ahcbF1Us.roa (hash: AJ47Zqj/T7JKUetOVwikynuHEcJu1eg9YDS731mpe6I=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: 4bAdTMTepqcXo+1LRWDfXf3Powj1h00KALt+vp2+i9Y=)
3: dqEoxI3WEV2rOPAYE8C4EEj1ebI.roa (hash: nVo4yJxw9EhxkUipVljpw16vPXrVAlAiSw+4KWPaovY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:aa:00:7c:b0:89:f7:e6:f5:f8:16:e2:b0:ac:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Apr 21 00:00:42 2025 GMT
Not After : Apr 22 00:00:42 2025 GMT
Subject: CN=2d5a91aa1ec003d588c26118450a4bc1fb51012f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:15:ea:24:43:49:f4:05:2c:65:5f:60:d7:
c4:d9:62:01:00:f6:f4:60:34:44:8d:27:6b:1e:ab:
32:ef:d8:61:08:2a:0e:c8:37:86:0f:e9:55:e8:22:
17:10:13:5b:f2:df:a8:d9:d9:c6:b1:4c:5a:c5:67:
2e:11:8c:92:fa:eb:07:31:da:97:d6:b1:6c:b1:91:
e9:90:6a:0e:06:8f:27:84:00:bc:ab:e5:e4:e6:bd:
94:28:b8:f5:2b:9c:21:21:24:b9:ea:b9:54:4b:4a:
bf:aa:e6:08:50:fc:22:eb:83:0e:3b:26:d0:bf:dc:
4e:55:8d:29:27:81:66:c2:e9:aa:ec:76:f0:b8:98:
f7:01:54:aa:0c:35:ca:58:1f:d8:72:3c:50:da:28:
32:a2:83:ac:70:11:5c:2c:15:9a:ca:8c:25:da:d2:
c6:48:60:36:bc:11:11:6b:cc:eb:3e:2f:42:e5:66:
ab:e9:ac:2a:20:74:fc:b3:d1:cf:92:9d:94:cf:58:
2e:bc:52:3e:92:d3:a0:38:61:05:05:ef:29:3b:5e:
84:fc:84:0f:12:7b:1f:da:80:8a:d1:fe:63:fa:62:
3b:e4:ac:4b:96:ce:31:9f:ad:3d:58:67:32:a8:88:
2d:d7:b2:6a:42:8f:d1:c4:cf:b9:85:d6:77:6e:f4:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5A:91:AA:1E:C0:03:D5:88:C2:61:18:45:0A:4B:C1:FB:51:01:2F
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b8:ed:11:2b:d9:ba:db:5a:cf:00:31:3c:14:5d:d9:a3:90:
f7:8e:df:af:87:47:60:d1:b2:7d:c1:17:1d:f5:56:31:1b:48:
89:b6:68:d6:41:3d:ee:3b:79:44:a7:fa:2e:0b:29:2d:4c:83:
0c:e4:51:69:1a:24:8b:3c:8b:52:31:06:6e:ee:7c:be:9d:c7:
5f:34:ad:5c:d4:1b:1b:5f:a1:3b:3e:e8:32:53:65:c1:1f:d5:
ea:27:24:bd:37:cb:09:d6:51:63:e0:4a:e9:ba:d0:85:b8:85:
c2:d1:71:4a:98:de:c4:b4:a9:9b:91:f7:8b:6e:80:2f:97:80:
54:75:f1:02:58:af:c1:a8:38:22:ab:dd:a5:ac:c6:38:08:e2:
9b:5a:a6:53:47:72:20:0c:c5:40:43:86:04:10:98:3d:c5:b8:
dc:8d:e1:f7:74:ee:8c:51:5d:da:6a:72:7e:cc:f0:5c:61:cb:
c6:64:5a:c5:5a:89:24:b6:2a:16:07:db:a5:cb:db:ff:89:53:
22:56:c2:1b:7d:f9:07:87:fa:e5:67:2f:f5:da:ec:fe:ec:f5:
90:cc:96:35:9b:31:f0:66:9b:d8:12:f7:48:2c:2d:71:9e:f1:
ed:87:a7:c8:16:bf:5c:16:60:c0:79:fd:22:0b:65:4b:02:1c:
43:a3:89:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:13 2025 by rpki-client