Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: cNmiATCLkq9gUVbfGqvHb3u/vic/QZR0mYNB1QJ6scU=
Subject key identifier: 10:F4:D2:50:83:5D:CA:9E:03:5F:B8:4C:B5:8E:0F:95:E4:2D:56:4E
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 0196444494102670634CA39531E8C51A8AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1443
Signing time: Thu 17 Apr 2025 15:01:07 +0000
Manifest this update: Thu 17 Apr 2025 15:01:07 +0000
Manifest next update: Fri 18 Apr 2025 15:01:07 +0000
Files and hashes: 1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=)
2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: n8+h6C6nABcCcPYSr0tz+hDVg9m3PU0Dn7AYlyY9MBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:94:10:26:70:63:4c:a3:95:31:e8:c5:1a:8a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Apr 17 15:01:07 2025 GMT
Not After : Apr 18 15:01:07 2025 GMT
Subject: CN=10f4d250835dca9e035fb84cb58e0f95e42d564e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:94:5d:6b:ff:98:80:05:bb:31:e3:d5:21:
ac:46:01:70:86:41:ee:fd:fb:11:1b:08:ea:cb:95:
1b:a5:f4:fb:63:18:3d:7e:09:03:b9:0a:68:2a:47:
f9:f3:05:1a:dc:d8:03:1d:0d:85:7e:04:0b:dc:3c:
36:c3:5a:fb:5d:5d:f1:33:cf:50:74:85:13:6f:d7:
a1:90:46:20:2d:8c:54:e0:7f:14:31:06:30:76:cb:
07:e3:aa:42:db:e4:f8:31:08:97:f8:da:4e:79:47:
f9:76:c6:b5:79:89:82:1a:a0:0c:51:bd:99:65:14:
e7:81:1b:db:54:20:90:cd:fd:82:22:c5:b9:66:f5:
d7:42:3a:f5:14:8d:b7:a3:8b:d1:8b:19:96:97:49:
22:1a:27:a4:1e:04:c1:34:a8:18:7c:a3:96:56:4a:
7b:a6:74:85:ea:57:4c:79:e8:d6:c1:bf:7a:62:ad:
86:bd:1c:8e:97:96:85:b7:1d:1b:69:05:d2:ae:5d:
8f:7b:9b:4c:df:4e:41:d4:75:d2:e8:ea:fc:fd:9f:
c3:14:79:ca:82:3b:e9:75:59:48:7e:4e:d6:7d:4e:
42:6c:54:78:25:7f:f9:99:a6:17:67:53:42:42:6c:
05:65:fc:05:53:9a:60:14:4e:23:b6:05:2b:cb:57:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F4:D2:50:83:5D:CA:9E:03:5F:B8:4C:B5:8E:0F:95:E4:2D:56:4E
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:53:a3:65:d5:5d:55:20:7b:62:a3:ec:b7:70:5f:9f:e7:e0:
27:c8:cf:05:3e:a8:0a:0f:ab:7d:06:ee:26:8b:b2:d0:0b:6a:
a9:b7:05:0a:83:1d:e1:73:cb:b7:e4:6b:00:b9:cf:0a:76:be:
9b:a2:33:95:c5:fc:8e:60:cc:34:b3:71:a1:42:99:1f:57:72:
93:42:62:ab:59:0d:51:e2:24:bf:a0:7d:24:59:1b:7c:db:1b:
b9:5a:7d:6f:71:4f:e5:f5:6d:3f:ed:b6:69:93:4a:45:9d:48:
a8:19:3c:90:6e:ed:01:75:10:c3:15:c9:34:7e:41:ac:0a:0c:
a3:9e:f3:84:9c:9c:2f:d3:fa:73:17:dd:36:9f:ee:13:2b:5f:
2f:eb:a6:76:65:2c:f6:0b:eb:68:fb:1c:d8:3e:27:ca:e0:11:
aa:5c:89:1d:ed:df:a4:ea:25:7f:13:6e:33:44:a0:3d:b4:b6:
e0:9a:41:ab:5e:54:e2:44:ec:a2:c4:db:1f:92:98:f1:d6:45:
cd:02:e6:b5:96:d5:59:77:bd:0f:13:60:78:f0:9f:7d:ec:9e:
27:83:4a:50:cf:f5:13:d7:ad:ba:e7:4d:55:63:51:71:bd:1d:
4f:50:ef:e9:95:33:a0:36:39:3b:60:40:91:ec:bc:47:25:61:
4f:bf:52:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:43:09 2025 by rpki-client