Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier: vqigI4BdtLT+x6d8b/d1V+OV30n64xWC8+BVrBnEYjA=
Subject key identifier: 90:B0:7A:80:07:0E:29:AA:99:95:84:5B:00:3D:9E:EC:A8:A8:98:F2
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial: 019652A45C4EA5BE0D39B9FF0E1F206D58B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number: 04D7
Signing time: Sun 20 Apr 2025 10:00:25 +0000
Manifest this update: Sun 20 Apr 2025 10:00:25 +0000
Manifest next update: Mon 21 Apr 2025 10:00:25 +0000
Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: +kw/JjeG7Gu+12CuWyi/zyhLbLNIWJ5aRSm5dyfADHw=)
2: uDZZBTPRRP5MQogb2OjdT8pUiBA.roa (hash: T9yL9Bw5mv08XIGrA3/0U3W6rC1uZNivZ+GrYQ4KE/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:5c:4e:a5:be:0d:39:b9:ff:0e:1f:20:6d:58:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Validity
Not Before: Apr 20 10:00:25 2025 GMT
Not After : Apr 21 10:00:25 2025 GMT
Subject: CN=90b07a80070e29aa9995845b003d9eeca8a898f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:b5:cb:74:0a:d7:a9:f5:1b:0f:54:48:2b:
02:b6:02:e5:2f:c3:33:25:4e:11:98:d2:30:2a:41:
85:11:c8:ce:2e:07:9f:ae:ec:3e:f1:f4:5f:79:75:
4f:d3:ea:5d:ce:68:a6:61:50:34:42:31:68:25:b1:
0d:a8:86:eb:9d:19:49:16:eb:81:59:08:7b:bc:f8:
0f:55:d6:8e:b5:0b:9a:27:37:3f:15:6f:70:9b:9e:
b6:f7:88:e5:b7:ed:84:b3:12:c5:71:55:0e:40:6e:
e8:f7:25:e0:fa:86:e2:31:a7:38:f6:61:f7:38:73:
02:70:d3:36:6b:b3:12:b7:84:25:30:e0:cb:e1:5c:
01:1d:a5:af:c5:91:1b:cf:98:f0:5c:e1:ec:8c:2f:
bc:87:3e:f4:94:e7:d6:b0:c2:65:7a:6d:74:3d:39:
2c:2d:a4:cb:75:50:e6:b3:f2:de:15:d9:3d:22:95:
8e:f1:af:8f:a2:44:ff:41:62:f6:6d:4d:5b:7f:ce:
3c:80:97:f4:6e:3f:f5:b6:e6:bb:ee:30:38:1f:0e:
10:c4:5c:94:f0:c5:3f:91:77:6f:7c:38:63:1d:ae:
db:b6:25:81:19:38:5a:dd:47:5e:b0:25:23:ba:1d:
31:32:48:c7:68:2d:78:9f:a9:6c:a4:70:d4:40:9b:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B0:7A:80:07:0E:29:AA:99:95:84:5B:00:3D:9E:EC:A8:A8:98:F2
X509v3 Authority Key Identifier:
keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cb:1e:e7:5d:02:87:e1:c7:95:6a:2c:c0:38:0f:c3:a6:e8:
c2:23:af:c1:1a:05:35:be:ac:be:e5:b2:57:6c:b4:70:72:35:
38:67:99:56:4d:cc:44:b3:81:f7:ad:ec:db:c7:a3:51:85:d8:
4c:f7:c4:5c:43:0b:39:1c:70:c7:79:1b:91:7f:41:b4:ac:d9:
80:be:3a:f9:f9:50:0d:ca:90:29:34:f5:00:d6:7d:e4:5f:43:
45:33:64:ef:e7:c6:14:56:fd:04:cb:cb:59:16:c9:c9:d1:67:
30:32:7d:14:57:5f:8c:b7:d4:8c:5d:22:87:d5:75:a2:69:1a:
20:36:d3:53:04:f7:62:c6:ef:9e:2a:07:07:d2:7b:31:94:31:
c7:ab:13:86:16:96:9a:93:01:2e:66:7d:d0:c7:e7:dc:50:9e:
fa:ed:74:78:41:1e:ef:c9:31:43:f3:47:e1:80:18:d3:8e:2b:
82:81:13:31:86:de:d1:ef:42:4e:fe:87:17:c3:41:d1:c9:cd:
31:06:79:c4:b8:c1:4f:0b:19:16:f9:65:d7:17:97:c7:4e:37:
df:c2:4d:b4:c6:7f:65:49:7d:2f:5c:11:32:7f:0c:10:d9:44:
e9:28:39:c2:98:95:ad:ac:90:8b:0c:15:5f:12:c7:75:1c:83:
c7:ad:b5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:09 2025 by rpki-client