Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: LcLPI/FAavw9eysPhfZvoB4Dz7jetKE+Eut5rtUhSa4=
Subject key identifier: 2A:B5:45:C3:F9:15:90:9E:9C:39:D9:95:23:C8:15:98:C4:B4:F8:B9
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01963C1CF01661E86BC5BA1D33108EC1F226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 0E2C
Signing time: Wed 16 Apr 2025 01:00:51 +0000
Manifest this update: Wed 16 Apr 2025 01:00:51 +0000
Manifest next update: Thu 17 Apr 2025 01:00:51 +0000
Files and hashes: 1: FVg-EXFcHktuG7QQnavEaXe-fnM.roa (hash: mi0+1itCdMO3yynnGJ5oIkWt7SrPDpOOMP9BVB9K+Jc=)
2: T3nKkG-dCBEn2EriUuJalbbWuME.roa (hash: NecAgRoxclxz3UKtAie4B0/FU5sK9TM4xXuPGjhm4Kc=)
3: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: epLNPwaUT++ppjWNNW3Ys/OGJdTEsBLI3x3CR0lVbVo=)
4: nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa (hash: D8rqvsrK84p8WeU5jZAqKp61j1ey2NYKXftp+gwX6/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1c:f0:16:61:e8:6b:c5:ba:1d:33:10:8e:c1:f2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Apr 16 01:00:51 2025 GMT
Not After : Apr 17 01:00:51 2025 GMT
Subject: CN=2ab545c3f915909e9c39d99523c81598c4b4f8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:7f:be:e1:ce:59:ea:22:5c:c6:07:57:96:
28:b8:5d:9b:9e:21:d9:4f:0e:5c:dc:6e:1f:40:8e:
a9:97:ba:6d:e3:b9:3b:1e:7e:b8:6f:7b:ce:db:7a:
fa:87:03:fa:3e:31:51:2a:ef:5c:35:b6:96:87:6a:
db:21:08:04:7b:fe:5b:76:c7:9e:54:0e:c7:7d:ed:
47:93:9d:c9:7c:17:01:0d:86:7a:30:6f:59:e0:1a:
57:59:88:82:2f:a5:72:65:7d:02:04:0c:13:9c:8a:
21:5c:ad:b2:16:fe:c5:c3:df:a8:0e:f9:d9:93:0f:
a9:57:3a:48:f8:74:92:1e:e5:6e:61:06:cb:65:cc:
0c:88:c1:b1:98:c1:3d:e0:6e:59:b5:2e:ed:c6:b1:
44:02:ef:ec:7f:37:0a:e2:31:52:d7:47:9c:df:5d:
6a:29:6b:2b:db:4d:0c:48:96:d9:d2:8b:54:78:cb:
b6:9b:0d:90:73:8a:33:18:08:57:9c:c2:52:fd:b3:
cb:62:0a:3b:2c:24:27:d0:95:6d:68:99:13:40:2f:
b0:50:5f:4a:3b:17:0d:74:c9:ea:4e:a6:70:19:0a:
52:71:e6:e9:88:de:ae:3a:d9:b0:50:c6:cc:d9:f5:
d5:b9:69:44:8d:ba:38:19:99:2c:6e:f4:fb:76:a3:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B5:45:C3:F9:15:90:9E:9C:39:D9:95:23:C8:15:98:C4:B4:F8:B9
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5f:e8:52:6b:21:89:b2:70:a8:b2:39:a6:8d:de:9a:da:e9:
00:56:93:2c:a9:af:e3:ee:3e:6f:d6:c0:5c:4e:f5:1d:99:87:
cc:ba:81:73:ab:4a:07:0b:49:9c:c6:7a:f7:0c:ff:a5:9a:fc:
34:24:b5:d8:e4:44:f9:1e:d0:0b:59:55:86:02:7f:c1:ea:80:
8d:91:29:0b:fb:38:d9:78:89:86:26:88:f5:49:6b:23:1a:4b:
f4:31:da:d3:93:84:8d:1d:40:e5:c4:82:9d:55:4d:67:d6:2b:
ec:c8:b6:bf:25:30:38:9c:7f:ca:b5:08:05:13:63:36:2b:d4:
c7:18:76:c4:e6:b7:4f:38:dc:35:dc:96:19:09:66:23:d6:20:
f6:2a:b1:88:55:b9:ca:ac:e0:96:de:52:85:31:b8:ba:8c:7d:
bf:9d:67:c2:3f:cd:45:f9:81:2a:a3:8f:67:51:72:96:1a:02:
77:b0:e2:5d:54:67:6d:ed:41:1d:b8:9a:d3:c1:83:90:90:e9:
6c:29:53:7e:44:0f:1f:91:7e:25:16:13:c4:40:d7:b3:5d:97:
cc:ba:9e:40:d5:90:8e:7b:4c:e5:27:a3:7e:54:4f:53:23:87:
be:1e:1f:73:ac:04:35:5e:05:05:a2:f2:65:90:1c:8e:81:02:
e2:77:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:33:26 2025 by rpki-client