Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier: FKjzuSpjL82nHruMwFah9uDDdSOpzPHaVJfhsYG3JXY=
Subject key identifier: 11:90:31:F2:45:9A:B8:3D:94:A4:85:F9:A4:EB:BB:1D:26:6A:6A:82
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 01964CA2767BA2B7E80949BF3D748BE16E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number: 0FC0
Signing time: Sat 19 Apr 2025 06:00:37 +0000
Manifest this update: Sat 19 Apr 2025 06:00:37 +0000
Manifest next update: Sun 20 Apr 2025 06:00:37 +0000
Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: B5j5WDhOElOPPz+lkU2Z6MIsao0koE/j/i6eN5Ng9Mo=)
2: yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa (hash: Xz+3ntm5iVPl2B9YcE2P65g+xG5FxMjLX4w1n0LEPnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:76:7b:a2:b7:e8:09:49:bf:3d:74:8b:e1:6e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Apr 19 06:00:37 2025 GMT
Not After : Apr 20 06:00:37 2025 GMT
Subject: CN=119031f2459ab83d94a485f9a4ebbb1d266a6a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:67:b6:dc:ae:68:42:53:9f:fa:a3:c7:30:8c:
76:b3:86:78:aa:89:a1:f6:66:88:3f:9a:ba:a3:f6:
eb:85:da:fc:05:3f:de:6e:ce:f1:8f:af:dd:b3:9a:
5e:9e:6e:6c:9e:2f:c0:36:8b:16:69:bf:d1:2e:a0:
6a:07:bc:9c:a2:5a:10:80:4a:39:46:0f:8a:2e:f4:
b8:e5:d7:2a:54:39:fc:f5:21:01:14:fb:0d:49:23:
ab:f3:0a:a5:16:b6:f1:31:c4:d3:f6:b5:8f:4e:57:
67:7b:49:ed:5e:13:f2:90:b2:c4:c4:96:91:3a:61:
79:39:88:05:3a:f5:40:8b:e0:23:73:af:c2:f4:64:
d1:38:6e:e9:a1:d1:31:42:bd:a9:8b:36:a6:f1:cc:
1f:4c:4f:a2:ea:cd:29:c9:08:30:b7:57:db:1e:af:
93:ed:b6:4c:6a:10:c5:ac:08:8f:31:d7:61:cc:96:
2e:eb:d7:d5:5e:ed:9c:e6:99:20:16:44:50:da:fc:
67:9c:f9:2e:11:14:c6:98:4f:fa:dd:a8:3f:bc:54:
bc:a7:6a:50:68:80:43:fd:00:a5:9b:a7:89:c7:30:
33:ec:3a:24:4f:d4:27:4a:3f:32:7b:61:e6:5e:74:
44:52:c7:cc:85:30:a1:c6:b0:41:e4:30:8a:83:16:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:31:F2:45:9A:B8:3D:94:A4:85:F9:A4:EB:BB:1D:26:6A:6A:82
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:78:d2:99:0c:55:11:0a:66:b8:f5:ff:73:c2:71:81:e5:0f:
a2:e7:4a:22:00:a4:fe:3f:b3:9b:64:10:6e:51:df:75:88:e2:
e8:59:8e:98:06:0b:57:04:3c:59:27:86:d8:9b:c5:b9:76:0d:
a1:c4:cf:ce:eb:20:cd:ea:b1:8d:ba:33:f3:fe:2a:5f:57:d4:
4e:2d:7f:61:bb:70:d1:44:21:d8:da:7f:bf:2d:b2:3d:2f:fa:
f7:53:41:50:50:1c:22:e3:97:eb:6e:69:d6:35:f0:ec:88:3c:
4e:40:9b:13:a8:83:ea:05:b2:b4:ac:65:a9:6f:73:50:a8:e2:
42:26:cf:18:a6:fe:fa:a4:20:88:91:61:f1:ea:20:bf:11:90:
86:d0:d7:4d:df:b8:51:78:65:a5:5c:fc:63:8c:7f:81:4e:4e:
bb:55:41:1d:17:12:77:3b:e0:1c:75:26:28:b6:26:cd:7b:40:
1c:66:c3:51:41:fe:02:bc:b5:eb:36:20:1a:a1:b6:4a:e9:89:
ea:73:0a:79:20:09:e3:9f:29:5e:da:af:6f:3d:2c:64:4f:58:
35:2c:f0:56:9b:61:ca:ac:a3:30:a2:f4:bf:eb:90:a7:60:be:
4b:ef:71:b8:cd:68:02:ba:5a:34:4b:28:95:d1:a7:17:6d:a3:
7d:0a:6d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:17 2025 by rpki-client