Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: V/GCNbKuyZZBpIVwmCnaBUXQl9s+e2r+QeWh6OdXUXs=
Subject key identifier: 6C:D2:4A:A9:A6:19:E4:70:A5:5D:6A:DB:0A:57:92:06:23:17:B6:41
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 01963CC1B2FD02720911A739C47FD51CD123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 0249
Signing time: Wed 16 Apr 2025 04:00:49 +0000
Manifest this update: Wed 16 Apr 2025 04:00:49 +0000
Manifest next update: Thu 17 Apr 2025 04:00:49 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: GpJVeDSWPS+/UN4gtmtdwyZTU5ydYBI0bjANF/rzPlE=)
2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=)
3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:c1:b2:fd:02:72:09:11:a7:39:c4:7f:d5:1c:d1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Apr 16 04:00:49 2025 GMT
Not After : Apr 17 04:00:49 2025 GMT
Subject: CN=6cd24aa9a619e470a55d6adb0a5792062317b641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:aa:84:df:3d:62:c0:52:61:9d:f5:e6:3a:
49:39:8e:e9:02:5f:06:3b:44:d8:67:e6:1a:70:f3:
f6:86:ee:5c:e5:71:a6:03:33:9f:86:8f:d0:ac:c0:
c6:2a:26:3d:df:d4:ca:9c:bd:21:00:f6:6e:82:46:
49:66:ae:1e:b0:1a:1e:1f:a5:e7:36:77:7c:c6:04:
1c:14:93:d9:95:61:f3:c5:31:ca:37:de:a5:43:9c:
7e:87:0a:59:63:ad:62:cd:91:26:12:c0:cd:a6:9f:
df:b4:0d:b4:25:9f:06:b3:80:5d:e7:53:bc:ff:78:
b5:71:b9:98:73:17:fe:9e:a1:03:c6:a5:58:ad:e9:
76:b2:6a:be:61:1c:13:90:e3:e7:1f:5f:95:ee:a7:
8f:91:93:59:99:ab:37:62:d7:8c:3d:f5:76:3f:8e:
e4:2d:8a:03:29:7a:6c:07:4a:a7:26:fc:10:07:3c:
71:c4:03:43:1b:cc:2c:1f:06:b6:ef:1b:fa:be:8e:
a8:88:05:58:49:b3:46:4e:e9:12:88:46:ed:4b:bc:
23:f7:28:24:fe:91:b0:a7:40:cf:e5:ee:3a:21:1e:
7e:af:49:5b:4e:6f:fa:81:c4:16:95:ea:6a:be:f9:
a3:a0:ee:e9:d9:90:66:1e:b1:07:62:d5:64:6c:b9:
fb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D2:4A:A9:A6:19:E4:70:A5:5D:6A:DB:0A:57:92:06:23:17:B6:41
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fd:c6:45:fa:21:2e:6d:ac:a5:74:ee:01:59:e8:c7:b3:88:
2d:fb:60:07:f9:cd:93:d7:f8:a4:03:b8:2d:4d:0d:91:15:0f:
95:ef:b7:2c:a1:3b:e5:62:94:f2:66:64:ae:bf:6e:d8:44:fa:
f7:05:47:45:ad:b6:fd:02:86:8f:81:e5:50:2d:50:63:81:ff:
f5:93:ce:bd:f5:d4:93:62:d8:ed:f1:6e:41:64:03:c0:0c:67:
85:19:10:ab:7b:5b:fb:de:c9:de:a1:76:74:5a:ca:8d:fb:2f:
cf:ba:73:83:79:2c:91:dd:35:1b:4a:fa:8e:52:7c:89:83:09:
8c:0e:c5:69:00:b8:50:d3:9e:af:27:90:83:58:47:0d:08:0f:
f8:86:0b:21:eb:86:15:eb:cc:5c:f3:1c:d6:8d:37:d3:57:0a:
a7:49:a7:ac:b7:6b:e0:20:4e:d3:89:d8:26:6f:05:53:b3:d3:
00:5d:92:42:c2:1b:52:49:c9:aa:10:87:4e:52:bb:d6:b5:05:
71:35:2a:c0:af:37:77:dd:0e:ab:2c:a7:9a:db:55:85:9b:89:
4c:78:d7:46:0b:b4:52:25:38:c2:eb:38:92:b5:ab:5b:ef:bf:
6a:4d:e2:8c:0a:f4:6b:d5:08:7e:dd:69:7f:04:ab:13:ef:ce:
c1:6d:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:52:03 2025 by rpki-client