Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: 60ZoWAUZZhEWr43KTpsKIPGm0N8iBUkkXBWx5Q9cIdQ=
Subject key identifier: C2:0B:75:66:0B:6E:66:09:09:D9:DB:17:94:7E:EF:AD:20:87:B9:06
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 0196414334B4A10F4D163068F46F8DF32DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 0F97
Signing time: Thu 17 Apr 2025 01:00:45 +0000
Manifest this update: Thu 17 Apr 2025 01:00:45 +0000
Manifest next update: Fri 18 Apr 2025 01:00:45 +0000
Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: 1LuCGgfN0u9/hRSPS1OURFNqHzhHk8zINN2m/4cgo9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:43:34:b4:a1:0f:4d:16:30:68:f4:6f:8d:f3:2d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Apr 17 01:00:45 2025 GMT
Not After : Apr 18 01:00:45 2025 GMT
Subject: CN=c20b75660b6e660909d9db17947eefad2087b906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:2e:0d:a2:17:42:4e:dc:d0:bb:00:d3:ab:
d7:ba:dd:68:79:8f:ec:8f:04:4a:9c:41:02:71:59:
a3:f8:a8:dd:85:c9:49:48:e0:7a:95:93:38:e6:fd:
4f:e8:8f:20:8b:17:34:7b:38:b1:86:5d:bc:f9:f4:
56:ea:ae:d4:73:ce:5c:66:ba:11:c6:45:c5:cc:17:
1b:78:bd:98:81:67:e9:5f:6d:67:4e:b7:7b:d3:06:
e8:6a:a9:28:a8:6b:a1:43:66:c1:4c:98:d5:bd:59:
75:db:ca:08:61:f8:48:24:c8:e8:c0:b9:3f:56:12:
98:34:a2:5b:57:20:4d:fa:da:c1:62:3d:de:9b:7e:
fb:15:5f:0a:7f:ff:e2:67:ed:07:4e:a2:b6:b9:4d:
9f:30:62:c0:a5:0f:ab:19:bd:54:87:4b:35:38:42:
21:f3:b6:8a:53:88:39:8b:b3:a8:2e:2e:59:c2:30:
a5:32:b1:93:d8:d9:02:4e:81:38:fd:8a:11:b5:56:
95:67:b3:44:7e:00:01:97:85:88:a4:d1:1e:14:85:
28:d5:26:1f:1b:07:dd:8c:b9:84:d9:01:89:c7:7a:
84:a5:4d:fc:7b:aa:a8:12:f9:45:46:c7:fc:da:6a:
4d:59:5f:63:6f:61:d2:30:87:9a:0c:15:bc:54:bf:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0B:75:66:0B:6E:66:09:09:D9:DB:17:94:7E:EF:AD:20:87:B9:06
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:60:21:8c:a0:92:8f:ed:c0:eb:2b:80:2f:f7:df:0c:ae:50:
98:47:83:65:47:e1:31:73:d8:68:13:5d:46:fa:98:72:6a:4f:
82:11:63:c7:6a:fc:af:f2:25:e7:b0:a1:20:2e:7b:aa:5d:8b:
73:8a:32:31:18:98:d7:ec:15:33:68:8b:39:bc:a0:e9:46:63:
4a:4d:b6:7d:d1:52:03:57:7b:ea:7b:a1:c2:6a:a6:88:63:29:
60:93:dc:a0:5d:16:14:63:94:58:27:b2:cf:46:58:76:ae:4f:
36:f5:47:76:01:1a:b5:31:6d:bf:a6:cf:a8:ab:43:a7:3c:81:
69:4b:89:50:b8:f4:79:51:23:b0:a4:3c:ca:f5:9c:78:ef:66:
77:24:93:5d:ac:d0:7c:64:7a:a3:82:75:7b:a8:cf:02:f7:5b:
17:59:ca:1c:a9:2a:5f:6e:75:ac:9f:1c:b9:62:e1:53:63:d4:
5c:a7:bc:b0:be:c1:b2:0c:46:4d:0c:89:c5:44:fb:6e:f8:ee:
a2:d9:91:9f:6f:69:1a:e1:14:17:d2:c1:1a:0e:4d:c3:36:53:
d8:33:12:c2:a4:1b:7e:e6:f8:0f:58:c7:3e:9b:3f:86:a0:14:
1a:41:85:b6:77:82:38:c2:6b:cf:28:61:b3:b3:59:aa:74:67:
0d:7d:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:19:59 2025 by rpki-client