Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
File: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft (raw, json)
Hash identifier: QQrtIwyCdBURjE0p2txfE9bbzdRCCrQTSAPnMDeiIGI=
Subject key identifier: F4:FC:A1:5A:6D:F5:49:D7:31:51:95:2D:93:21:44:5C:04:7D:A8:1F
Authority key identifier: 9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
Certificate issuer: /CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Certificate serial: 019655A5CF52C2E4AC765E2DCC2BEDE773C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
Manifest number: 151B
Signing time: Mon 21 Apr 2025 00:00:51 +0000
Manifest this update: Mon 21 Apr 2025 00:00:51 +0000
Manifest next update: Tue 22 Apr 2025 00:00:51 +0000
Files and hashes: 1: 3f3HIccO3MohgHCLC_LlaFxa7sU.roa (hash: kCeD4JlEOramRmkp3pFIST1qhopaS50IqgyTgjDtfVo=)
2: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl (hash: hmSrlHTinE5PgxzvSnPbutHyVKMlehbGbHTMCGza3UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:cf:52:c2:e4:ac:76:5e:2d:cc:2b:ed:e7:73:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Validity
Not Before: Apr 21 00:00:51 2025 GMT
Not After : Apr 22 00:00:51 2025 GMT
Subject: CN=f4fca15a6df549d73151952d9321445c047da81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:86:d7:ca:10:5e:4c:fc:fc:9b:82:ca:65:
1d:71:36:0e:fd:e7:4d:ec:25:9d:e0:0e:17:44:cb:
f3:70:48:71:86:87:5f:3f:27:b2:11:07:b6:90:43:
69:a7:b2:41:4c:b9:ef:e9:22:0d:3d:53:a4:fa:68:
11:04:ca:0c:60:26:95:9b:2e:2a:3e:c5:77:56:9f:
17:d0:5a:48:77:6d:f9:89:3b:02:55:b0:92:1b:36:
20:dd:85:73:94:48:70:f9:ea:2e:fb:45:c4:79:8a:
1b:1d:ae:22:48:e6:86:60:cc:d2:75:e7:b7:71:84:
2e:a1:8e:b5:f3:86:82:a1:37:10:0c:00:17:85:21:
0a:b1:f5:fd:1c:73:67:84:db:67:22:c1:b9:2c:6b:
5a:19:09:97:c2:01:2e:11:97:bf:12:e6:11:49:a3:
03:2d:36:3a:38:26:5f:8e:b3:a2:28:a2:0c:eb:38:
c9:49:a9:95:85:d4:9f:32:e5:e2:89:a8:d9:74:82:
4e:9b:51:ab:4a:52:d0:08:41:13:56:d1:00:d1:cd:
cd:c6:60:1c:a1:97:0c:97:3e:88:c2:3d:d4:ae:a5:
47:5e:3c:a5:f6:63:b4:a0:28:3b:c4:c8:96:ee:1e:
78:38:ed:60:b5:9a:7f:89:9c:75:69:29:2a:06:19:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FC:A1:5A:6D:F5:49:D7:31:51:95:2D:93:21:44:5C:04:7D:A8:1F
X509v3 Authority Key Identifier:
keyid:9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c1:07:df:dc:ef:87:02:ed:45:88:86:61:74:1a:97:a4:59:
12:0a:7d:ab:c7:25:23:71:9c:3a:be:8d:80:35:99:31:09:eb:
96:bc:45:4d:48:6b:56:2d:49:65:38:5e:c8:e5:3d:92:81:41:
53:ec:ea:a3:56:5a:54:00:87:99:4f:4a:3b:08:4c:e8:7d:06:
c2:08:99:de:bf:fd:fc:6a:0a:1c:99:93:3a:64:aa:d9:5c:c3:
32:90:57:ab:57:8a:9b:76:e4:16:9d:00:60:6a:e5:22:cc:d6:
82:23:08:d0:a9:39:98:4f:c5:31:a0:5d:9e:a8:62:fb:3c:60:
23:59:58:62:5d:d0:4a:d4:11:d9:66:04:9d:49:2a:ee:f7:ca:
53:43:b5:fe:96:f8:a6:4b:09:9d:97:d7:98:b8:4c:3c:18:1e:
32:c2:48:37:b9:cc:20:24:51:48:7f:78:2a:e5:37:da:82:51:
62:da:31:d8:99:ec:ff:f4:18:8b:be:7c:94:7f:63:cb:ba:9c:
42:c1:13:95:ad:c2:f7:e0:55:91:c3:14:b1:34:db:e5:6b:55:
46:62:5d:35:e1:67:be:bb:7f:56:0a:e6:38:7e:7f:30:3b:6e:
37:22:7c:41:ea:82:4d:f6:1d:db:d7:84:89:13:0a:2a:22:87:
07:64:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:26 2025 by rpki-client