Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: V4X8iyqNs0/8JMuOK5W67K1KXXdeEl5J927FmxVt9II=
Subject key identifier: FF:0E:6E:B9:E3:BE:72:06:D4:36:FC:87:D8:E3:CB:70:4C:98:7B:67
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 0196515B62F086DECB1EEDAE7A5D2A3AE437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 01F5
Signing time: Sun 20 Apr 2025 04:01:05 +0000
Manifest this update: Sun 20 Apr 2025 04:01:05 +0000
Manifest next update: Mon 21 Apr 2025 04:01:05 +0000
Files and hashes: 1: 2jDUXaVY2J9zU8vKhzB_PzOO_6U.roa (hash: uI6QS/R6IbgUMuCYc5sOFyWJ4AyLIYf/PSbRWwbYsP0=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: dmrzP0dlNO+ixVPDrNJIHT1hOHGgpRs0aUP9PCkn1H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:62:f0:86:de:cb:1e:ed:ae:7a:5d:2a:3a:e4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Apr 20 04:01:05 2025 GMT
Not After : Apr 21 04:01:05 2025 GMT
Subject: CN=ff0e6eb9e3be7206d436fc87d8e3cb704c987b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:86:be:fe:47:87:fb:43:c0:42:d0:40:ea:9c:
64:f1:d8:2e:c7:8c:95:45:1e:17:03:dd:91:2f:f9:
65:24:00:99:96:50:fd:16:a1:3d:55:f0:4b:c7:ef:
40:17:64:f4:1e:c3:53:f7:83:92:f9:ae:2a:d5:24:
ac:a6:96:07:97:4c:8b:76:17:d1:99:6b:c2:db:6d:
0c:12:52:e8:ee:5a:ad:f4:68:29:ad:01:d3:d7:82:
93:57:75:f8:62:7a:3b:6e:82:55:16:16:29:70:35:
5b:09:90:32:79:44:c7:38:4f:68:d4:8a:a4:c9:21:
f5:c1:7c:5a:6a:52:c8:15:fd:a3:8b:0b:5d:59:c4:
d5:ae:e7:10:bd:69:26:aa:66:0a:28:67:3b:d6:04:
65:0f:2b:ec:b1:71:9e:f0:35:56:75:95:41:d0:a6:
e1:ea:84:43:71:67:0e:78:6c:8b:be:7e:76:56:48:
58:b5:e6:cf:3f:b0:de:85:29:b8:be:7c:6a:cf:7a:
e2:3e:7d:05:ae:d6:03:5b:c9:f1:72:24:97:69:01:
d4:86:8d:ba:32:99:f1:9e:0d:9a:b9:39:93:a0:94:
aa:bb:1c:a1:9e:13:da:13:40:99:d1:fd:a9:c3:b9:
96:28:30:e4:9f:68:8c:e0:6f:1c:fb:80:5a:4f:fd:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0E:6E:B9:E3:BE:72:06:D4:36:FC:87:D8:E3:CB:70:4C:98:7B:67
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:69:ce:a9:81:bb:98:2b:31:b9:c4:21:a5:e8:d7:61:9b:29:
3d:b3:2e:86:4f:77:4c:e2:04:49:98:5e:27:4e:42:9d:34:58:
78:68:c9:e7:8f:a4:54:b1:a6:96:eb:17:72:3f:fa:f1:87:4c:
fe:8a:64:ad:c5:3d:e3:fc:17:0f:f5:44:29:47:e8:2f:74:e2:
de:0f:52:f8:eb:6d:5e:19:a2:41:6c:4f:4a:aa:08:35:fe:1f:
9a:0a:c2:13:52:59:fa:e1:b3:53:55:c9:59:4d:33:ec:02:a0:
57:58:15:c7:30:dc:7c:29:f0:11:6a:81:f9:00:83:28:58:8c:
86:b6:45:fe:a0:3e:9e:49:de:9d:5b:f2:43:bc:bd:f5:68:9f:
10:4e:c6:9d:7d:7e:4d:d2:9f:17:92:54:3f:6d:40:d2:4d:17:
36:d4:49:93:fd:80:67:e3:6f:b3:cc:5e:75:ba:7e:1d:22:3d:
e4:7d:62:35:94:03:b0:93:f4:bf:bb:66:ca:03:48:bd:0d:f4:
90:54:be:c3:33:f8:43:13:36:ff:87:dc:41:03:30:66:ac:45:
f5:f4:2b:4c:22:60:ff:43:9b:b3:5e:ca:51:a5:37:2e:e8:25:
95:bf:ba:be:45:4b:18:89:97:64:22:03:68:8d:68:2f:e9:29:
89:d6:73:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:58 2025 by rpki-client