Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: leHdGtPVR4BHiejNdAybITkeSu3LLXf0ovb9+kooESQ=
Subject key identifier: DD:72:7E:F9:13:9C:CB:24:68:C9:C0:B9:69:9B:EF:68:85:CA:4D:27
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 0196545C002E4C51299B4C9CA3669109F423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 0120
Signing time: Sun 20 Apr 2025 18:00:37 +0000
Manifest this update: Sun 20 Apr 2025 18:00:37 +0000
Manifest next update: Mon 21 Apr 2025 18:00:37 +0000
Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: N0MEJozIkoR9eLp35wG2TyE98GZKvFkJfaA7CPrVg8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:00:2e:4c:51:29:9b:4c:9c:a3:66:91:09:f4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Apr 20 18:00:37 2025 GMT
Not After : Apr 21 18:00:37 2025 GMT
Subject: CN=dd727ef9139ccb2468c9c0b9699bef6885ca4d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:66:18:f7:23:4b:d0:5c:75:f1:bf:f0:3e:
da:e8:5b:f5:45:0c:95:cb:6a:3b:48:cd:dc:39:83:
a0:46:62:5e:48:1d:ae:cd:df:89:8e:e9:d2:a5:bd:
f6:e5:45:d0:b6:a7:8a:ba:ef:6a:bd:19:29:7b:1e:
55:79:c9:00:5c:e3:39:94:35:49:21:e0:32:2a:95:
54:af:01:7d:20:8a:3f:4f:34:f4:1e:a6:67:dd:34:
59:98:28:fa:3b:be:32:a2:0a:8b:42:3d:92:60:a5:
bb:77:9f:b1:19:d3:77:4d:70:48:05:46:bb:34:52:
60:f1:9c:82:5c:e6:25:1f:d6:67:8f:13:34:96:5e:
0b:13:85:2a:31:48:41:3a:6e:1d:ea:ae:3b:20:e0:
8c:96:88:4b:0b:8b:aa:51:ba:df:a7:3d:8f:df:5f:
19:f5:de:7d:cf:ad:a6:d0:cb:02:3a:78:59:40:f5:
30:95:e5:e8:5e:66:67:62:00:4a:8e:d1:7b:96:65:
8b:cb:04:a6:df:56:58:29:f2:6f:01:ab:ae:af:08:
e2:e4:7d:2e:b7:a6:ad:e0:ba:3c:0e:c5:88:59:a6:
67:ee:e6:49:ec:97:ba:e7:7f:51:0b:6b:f0:bc:f7:
ba:fb:95:f0:e3:e1:8f:c0:18:84:5d:5d:94:ae:3d:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:72:7E:F9:13:9C:CB:24:68:C9:C0:B9:69:9B:EF:68:85:CA:4D:27
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:96:6e:1f:36:bf:2f:7f:57:91:6f:42:e1:0c:9b:c6:50:d8:
f5:7d:8d:90:d4:e4:aa:5c:8d:6a:28:c5:db:63:08:44:5a:02:
cc:36:72:c7:ee:62:27:01:41:f7:d9:1a:ad:ae:90:0f:8a:3f:
82:7b:0c:0c:1d:ff:02:17:00:78:64:fc:35:ba:71:b4:e8:2e:
69:ba:3f:fa:ba:21:93:7c:a4:ea:a9:1c:34:f6:4d:be:96:e2:
f7:5f:ec:c1:ef:b1:5e:de:07:d7:6b:29:85:0b:c2:7b:75:d1:
ba:7c:13:0f:95:37:e0:e3:2f:d3:ee:d9:99:4c:ff:d6:52:44:
c2:e1:0c:99:85:0e:d2:0d:c2:de:9b:63:6a:28:bc:43:db:3e:
49:1f:d6:26:b0:22:06:14:53:04:f8:d2:31:35:92:b0:87:2d:
d9:5d:4f:63:de:d4:08:99:69:1a:8c:09:11:c6:ea:bd:91:2f:
fc:2e:11:ba:48:37:ce:f9:06:38:2c:b3:8b:b4:6d:b6:d7:fe:
36:6a:c1:94:89:6b:72:56:a9:03:f6:d3:ce:5a:3b:e8:23:51:
72:1d:92:bd:cc:a1:90:21:59:26:4b:61:90:30:de:c5:2b:fa:
89:61:d6:ea:34:dd:9f:53:05:01:89:c3:42:22:cf:53:57:71:
2f:ae:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:50:08 2025 by rpki-client