Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: H7/yFPuoTfSWROinPb6TyJ+CoeHI3T2EhD3RwZ30vbs=
Subject key identifier: 0E:3F:36:86:15:95:B7:C7:19:93:D6:0D:11:30:5B:E4:CA:FF:8D:4B
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 01964A0F97BF57DABF0C54A04868489F5810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 148A
Signing time: Fri 18 Apr 2025 18:00:57 +0000
Manifest this update: Fri 18 Apr 2025 18:00:57 +0000
Manifest next update: Sat 19 Apr 2025 18:00:57 +0000
Files and hashes: 1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: nwlqL8NVcNSk08qxVFuDladogKsK+NLS5M1Z6/WLLu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:97:bf:57:da:bf:0c:54:a0:48:68:48:9f:58:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Apr 18 18:00:57 2025 GMT
Not After : Apr 19 18:00:57 2025 GMT
Subject: CN=0e3f36861595b7c71993d60d11305be4caff8d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:81:34:b4:e0:29:58:e0:4f:49:96:b3:a0:
1f:67:5f:bc:6c:f6:61:44:20:fa:4f:48:53:d3:c5:
04:6f:eb:a7:36:db:6c:8c:59:34:26:48:31:88:70:
f1:fb:d1:46:c6:19:9d:95:59:8c:d1:1d:24:fc:c5:
7a:da:13:f5:6d:57:11:f7:60:ec:e4:cb:d5:64:b0:
f2:e5:d2:39:a5:cf:7c:f5:b3:62:27:29:c7:b7:e1:
23:d9:0a:26:fd:dd:05:d7:1f:5a:ad:49:52:bd:c6:
0f:b8:97:67:0f:76:b7:33:b2:25:fb:c0:ef:77:6b:
ad:58:04:57:27:bb:a0:1e:d6:da:15:eb:00:02:81:
2f:13:05:0b:1b:22:ff:12:d0:51:0d:d1:8b:f9:33:
c3:84:65:23:49:7c:15:51:9c:0c:4a:f5:36:68:9c:
ce:f8:21:75:76:cc:22:e8:61:05:c6:0a:6e:d8:e2:
2b:cc:dc:6b:e3:c8:30:5c:9b:da:01:2d:a0:4c:67:
4c:26:dc:2a:9d:9d:ac:37:0d:d2:ac:6d:0f:0f:43:
f4:0b:26:e9:49:7e:2b:99:69:49:c3:b6:c2:1c:2e:
d3:7a:58:7f:93:3f:1c:59:86:a4:91:50:82:7d:82:
d9:bd:68:19:31:3b:f9:ff:1e:e3:1f:54:5a:78:f8:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3F:36:86:15:95:B7:C7:19:93:D6:0D:11:30:5B:E4:CA:FF:8D:4B
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:33:c0:80:f6:01:cb:5b:ff:3e:a7:1c:41:2b:87:f2:e7:fb:
cd:6c:ac:ab:98:57:77:e2:fe:22:bc:85:6a:f1:52:2b:2b:76:
8d:8f:ca:be:1b:a6:a2:a7:d1:f0:84:38:fa:64:4d:ad:b6:b1:
76:db:8d:8c:70:77:aa:b2:5c:31:2b:14:9a:0d:79:ef:15:d1:
d1:98:5d:f7:f2:2d:54:38:3c:2c:b1:b9:a6:d6:9d:40:a1:e3:
1b:ad:26:19:f3:6b:53:6e:35:48:bc:ca:44:65:be:0a:07:0f:
2d:3c:1e:0b:7e:16:9a:c0:33:00:3a:2c:3c:1c:57:3c:55:af:
b5:e5:a2:63:4a:06:10:6b:c1:cc:ef:f9:33:1c:bd:38:2c:bf:
0d:59:ad:67:bd:44:a9:79:a8:e1:34:78:f2:0b:16:17:a4:22:
fa:6e:7f:d8:74:e8:e6:0a:6f:a1:fb:32:86:e5:36:f9:ef:c4:
ac:90:28:e3:d2:de:24:5a:86:a0:20:4a:24:c6:01:29:c9:fb:
f3:a3:9f:f8:a4:3c:74:8c:3d:20:8e:41:7c:2f:74:7a:3a:5b:
75:79:db:ec:c0:d0:27:7b:21:25:e3:2e:a5:4e:90:f7:aa:87:
12:db:1d:b3:7e:16:a6:b6:26:ff:d1:a6:0b:7c:e6:7f:30:8d:
5b:82:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:11:13 2025 by rpki-client