Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json)
Hash identifier: GiiMF0b0yifiesUUmkeZWdFUbh5hqy6VFjQ2XWpQZGE=
Subject key identifier: 0C:5A:1D:0A:F8:7C:F7:A7:6B:C7:4E:3E:C6:65:29:60:C9:3A:FC:D3
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial: 01958B84780A1E480D3F86194559B8B24D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
Manifest number: 0A0A
Signing time: Wed 12 Mar 2025 18:01:09 +0000
Manifest this update: Wed 12 Mar 2025 18:01:09 +0000
Manifest next update: Thu 13 Mar 2025 18:01:09 +0000
Files and hashes: 1: G2aa7vj-d_CA2HuKW-IASCzWaSQ.roa (hash: pv32os3ZPwMAxeQUj3RBQ+FwWykK77hFOgeqqDGQkeE=)
2: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: Zt5w6XZcjAOwryUgPAEBrXimcYDnXAByToJTRyYXkVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:78:0a:1e:48:0d:3f:86:19:45:59:b8:b2:4d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646213198899edfa8b42add473ada218748e104
Validity
Not Before: Mar 12 18:01:09 2025 GMT
Not After : Mar 13 18:01:09 2025 GMT
Subject: CN=0c5a1d0af87cf7a76bc74e3ec6652960c93afcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:c4:cd:39:48:0c:90:7d:f6:ed:7b:95:cb:
20:0f:f0:aa:67:9b:a8:32:52:c9:12:d2:0a:c3:c6:
a3:68:80:44:84:c6:ad:59:37:99:f7:f4:76:61:5d:
df:1c:87:46:1a:63:8f:48:e7:0c:fa:af:e7:fc:17:
66:a1:54:95:1f:06:05:5b:83:fd:4f:3e:a4:3b:4e:
c5:24:d2:14:2d:2c:e4:46:99:2b:1b:45:22:4a:f9:
fd:e6:6b:1d:c7:dd:af:79:96:22:b8:4a:8f:17:70:
5e:ab:b4:c5:5f:1e:2c:90:45:d8:0c:95:05:50:e3:
2b:fe:1d:e8:2a:2b:42:85:6d:f5:20:35:9f:c7:14:
30:b1:d5:34:9d:ec:e0:d6:a4:4c:83:41:d3:71:34:
4d:b4:4b:7e:83:44:e6:7d:16:52:4c:9d:e1:81:71:
d1:52:18:53:6b:53:9b:61:4a:a4:dd:04:0c:bf:b6:
df:2c:99:bc:20:b7:a6:be:43:1b:b8:f5:aa:9c:a3:
ed:38:b1:6d:35:bb:f9:e4:1f:4c:ad:6d:a2:a1:11:
3f:d6:fd:06:0f:60:e9:f1:58:21:ca:ba:dd:c9:46:
0e:01:51:ca:d5:5b:2f:a0:5b:f9:f9:e0:4d:0d:b0:
de:70:8d:28:f3:23:58:6a:dd:ca:54:ea:51:3c:76:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:1D:0A:F8:7C:F7:A7:6B:C7:4E:3E:C6:65:29:60:C9:3A:FC:D3
X509v3 Authority Key Identifier:
keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:81:12:5c:6a:41:09:58:8c:8f:3c:6c:d7:d5:fc:22:c4:f2:
78:31:9b:21:cc:e6:86:72:9b:7b:be:6a:6f:2a:5f:99:cc:fe:
96:91:04:b3:a1:90:2e:66:f3:b5:27:31:07:b3:72:7e:50:da:
23:d0:c0:81:e2:57:ec:35:a6:b7:be:5c:f2:f1:6c:85:b9:65:
eb:37:92:1b:d2:64:0b:9f:d8:58:ad:ad:70:86:10:5b:3e:aa:
b3:84:d6:87:06:f7:91:9b:cd:7c:f5:33:60:6b:12:7c:45:f3:
1c:1c:32:b6:e0:4a:20:d3:cd:f9:23:1b:d6:54:a4:79:71:80:
0c:df:5a:4f:9e:76:56:e1:75:ac:df:d6:bf:52:a4:5e:8d:26:
6e:55:ea:14:7d:04:cb:fd:4b:7f:0f:24:0b:c3:22:46:5d:4a:
9d:40:73:b6:5f:e8:4c:b3:49:ae:9b:ad:16:51:03:dc:6c:61:
eb:5e:dc:35:ae:88:0e:ff:e0:cb:9f:12:6b:69:50:ed:77:45:
91:ce:47:c3:38:f3:61:13:4f:ce:6d:c2:d8:22:4d:2b:b4:77:
4d:c8:12:68:d7:45:be:2c:b8:97:1b:37:c1:ef:d7:3b:58:93:
43:0a:49:25:88:a1:13:eb:33:5e:36:65:96:a1:9a:00:45:3f:
76:9a:22:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:32 2025 by rpki-client