Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: //bfe+9IoPiRZstuWqRAkR1i4DIm9fqjMUTI0saKKFk=
Subject key identifier: 57:D2:AE:3C:F4:68:E3:F0:9D:4E:17:5E:1E:F5:86:FC:56:3D:0D:01
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 01961E4939671687AAAB003B1DF606ED5D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 14E4
Signing time: Thu 10 Apr 2025 06:00:37 +0000
Manifest this update: Thu 10 Apr 2025 06:00:37 +0000
Manifest next update: Fri 11 Apr 2025 06:00:37 +0000
Files and hashes: 1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=)
2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=)
3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: nQCqpCZ4FZINBNEqjbDq8Q3o4l40ACdmLXGGahbG3Ew=)
4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:49:39:67:16:87:aa:ab:00:3b:1d:f6:06:ed:5d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Apr 10 06:00:37 2025 GMT
Not After : Apr 11 06:00:37 2025 GMT
Subject: CN=57d2ae3cf468e3f09d4e175e1ef586fc563d0d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:b6:6c:28:54:3f:df:c5:2d:f7:48:cd:db:
61:1f:98:12:0b:e0:e5:fa:7b:ae:3c:d7:5e:af:29:
fb:e2:3c:0d:00:ec:80:b9:88:6e:d4:0e:99:cc:16:
b9:65:b9:78:f4:02:7e:4e:44:ac:31:78:15:f8:54:
9e:18:e7:d4:53:eb:af:a4:ba:cf:7a:f4:74:8f:07:
be:32:bf:c2:c2:e7:a5:47:3f:4d:7f:77:bd:aa:5f:
8e:6d:95:14:1f:d2:ab:82:a8:11:29:c9:3a:6c:f0:
26:d4:25:f5:35:84:8f:37:cd:9e:5f:e5:52:01:99:
75:a8:a5:f0:44:b4:35:a2:cf:c7:3f:6e:80:3f:b1:
01:d1:a3:3f:57:5c:d8:04:c1:90:e1:71:ea:b5:d3:
4a:5d:45:41:84:07:1b:51:da:67:be:72:44:16:03:
3a:82:25:51:66:ac:6e:30:a0:08:f7:f2:dd:01:1d:
44:91:c1:52:df:3c:56:c5:30:fc:bc:96:11:3a:b4:
75:c5:ba:58:8a:4d:f7:84:b8:7e:a5:30:02:36:4f:
2d:f0:67:70:d5:c4:f6:50:d4:fc:a5:cd:ae:3b:bc:
01:7a:00:c7:41:fb:26:d3:ed:95:4a:83:91:2f:79:
d2:b7:b6:d5:7a:54:3f:f6:04:db:09:ed:3d:d2:47:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D2:AE:3C:F4:68:E3:F0:9D:4E:17:5E:1E:F5:86:FC:56:3D:0D:01
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c0:02:01:a1:cd:e9:b3:5f:32:64:dc:3b:6c:04:df:1a:d5:
4a:95:ac:08:ef:04:a7:9d:65:79:9e:c0:4a:09:33:ac:94:ea:
3f:11:92:98:7c:d5:76:57:ac:23:a3:44:b2:8c:96:bd:1e:f1:
a9:27:7e:aa:d9:6f:bd:56:1c:5b:8b:4c:05:02:20:e1:aa:01:
72:87:f9:41:ae:c6:58:81:52:83:86:7e:73:4a:05:86:6e:a7:
85:9a:6c:5b:9b:f1:8b:9f:39:76:d6:70:92:d3:53:18:14:6e:
1b:8f:1c:2c:3d:2d:7d:5a:fd:68:f5:db:53:26:f7:aa:93:77:
15:26:a4:0f:79:c8:61:cb:6a:ed:4b:4f:4a:bb:d2:f6:35:6d:
01:c5:ab:6c:d1:c2:03:4e:58:3b:4a:1e:3a:6f:a3:97:24:78:
2d:aa:33:80:5a:fa:f3:e5:2f:d1:0e:25:ba:47:dd:62:02:ae:
98:65:43:21:65:d0:a3:b7:ef:b6:c5:2e:24:dc:cd:1e:c0:d8:
d4:cd:1f:42:13:8f:ac:ff:ac:05:41:65:41:84:fd:d6:ee:9e:
71:b1:09:12:05:b3:ab:5e:90:b0:f1:23:92:12:c8:c5:33:ad:
55:7c:8f:ea:a7:74:3b:ca:90:b4:ed:1c:f1:5c:a9:33:34:3c:
80:1d:b6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:19:33 2025 by rpki-client