Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: yuE1hEHcPVmtSP0XnRjUnERgOP3KLdEGL5RKMNP5wPo=
Subject key identifier: AA:F4:73:A0:AB:1E:36:2C:18:DA:8A:4A:AE:51:F9:99:F1:EF:7C:98
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 01964BFDE02464007362ABD6F1274D7946FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 0BA3
Signing time: Sat 19 Apr 2025 03:00:51 +0000
Manifest this update: Sat 19 Apr 2025 03:00:51 +0000
Manifest next update: Sun 20 Apr 2025 03:00:51 +0000
Files and hashes: 1: FEZEft80jliOlkGyEwySyBAkmWo.roa (hash: WK/TRHiffo4AU+bk5eHbjtuUsofDcjiz4uFJQmb9AMI=)
2: ish4NG6w0suFxadmLrSJLkxjTIQ.roa (hash: SxPMOYIhwaAgOQuSwCZyhiBxyzhniVTSwZchO8Jy+js=)
3: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: Sj+4pgolchCDprVncbItOJbUOWimJEjMx7LroI4LbME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:e0:24:64:00:73:62:ab:d6:f1:27:4d:79:46:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Apr 19 03:00:51 2025 GMT
Not After : Apr 20 03:00:51 2025 GMT
Subject: CN=aaf473a0ab1e362c18da8a4aae51f999f1ef7c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1b:2c:28:58:09:5e:6d:78:17:40:a7:3f:7f:
65:63:a1:93:9f:e6:cb:e4:fa:46:e6:91:1d:46:0a:
4a:c5:1f:03:e0:9f:3f:4c:80:5b:ca:e8:13:c3:2e:
eb:60:4a:5c:50:06:5a:ad:e6:99:eb:51:cb:31:65:
a4:8b:1b:44:53:34:00:d7:29:f8:07:a4:34:a9:ec:
b6:3f:fd:98:5e:de:4e:63:8f:2a:55:48:31:b2:eb:
7a:d3:45:07:83:3b:f4:8f:d8:58:6a:10:28:a8:03:
28:d7:53:d4:44:60:19:b9:67:77:8d:c0:50:58:68:
ed:ec:da:57:ff:23:02:66:ee:76:d5:ab:f4:33:9c:
16:2b:47:a1:e3:d8:bc:5d:f9:28:a6:5d:1b:7d:93:
92:10:6e:51:ed:59:60:a8:ca:02:d4:41:f7:c2:62:
ff:92:fd:0f:0d:dd:3e:ba:b5:07:7c:77:27:79:80:
9d:e2:1c:6b:d1:bf:ed:70:bd:8f:0b:bc:0a:55:ff:
ca:bc:1d:1e:4d:93:21:93:24:68:6a:fe:94:25:aa:
63:41:b5:43:51:61:95:3d:7d:fe:0e:9b:18:a8:78:
2d:8d:df:d7:d5:3f:47:4e:28:d2:f2:9c:c8:ad:fa:
77:da:d7:66:3e:b4:f8:e9:53:99:26:28:23:69:75:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F4:73:A0:AB:1E:36:2C:18:DA:8A:4A:AE:51:F9:99:F1:EF:7C:98
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d0:9c:03:ce:6e:b6:a6:6f:1c:3a:ca:33:ae:02:ce:17:63:
61:28:5b:9c:6e:8c:99:1f:75:34:1a:0d:03:fa:27:23:03:28:
eb:f1:5d:86:cc:2f:b1:b7:dd:e5:b6:75:77:be:93:9f:28:eb:
7a:b2:f7:95:66:42:78:87:0c:d3:0e:ec:26:0b:a8:33:6a:ef:
2e:0d:7a:73:eb:e6:3c:a9:50:c6:d4:c6:6b:8a:88:79:7a:d5:
c7:73:17:1e:15:3c:23:20:97:88:c4:d0:54:53:13:5d:a7:0a:
06:24:6c:ae:ce:94:90:b9:9b:20:c0:d2:ef:90:21:8e:c4:03:
f8:84:b1:9d:78:38:bf:26:3b:30:b9:70:95:94:d6:80:8c:59:
f3:8f:5d:01:f3:ea:dc:8d:c3:3c:74:f3:34:63:45:79:c3:40:
11:ca:0a:b3:5d:95:99:e5:a8:f1:3f:09:a5:03:e2:ae:b5:31:
8f:a6:ed:77:a7:6d:13:4a:7c:ba:e8:f1:da:59:85:5c:ab:ce:
dc:d2:2e:14:d8:3a:3b:52:e9:56:9f:62:18:bf:8a:bd:dd:9b:
e4:a0:7f:3e:c9:ab:2e:b0:3a:b5:a9:df:f2:a2:90:74:60:7a:
da:6e:93:cd:c6:70:69:a8:6c:c0:96:1b:1f:6e:ea:8b:c4:9c:
6d:47:58:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:48:08 2025 by rpki-client