Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: ofFKEvMOv0VcNJr1msJotbTc18qGfFTnYr19klVDv6U=
Subject key identifier: D2:97:2B:34:09:F1:B5:16:EE:08:FC:12:31:7E:0F:0E:CC:EE:94:74
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 01962B2A6062DD3266F38B6347BFB248848B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 04B9
Signing time: Sat 12 Apr 2025 18:01:59 +0000
Manifest this update: Sat 12 Apr 2025 18:01:59 +0000
Manifest next update: Sun 13 Apr 2025 18:01:59 +0000
Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: q4tow1Tdsow+xm6X2cSG1Gx9tMCo3RrrccG/M6+V/T4=)
2: hzr42e2R_h-LWwgBpSQZacNEqsc.roa (hash: 9mXipkAV76pHGL76kppNcnsru8YUceXMwinc9f3N1VQ=)
3: t7tnySRpEFMTydXCzGToiDJgYGQ.roa (hash: CXeAI4+kyWk1ca7T6WDcTTVmJi/Ezadlx47KG35a8Bw=)
4: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (hash: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:2a:60:62:dd:32:66:f3:8b:63:47:bf:b2:48:84:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Apr 12 18:01:59 2025 GMT
Not After : Apr 13 18:01:59 2025 GMT
Subject: CN=d2972b3409f1b516ee08fc12317e0f0eccee9474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:81:ed:17:1c:ab:1b:5a:92:8f:c9:f0:7a:
8e:64:18:cc:14:13:a7:09:39:fd:30:63:0d:40:18:
75:ff:a8:3a:17:a2:0b:1f:ec:1b:48:fb:57:2b:1d:
41:47:d3:1d:2c:0c:1a:72:23:1e:7c:25:e0:00:28:
9f:cc:7d:65:c5:8c:51:bb:df:4c:3a:3e:5c:9b:e5:
ec:d3:c2:e7:1c:7a:ea:1c:6c:80:07:d1:26:33:1d:
38:1a:e9:8e:b1:84:cf:fb:3f:fb:11:3f:41:2b:0c:
94:ef:b7:f1:aa:ed:d6:6a:50:09:61:63:cd:ee:4b:
60:3b:8d:99:b1:a7:43:c6:a8:38:82:b1:26:28:de:
83:dc:57:8b:26:fd:f8:15:2b:fb:97:82:56:6a:08:
56:61:9d:e4:8d:c9:1a:90:bb:3b:03:79:61:53:bb:
91:e7:6d:f1:70:71:2c:9b:50:f7:6a:03:28:78:ec:
99:e5:ce:83:23:a0:75:14:00:03:23:63:da:66:f6:
b7:b0:13:0f:da:0e:1e:1f:dd:b0:32:7d:2c:54:39:
54:8a:68:90:18:e6:81:6a:48:16:95:40:79:87:fd:
ea:4b:5d:80:b7:90:28:54:95:54:3d:94:de:f6:e0:
94:9f:7e:05:67:c9:25:b9:37:9f:23:13:15:ce:de:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:97:2B:34:09:F1:B5:16:EE:08:FC:12:31:7E:0F:0E:CC:EE:94:74
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ef:b0:0a:d5:8d:3b:46:6d:30:a8:df:0d:cf:5e:f0:73:65:
4d:a1:42:c1:58:ec:58:6d:ab:bf:59:93:05:a6:3a:01:53:0a:
95:8e:cc:73:55:22:f5:3c:46:e4:3b:77:e9:81:ca:91:1d:c0:
99:5d:79:d8:ba:0e:99:4c:b8:e1:8c:b7:62:b0:ff:c5:40:c1:
89:25:14:cb:9d:e0:cd:0c:e8:da:91:18:f5:9d:c7:4e:71:83:
f9:af:11:1f:7e:79:c6:8f:64:a8:cb:7a:81:65:9e:90:41:80:
ec:66:a5:b2:a0:04:aa:fc:91:46:6a:e0:84:f7:3f:9d:e3:17:
b7:6b:0f:18:d7:7a:d8:38:80:d2:15:17:2b:1b:ec:61:48:e6:
a3:d0:51:d0:6c:fa:df:c5:24:d9:f9:0e:ac:9c:86:8c:a1:64:
4b:ed:7c:34:da:88:d6:d6:b4:ac:c7:cf:80:01:ef:a4:c5:b1:
fc:dd:6c:a3:99:f2:3d:00:37:8f:f6:08:c0:08:1a:91:d9:f0:
5d:f2:54:1d:62:f3:3a:4e:66:76:4f:96:7b:ca:98:46:f6:77:
7b:11:37:a3:86:99:9a:3b:1c:5a:2e:5a:8d:c4:62:cb:8a:83:
9b:0d:ae:31:13:b2:84:d9:c7:7f:4c:9f:e1:ed:35:e4:73:23:
0c:33:88:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:33:10 2025 by rpki-client