Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
File: nMIzEMkVpP4JXht0oGbRze5HhD8.mft (raw, json)
Hash identifier: XXcLcOWSJMWfiPUxBzrdBx70H94T9EwGMorHz+PpcRU=
Subject key identifier: F1:D6:EF:79:1F:61:4C:4D:20:2C:09:22:E4:B4:0A:AC:2A:12:B7:67
Authority key identifier: 9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
Certificate issuer: /CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Certificate serial: 019646A03A9476AC80FBB6C9503C4BB4026E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
Manifest number: 08F6
Signing time: Fri 18 Apr 2025 02:00:27 +0000
Manifest this update: Fri 18 Apr 2025 02:00:27 +0000
Manifest next update: Sat 19 Apr 2025 02:00:27 +0000
Files and hashes: 1: RmN9zhNzrcosUTM-5d1gTAjxE1E.roa (hash: uL4bwjKQw+5HAkk/uHdj99zle5Zhy8r9K/Xf1FOLrg0=)
2: nMIzEMkVpP4JXht0oGbRze5HhD8.crl (hash: skxHNxeYr1F4Y/1T5PM8laGWTCk9Z/6ftS2rxGHby2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:3a:94:76:ac:80:fb:b6:c9:50:3c:4b:b4:02:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Validity
Not Before: Apr 18 02:00:27 2025 GMT
Not After : Apr 19 02:00:27 2025 GMT
Subject: CN=f1d6ef791f614c4d202c0922e4b40aac2a12b767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bf:11:14:91:bc:8c:30:6f:5c:ac:0f:0a:04:
9b:c7:96:03:81:2f:b4:fe:6c:0f:cb:e3:20:cc:5c:
00:d5:0b:9d:08:d5:a8:24:6d:c1:75:0c:e6:ca:07:
7c:45:dd:6f:07:91:bf:b1:4f:49:08:46:ca:4f:2b:
5a:75:a1:81:e1:40:83:13:56:9d:d0:ea:65:50:81:
9b:41:bc:4d:87:f3:50:0b:33:8e:40:ad:21:da:ba:
3a:08:c7:5a:bc:87:c8:22:94:ec:f1:cf:c0:61:46:
f4:67:b3:20:75:97:bc:82:20:a7:be:90:02:85:ce:
ef:4f:e5:6f:85:db:e7:2a:ce:37:a5:90:05:09:c2:
5f:f2:0a:63:62:49:0d:44:86:46:38:b5:22:b5:0c:
e7:14:0a:93:c9:db:bf:a4:83:5a:d8:76:ac:84:13:
69:7d:76:8c:10:f8:b6:bc:3d:5e:04:fa:c2:f7:38:
5a:f0:d7:ba:e2:2f:e2:16:e9:97:13:9e:a0:27:9c:
0c:df:4a:8d:ad:ea:70:e6:86:8a:57:c4:9e:a9:17:
ce:a5:4c:1e:ab:d7:36:ad:2d:df:81:dd:90:f0:2f:
d4:e1:9d:f3:31:52:e4:54:15:64:21:ce:1f:67:27:
6d:be:6e:67:42:d1:84:c9:a8:c3:b9:2c:89:f3:b5:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D6:EF:79:1F:61:4C:4D:20:2C:09:22:E4:B4:0A:AC:2A:12:B7:67
X509v3 Authority Key Identifier:
keyid:9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d7:7e:1a:56:00:f5:94:b0:63:94:14:d1:3a:66:c6:59:f4:
61:e2:e0:1b:89:a7:d1:c7:55:21:48:3f:6c:be:ff:99:f0:c5:
29:2f:c6:ae:c8:37:28:88:0c:5e:2e:49:4a:00:33:72:97:bc:
f9:4d:c2:65:b1:37:fb:14:dc:d8:c4:c2:8b:a6:e6:f2:87:34:
5d:cb:da:95:ef:39:a0:77:a8:55:08:35:37:fa:35:63:7e:9c:
87:f1:a6:1c:f0:79:19:ea:eb:9a:ed:db:27:66:0d:6b:e6:f5:
53:89:59:28:3e:a8:1b:28:10:2f:46:16:54:c3:ae:0d:21:27:
c2:65:6a:5b:eb:2c:18:27:38:70:49:82:7e:31:3c:a9:7e:ad:
c3:42:94:42:47:55:eb:ba:8f:21:2f:59:67:ad:26:42:63:f7:
7f:e5:c9:30:ec:06:2f:30:bc:a1:fb:0c:ec:84:b1:43:30:76:
b7:54:f4:b8:8e:6d:05:5d:77:f5:a0:c4:60:a1:b7:f7:cd:32:
30:63:9c:d7:62:dd:f0:ef:c0:60:84:6e:e4:36:6c:a6:e0:9c:
51:71:79:71:af:05:59:0f:48:39:f5:e8:20:89:79:21:80:6a:
9b:48:8e:c5:c1:e4:69:2c:c6:49:7a:a5:28:d2:6a:6b:1b:8a:
8d:17:78:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:52:26 2025 by rpki-client