Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier: SDHw2+vZM73nzRdYVIlXlbimsk7PmVbSG4rFIhBWvk4=
Subject key identifier: 29:5F:AB:0A:E7:54:7A:4F:78:7E:BB:77:A6:59:CE:C5:C7:A4:AF:A6
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 01963BAEE835A9B77DDE59CB57E09C40A0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number: 020A
Signing time: Tue 15 Apr 2025 23:00:40 +0000
Manifest this update: Tue 15 Apr 2025 23:00:40 +0000
Manifest next update: Wed 16 Apr 2025 23:00:40 +0000
Files and hashes: 1: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: crVNxbtbv13p/CzBGHHyhfvkxbCC82QTI0VHEeCTNcg=)
2: v9WYkBz15RpwA0n7rXgCIDyTPvU.roa (hash: vUv7k6coWvAmWrqVuPUy83SA1mmkmDGBast/PkGxxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:ae:e8:35:a9:b7:7d:de:59:cb:57:e0:9c:40:a0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Apr 15 23:00:40 2025 GMT
Not After : Apr 16 23:00:40 2025 GMT
Subject: CN=295fab0ae7547a4f787ebb77a659cec5c7a4afa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:06:aa:62:5e:eb:34:ba:0c:d7:23:dc:ba:
81:3e:7e:85:a7:70:bd:6b:b3:c1:c3:cd:13:3d:01:
6f:33:82:9b:93:e8:3d:aa:f6:37:9e:aa:17:f8:a7:
8e:48:74:65:b8:4a:de:8e:89:ee:16:1d:fa:8f:80:
cb:a8:b2:e6:65:de:b0:f5:f9:d7:4a:34:14:52:15:
1f:6f:5c:fd:4f:3c:b8:72:d8:41:8c:4e:66:51:a2:
41:50:48:9c:bc:75:ea:c5:15:b5:1c:1d:0f:f2:f6:
92:b0:4b:07:29:e5:dc:a3:96:72:98:39:5a:50:5f:
7f:13:ca:98:8b:d8:fe:39:76:a2:a3:7f:2a:ba:85:
2f:b4:8f:55:48:b0:15:42:af:6d:18:64:ad:06:c1:
56:56:fe:3c:d8:44:d8:97:24:ea:29:bd:61:b1:8f:
5d:0f:f0:1a:f4:bf:0e:ef:7c:6a:5a:ca:52:db:57:
e6:4a:c9:8d:ed:33:1a:66:41:6c:09:72:7d:bb:29:
33:0a:ca:54:ad:57:d5:00:ec:b0:94:67:0d:6e:e4:
da:ea:67:e0:13:e3:54:8f:a8:4e:f4:02:bd:42:ec:
18:ce:9a:e3:0c:21:ab:b9:50:95:4a:8f:ca:26:b6:
3b:ed:d8:7c:21:5a:e6:9a:d1:89:03:69:ff:b3:d4:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5F:AB:0A:E7:54:7A:4F:78:7E:BB:77:A6:59:CE:C5:C7:A4:AF:A6
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8d:5d:d8:8d:24:f8:ca:36:53:a8:37:37:49:d6:8e:47:71:
68:07:cf:59:a6:54:bf:97:37:11:68:de:3f:d4:89:da:ec:dd:
90:33:4b:9b:70:3a:df:e5:9c:5c:f7:6d:00:bf:65:d9:18:de:
bf:c5:da:a4:ab:91:66:85:fb:11:47:73:2d:c2:66:0e:19:36:
80:9a:b9:c7:63:35:d1:25:5a:c0:d4:97:ba:f2:d9:82:24:6a:
f5:37:c6:d8:ee:2d:43:2e:51:a0:13:5d:a3:ef:77:d2:4d:b8:
96:39:76:a1:e9:60:85:86:51:27:40:66:d1:31:2f:42:16:df:
34:f8:4c:81:83:d3:48:df:2d:f3:ad:74:36:62:33:47:71:d6:
6a:56:89:a0:c2:78:6e:32:8d:8b:29:cd:25:4a:55:1a:08:80:
a3:60:c6:4b:8a:fb:5b:d3:c1:6f:05:57:c4:94:21:5d:f3:36:
9d:5a:6f:31:cb:5b:03:f4:56:48:a4:8a:81:05:e6:9e:0e:4c:
a5:c2:d6:ed:58:65:59:7e:0b:a8:4b:c7:e2:5f:44:8b:f1:4e:
ee:15:cd:63:13:41:fd:dd:a4:0f:d3:81:74:5c:e3:25:6e:fc:
9b:ea:e9:3c:fc:a1:d6:ac:16:c1:1a:b9:d1:e0:b7:b4:38:03:
52:a7:8e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:41:35 2025 by rpki-client