Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
File: nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft (raw, json)
Hash identifier: ND9rKRqt8nSIeFe4hTYpdNXapcw3ysJH8WhFWf3vlpQ=
Subject key identifier: 4D:D1:03:FC:BF:59:A1:C6:62:59:3F:A0:93:EB:35:F5:C5:07:2E:3C
Authority key identifier: 9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83
Certificate issuer: /CN=9e193d6f48067ffb8732cc432697542313dc6783
Certificate serial: 0195790FAA40A66D129CF2408151DEFA2768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
Manifest number: F0
Signing time: Sun 09 Mar 2025 04:00:24 +0000
Manifest this update: Sun 09 Mar 2025 04:00:24 +0000
Manifest next update: Mon 10 Mar 2025 04:00:24 +0000
Files and hashes: 1: nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl (hash: sqOXrbXXfqYP80w7QqkcwadwuZq8tsM8iW3Tf3bUyrk=)
2: qretLq-2TRV_kLur_ZfrXtWfGk4.roa (hash: K7yWDcrFHXcXI8MhU1CBJxRjChOhWDTmYbsiBA7G8MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:0f:aa:40:a6:6d:12:9c:f2:40:81:51:de:fa:27:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e193d6f48067ffb8732cc432697542313dc6783
Validity
Not Before: Mar 9 04:00:24 2025 GMT
Not After : Mar 10 04:00:24 2025 GMT
Subject: CN=4dd103fcbf59a1c662593fa093eb35f5c5072e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:31:86:ae:8f:ad:ea:37:2e:9e:ca:6d:18:
cc:c8:53:9e:78:17:c7:51:2e:8d:40:0e:dd:85:2a:
1d:ba:ea:87:0e:58:c9:4f:9a:54:45:5b:8b:33:e4:
69:c9:0c:41:7d:91:4f:a4:97:92:7b:75:4f:9d:56:
c3:a5:a3:62:ed:8a:24:1f:d5:ca:14:dd:c8:aa:b1:
72:a0:70:71:a5:72:b9:31:45:64:6b:7b:48:42:a5:
be:26:67:c1:b3:5d:8b:5d:17:01:7d:14:c1:d4:75:
03:16:52:37:46:0a:f9:55:90:b1:c2:84:2a:3e:49:
a1:65:dc:db:8f:a6:d4:ec:04:2c:25:2f:19:f0:e0:
9e:ec:e8:52:7a:7b:c9:df:a8:58:9d:d9:fd:d7:bb:
84:57:bd:4e:e2:a9:e5:e5:6f:ce:bc:c8:49:30:c6:
0b:aa:8f:08:eb:3e:ae:66:ea:ce:74:22:e3:df:a4:
d4:64:5c:5d:37:33:4a:71:1c:77:ca:76:e1:7e:89:
42:43:64:62:6c:3b:9a:5b:f6:02:92:42:5d:0a:db:
3d:a0:e8:22:32:71:8d:c8:3b:e6:b1:1c:ba:8d:39:
5d:d2:f2:ab:07:81:f7:ea:b1:5b:1b:6e:ca:e3:64:
0f:0a:29:fa:e0:05:11:95:17:cb:85:cd:19:56:8d:
bf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D1:03:FC:BF:59:A1:C6:62:59:3F:A0:93:EB:35:F5:C5:07:2E:3C
X509v3 Authority Key Identifier:
keyid:9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:17:ec:45:59:2d:7c:b2:bc:74:a1:e7:27:90:ff:1b:0e:77:
ab:9d:59:6e:76:72:19:65:e6:8a:01:1d:5a:d5:27:15:1d:a4:
94:28:38:c3:9c:f7:ed:4d:39:f7:11:a9:35:64:79:2d:2b:1c:
00:5a:74:42:2a:48:17:8d:d8:b2:d0:14:f2:55:b6:3a:c1:6e:
06:d3:aa:66:8d:b0:3c:ea:c8:2c:cc:03:89:e8:de:77:c2:d4:
73:d7:cb:aa:11:40:0f:5f:b5:e6:c6:91:b9:fb:d7:12:81:df:
3e:83:0e:73:e4:49:00:82:ff:81:fb:49:d5:ef:d6:8a:f4:72:
2e:f4:0b:8b:51:37:a3:3e:1c:63:c1:82:6a:fe:30:68:b0:3d:
66:03:b1:e1:1d:03:0f:cb:41:7e:cd:1f:c0:0a:d9:35:d2:27:
8a:d8:ff:23:3e:7f:0d:c7:e5:28:fc:aa:6f:52:8e:d6:77:a3:
c0:eb:1a:cd:3c:a7:4b:85:60:29:5a:23:04:bd:28:37:64:56:
3a:9c:45:d4:d9:10:5a:2e:c3:dc:1c:69:ea:21:97:8b:1d:e5:
99:59:57:5e:79:1c:86:76:0c:db:9e:f7:42:01:a7:eb:27:b3:
50:a4:b2:1a:a7:86:eb:60:90:b2:91:a2:49:45:17:4b:0c:6d:
3e:9d:6f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:40:43 2025 by rpki-client