Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: tAh6l3Na2jd51+gEITtHJptzbPB7O4eimlMfoi3SQaE=
Subject key identifier: 7A:BF:B1:CD:93:C1:35:15:4A:77:37:BA:2A:13:B5:11:6F:B5:49:A8
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 019659F03819F086139044A87DCA8371A64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 5B
Signing time: Mon 21 Apr 2025 20:00:37 +0000
Manifest this update: Mon 21 Apr 2025 20:00:37 +0000
Manifest next update: Tue 22 Apr 2025 20:00:37 +0000
Files and hashes: 1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: e/ci9EykEazWIKhkHDdhFizzS0eGuSLQr2SZsaRoWBY=)
2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:38:19:f0:86:13:90:44:a8:7d:ca:83:71:a6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Apr 21 20:00:37 2025 GMT
Not After : Apr 22 20:00:37 2025 GMT
Subject: CN=7abfb1cd93c135154a7737ba2a13b5116fb549a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:0c:79:41:2d:5a:13:fd:e6:26:b3:eb:d6:
73:51:63:41:d7:e7:05:89:ee:a1:e4:35:11:80:8f:
3c:66:b1:ce:46:da:26:ea:f8:74:4b:03:4d:31:00:
ac:fc:d5:e2:6d:5b:53:a5:8f:c7:da:e1:16:e0:e7:
2c:0b:59:b5:48:19:5a:69:64:d3:e1:1c:de:79:ae:
61:71:b5:e9:da:ae:a4:60:b0:75:f1:8a:50:96:ff:
24:92:35:99:00:ab:e2:14:a4:9d:d0:6d:68:65:98:
f8:85:62:3d:5d:4c:31:61:d1:29:0f:38:7c:cb:12:
71:a7:03:69:d5:e7:4d:88:a1:1e:30:fb:25:e8:d2:
48:6a:3c:7c:bc:61:1e:fa:d4:fc:d7:78:86:54:e5:
09:e9:c6:f9:e7:4c:b7:9d:15:a8:60:cd:92:c1:51:
28:60:1f:2a:75:ff:0f:89:7c:39:17:43:2e:0d:a8:
48:35:13:4d:42:29:b0:b9:72:71:aa:cb:9f:e3:88:
42:89:95:0a:30:9b:52:57:a1:45:eb:0d:81:16:36:
7a:10:87:d6:9b:e4:03:a6:e9:27:a6:d0:01:8c:46:
a8:39:19:ce:e4:73:d0:c1:fb:07:b7:8f:40:43:f0:
f8:f1:d7:a0:bf:23:2c:a5:53:0a:87:9a:8d:a5:40:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BF:B1:CD:93:C1:35:15:4A:77:37:BA:2A:13:B5:11:6F:B5:49:A8
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ab:f7:f8:13:6a:39:e5:51:9f:51:2f:fe:26:61:8b:54:12:
68:e7:ee:3f:2f:3f:ed:81:3c:60:c2:76:4e:be:ab:d4:98:57:
7d:82:8e:a2:e0:a7:2a:3f:12:d9:75:c3:b2:df:98:4f:24:a1:
7c:c1:59:75:d8:50:c7:8a:ca:bf:64:11:51:bc:23:81:b4:e7:
55:cd:f1:74:e1:d2:77:f0:4b:dc:20:6b:8f:33:9b:bd:5b:81:
67:55:c2:be:f0:81:e9:67:52:b7:bc:ae:e0:84:5b:09:b0:d9:
e3:9f:25:1b:6a:13:98:73:eb:eb:8d:06:ab:ff:fe:18:4f:6b:
b6:da:66:48:2d:38:cc:db:6f:e2:27:5e:9f:b6:4c:e9:e8:78:
93:94:ea:bf:41:e3:ce:3e:e9:eb:b1:f3:50:ec:5b:8a:d0:2d:
03:5f:02:95:0a:c2:4c:54:b6:6a:2a:c7:9e:bd:7e:91:87:96:
dc:2f:51:65:99:8a:d8:d0:ef:e3:5d:78:7d:8b:8c:5f:f3:24:
60:b0:5c:a8:4d:06:43:cb:39:67:77:09:87:96:dd:63:f4:4c:
03:68:19:15:85:e6:4f:5c:cc:6b:97:14:af:bc:2c:18:03:12:
f2:fb:d1:cc:66:77:89:7d:ba:5e:cf:40:31:7a:30:d1:9d:19:
12:bb:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:17:15 2025 by rpki-client