Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File: N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier: 43eUXntkR8rKdKEuVUsYf4RvrDGtNOSozfzPTASp19I=
Subject key identifier: 70:3C:B1:8C:94:9E:CD:38:AC:0B:EA:FD:29:D1:C5:AB:5B:88:02:90
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 01960DFAC3449C2493EF453AE9801D7D956C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number: 0760
Signing time: Mon 07 Apr 2025 02:00:59 +0000
Manifest this update: Mon 07 Apr 2025 02:00:59 +0000
Manifest next update: Tue 08 Apr 2025 02:00:59 +0000
Files and hashes: 1: A3ey_cAeMANwFWddA6tWalsb_HU.roa (hash: 1QzvBN6h57NIWttaQKkwiJVejIWg/N7/NzIPvbKh3sU=)
2: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: 67IUDcpMAKMXcuXttXQOftlHM9cGCLOFouH3b0LYhbE=)
3: X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa (hash: I3L20uWKmG3AN70fPYDWHSKnKdL/hAFebOsi5YIWBck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:fa:c3:44:9c:24:93:ef:45:3a:e9:80:1d:7d:95:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: Apr 7 02:00:59 2025 GMT
Not After : Apr 8 02:00:59 2025 GMT
Subject: CN=703cb18c949ecd38ac0beafd29d1c5ab5b880290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:ee:7e:b1:b6:65:41:86:80:91:14:88:b6:
9a:73:76:6b:d5:7e:9e:bb:5b:2b:b2:a4:66:a8:77:
09:f5:b1:72:b7:0e:b3:ca:ed:ba:42:0e:3f:ea:b3:
a3:16:cf:bb:2e:4e:14:85:53:e6:31:cc:6a:bf:fc:
18:e8:a3:b4:95:0c:8d:55:93:8f:8b:ac:c9:5d:bb:
da:43:a8:54:cd:6b:71:e9:98:df:68:cc:38:66:94:
8d:c1:7e:f3:83:cd:3a:01:ff:77:7c:37:5f:c4:93:
15:37:e5:5f:92:09:51:f9:35:54:8b:78:e6:ac:5b:
03:4f:09:03:26:d9:dd:ce:4b:51:e4:bd:8f:25:b6:
cd:78:31:a7:a0:94:d0:b6:ef:ff:76:23:c7:88:a5:
4e:39:40:68:62:18:73:90:af:ca:10:66:73:5a:b7:
a0:cc:e6:9b:ad:99:df:b7:a8:06:6f:73:63:a4:e0:
8e:5b:5c:19:d1:86:00:7b:df:c3:6f:ab:4d:09:5b:
fe:fa:eb:c6:a1:5d:2a:72:32:b9:ef:0a:80:a6:b4:
78:16:8a:9c:2b:a5:bb:1f:bd:41:a6:f2:9d:cd:06:
fa:db:88:ad:f7:19:63:80:7c:7a:64:1d:48:bd:d7:
ec:ef:86:7f:e3:da:b8:fd:6f:2d:d4:e3:7e:49:72:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3C:B1:8C:94:9E:CD:38:AC:0B:EA:FD:29:D1:C5:AB:5B:88:02:90
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:32:1b:ef:b3:14:99:1a:c6:44:cf:3c:be:ab:52:4e:7d:b5:
3e:79:6e:df:4e:a0:79:77:10:ab:a9:f3:c7:d8:a2:d2:8d:b6:
af:8e:17:73:71:27:b6:4a:8f:6b:4f:28:07:24:d5:d8:87:89:
e8:58:b0:8e:30:93:1b:bf:30:9d:61:d1:e7:0e:0c:c5:2f:8b:
21:ef:34:a8:1c:87:d3:08:df:c8:d7:21:e5:9a:56:6d:88:30:
60:1d:c4:13:b2:b9:8c:9a:81:27:60:2d:c5:54:f4:16:5f:8e:
41:33:48:42:89:b8:d4:97:51:78:e0:5b:36:b1:25:5b:07:3f:
96:e9:a6:0d:cf:a8:b2:cb:5b:63:01:10:bd:2e:3c:ed:7a:93:
c5:f9:64:60:57:1a:da:c1:67:1c:7f:7e:a8:e7:63:6f:80:45:
b2:0b:ad:6c:a4:61:68:36:b9:38:db:9a:92:0e:8c:ca:2d:9e:
f5:0b:8f:ba:d1:e1:70:e1:ca:b3:fc:9c:a4:1f:4f:02:07:93:
38:90:1b:2f:29:9e:bd:bd:93:6a:86:cc:83:ef:d2:20:8b:52:
9d:d1:e5:5f:9d:16:32:0b:44:b4:7d:08:65:d1:e3:64:f4:a7:
2b:44:b1:0c:17:16:78:d4:53:fe:13:27:88:81:e4:45:04:39:
09:e5:6f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:39:05 2025 by rpki-client