Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: ZI6xlPvvwsT+r0Z4RN/5k5YXQvsSzjPqWpDjF4cbU5c=
Subject key identifier: DD:81:2C:B1:B2:35:2F:59:CB:0E:D6:84:46:48:31:FB:E5:44:33:81
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 01958CCE3DDCE1059EDE4F9B3DF43A1C2DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 04E8
Signing time: Thu 13 Mar 2025 00:01:21 +0000
Manifest this update: Thu 13 Mar 2025 00:01:21 +0000
Manifest next update: Fri 14 Mar 2025 00:01:21 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: brCYrklpA+BKye3BtCULxnfF5iZGCMgAeQUpIkd6z+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:3d:dc:e1:05:9e:de:4f:9b:3d:f4:3a:1c:2d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Mar 13 00:01:21 2025 GMT
Not After : Mar 14 00:01:21 2025 GMT
Subject: CN=dd812cb1b2352f59cb0ed684464831fbe5443381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:ee:35:93:e4:0f:c8:a9:2e:a1:1a:a0:74:
06:0f:81:43:12:fc:f4:54:d5:c3:00:32:e9:0f:87:
e5:ae:dc:fa:0d:a3:83:d9:9e:bc:91:7a:50:10:85:
8a:eb:d5:c4:ce:73:3e:6c:f1:5b:97:c7:ea:5d:df:
d2:5f:3d:ff:92:19:0f:f5:5b:85:77:da:27:dd:bd:
8f:c8:32:69:0d:b3:8e:53:07:32:9a:8a:e2:4a:3b:
dc:1e:1e:7c:2c:8c:c5:28:4a:6f:58:6f:2f:60:41:
fe:33:99:b4:19:53:93:e9:6e:ff:1b:53:7e:44:cc:
1c:01:12:44:40:f7:38:38:81:cb:33:be:a6:2b:73:
3e:12:3b:c2:8f:1e:b9:a5:d2:14:da:77:29:c5:c7:
de:c1:22:5c:c5:30:97:37:2f:c9:2e:33:b3:81:7b:
e2:0d:ac:2d:22:30:37:6a:46:51:67:df:bc:0e:3b:
9d:da:af:d2:ff:3a:71:d7:d5:0c:d4:27:74:b9:32:
3f:f6:d0:2a:11:09:14:da:fa:09:b5:61:10:f5:b8:
a7:03:45:1c:b7:4f:67:b9:b8:89:81:ed:59:b5:55:
53:11:02:e7:e2:2e:69:15:2d:b2:c4:73:dc:ab:b9:
7e:91:d0:76:aa:95:f1:5e:ee:82:54:ba:bf:3b:b8:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:81:2C:B1:B2:35:2F:59:CB:0E:D6:84:46:48:31:FB:E5:44:33:81
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f8:7a:14:ea:d2:df:6a:2f:0f:fa:36:09:59:63:79:47:10:
66:71:d0:dd:34:b7:0f:d1:a6:5a:7c:c6:63:f0:dc:a4:35:e5:
80:77:cc:64:e2:74:6a:71:ff:17:a6:b2:11:8c:d3:38:22:72:
c0:51:10:09:c3:2c:72:cc:e2:9c:ca:8b:34:66:60:82:58:23:
af:98:ba:a4:96:5e:e7:b2:74:58:5f:ac:60:fe:7f:4f:e6:61:
9f:15:7a:fa:f0:77:cc:ce:79:22:af:b5:25:46:35:f6:00:e0:
8d:c1:36:01:c8:aa:bc:fb:22:1c:f1:ee:9d:09:28:a6:2c:4d:
a1:4f:3f:4e:73:b5:6e:14:1e:89:5e:1b:d1:49:61:ea:9e:62:
29:66:d1:9e:ff:ff:40:6c:78:d6:55:ba:93:cc:44:53:d0:64:
8c:94:6c:f8:93:90:0c:72:d4:f6:0f:13:08:d4:9e:fb:08:a7:
ff:7e:1e:b9:c5:6a:ab:c8:4d:53:5c:78:c2:6a:57:5d:27:f7:
ac:76:9f:35:d4:81:3f:0d:78:3e:b7:19:5b:57:ba:ac:a8:9f:
cd:89:12:ec:c1:84:fa:4c:e2:0a:d8:0f:ae:58:9a:70:95:49:
27:33:23:43:5c:70:87:fc:f6:64:16:da:51:fa:4b:51:11:8f:
fb:52:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:42 2025 by rpki-client