Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: A4A45Y/M2WB9ww/IwIV+Ca9Ufkls22LwpV2vst3SjuQ=
Subject key identifier: 63:A7:C0:70:8F:30:87:51:7B:3A:3A:14:78:BC:85:2B:D6:CA:68:A3
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 019577FD09E402B23A8AA9646A2636A24BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 11C5
Signing time: Sat 08 Mar 2025 23:00:26 +0000
Manifest this update: Sat 08 Mar 2025 23:00:26 +0000
Manifest next update: Sun 09 Mar 2025 23:00:26 +0000
Files and hashes: 1: GRpxJM6uak1q4A4UBjGhlwT7Cps.roa (hash: wNBRbInhIrKHJa8W7MC+iDamgy4K7A7SioRTK7a6kK0=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: OcPfUhdyoP4M21yRm/gNj456groQrv12YCWZuW1d6p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:77:fd:09:e4:02:b2:3a:8a:a9:64:6a:26:36:a2:4b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Mar 8 23:00:26 2025 GMT
Not After : Mar 9 23:00:26 2025 GMT
Subject: CN=63a7c0708f3087517b3a3a1478bc852bd6ca68a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:2b:77:11:2f:56:80:70:30:ac:01:53:af:
5f:34:2a:6f:9f:2f:ca:12:cf:73:73:ed:8a:3a:da:
06:f3:75:1d:2a:59:b5:bb:17:0d:f9:e8:2c:a1:bb:
c7:f9:f4:1d:86:1f:07:ea:7b:3b:c1:58:5b:70:29:
08:c8:1e:9f:32:64:3f:d6:c8:a6:c3:22:40:27:96:
01:67:62:f8:bf:08:61:67:98:aa:07:97:e2:1f:60:
09:2f:7b:b0:48:51:a3:38:e6:65:1c:2b:37:6d:87:
73:8b:35:35:79:65:06:82:52:27:7c:a4:e3:30:8a:
c9:e6:1f:87:ef:1a:84:d0:64:4d:5f:3e:44:67:25:
f9:32:c2:19:60:1d:ad:c0:74:a5:19:30:6c:3f:99:
f5:2c:30:36:71:54:67:7f:c2:73:9a:89:38:8a:35:
36:94:69:f0:4f:90:e2:32:27:ca:e0:a8:40:57:30:
97:49:6e:83:f9:01:c3:5c:b7:97:26:28:1d:15:1b:
6a:8c:ab:07:90:5f:92:69:19:8e:bc:0a:d1:f9:b7:
bb:26:b2:f3:13:87:62:9d:c6:01:86:6f:cc:87:90:
d3:fa:2b:7f:bb:f4:f6:3d:e4:e6:4c:c3:53:15:56:
27:5c:09:c7:23:99:ab:97:ba:00:8d:9b:df:4c:fa:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A7:C0:70:8F:30:87:51:7B:3A:3A:14:78:BC:85:2B:D6:CA:68:A3
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d3:22:da:59:79:35:96:a1:53:be:29:4d:25:27:9a:89:ae:
d2:57:29:1b:da:18:ec:77:7c:88:a0:7b:eb:7c:3d:a7:37:98:
a3:44:32:28:ac:5e:e8:6a:c0:e5:99:6b:60:45:74:17:98:0f:
2a:6c:7c:93:4a:c1:98:da:52:27:9b:d2:d3:32:dc:24:db:ca:
6e:c8:17:80:b8:89:af:62:83:0b:5c:ac:38:cc:c0:7c:24:77:
bc:36:1a:e2:6e:54:53:4e:a5:9c:e4:ce:9c:b3:de:50:9b:df:
04:b5:fa:2a:89:1a:97:f0:a5:60:56:e0:91:f7:c5:de:c8:34:
ab:5e:5b:ad:b5:05:5b:c4:a0:5c:ea:e8:5f:ad:26:fa:8e:87:
47:2b:d7:2e:b3:9a:a7:26:ca:60:b7:54:73:4d:2d:58:e0:b7:
17:f7:ca:31:64:c2:6c:3f:ec:46:f4:c2:fe:36:a8:f2:94:7d:
7f:5f:4c:b9:7e:24:32:37:2e:df:d2:c5:29:06:f4:1f:35:11:
5b:ba:51:31:f5:f4:08:0b:87:5c:84:04:28:00:75:c5:77:06:
55:be:c7:4f:ce:87:33:34:0d:ee:f5:2f:a1:04:d8:15:46:68:
47:76:07:26:51:f0:61:44:03:19:15:48:f6:d7:11:3d:8b:f1:
c8:2b:72:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 07:28:18 2025 by rpki-client