Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File: N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier: dWxB+1tuMQXmN5aSTFJEVGg+XVVeftSqtgF8yCDemuk=
Subject key identifier: 68:9C:86:6C:65:C4:73:61:56:A6:37:C4:C9:D0:36:A6:E7:9C:D1:B0
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 01964179E4D61B7709F81D7C6AAF59596AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number: 11F8
Signing time: Thu 17 Apr 2025 02:00:29 +0000
Manifest this update: Thu 17 Apr 2025 02:00:29 +0000
Manifest next update: Fri 18 Apr 2025 02:00:29 +0000
Files and hashes: 1: 7YrGIJ8Lq47CmtHh_aA30VmkPjo.roa (hash: hoLOmqh1vosQ/NxuWEBoizkiy56HJ0MD/vugBLaASkY=)
2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: QU8pJcbOLT99Vz0I1vKSy07N3N7BN5Wx+LA3xlIJCfQ=)
3: bWi2Mkf_arohbIgqpZEaCaewlho.roa (hash: o4YIfYScSNSPxx9rfmbXoBu7Bh9velBEqxyrfd2MDmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:79:e4:d6:1b:77:09:f8:1d:7c:6a:af:59:59:6a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Apr 17 02:00:29 2025 GMT
Not After : Apr 18 02:00:29 2025 GMT
Subject: CN=689c866c65c4736156a637c4c9d036a6e79cd1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:94:c9:2b:37:7c:32:02:eb:55:c4:4c:43:
f0:78:4c:86:da:09:6e:ae:a1:7d:68:56:f4:58:7b:
9c:89:dd:fb:40:c0:67:94:c9:2b:c2:1b:1f:30:e1:
6e:7b:f0:bc:50:f3:20:8a:98:5b:bc:2e:2d:53:0f:
99:b3:6c:d2:b6:8f:5c:16:1a:a0:c9:77:55:d6:fa:
7e:13:36:50:21:7d:10:0b:0e:50:3b:0a:da:8b:56:
8c:75:97:03:c1:5e:36:ee:52:6d:9b:62:fa:5e:80:
6a:43:14:81:6f:9b:07:f3:5f:3c:53:34:62:50:b3:
6d:47:6b:12:3b:68:37:d6:ea:43:af:aa:a5:7c:db:
1b:e3:2b:9e:7f:05:be:7c:93:ba:86:5c:98:7c:e9:
9c:41:93:68:7c:ef:ce:c1:02:77:7d:ca:de:5b:21:
ca:21:b2:50:26:93:49:72:ea:4e:be:6d:4f:73:03:
bd:6a:15:e4:ff:94:90:15:f7:62:31:76:72:65:37:
0d:d0:a7:94:e7:28:59:b0:f4:2a:7e:c1:06:94:0a:
b1:a3:2e:7f:37:b4:77:f2:f1:13:89:01:5b:a7:8c:
37:42:a2:6e:61:cd:2e:6b:bb:d9:f8:ab:a6:bd:02:
ac:6d:f9:b6:27:47:f3:bc:c3:98:f5:65:0c:bd:15:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9C:86:6C:65:C4:73:61:56:A6:37:C4:C9:D0:36:A6:E7:9C:D1:B0
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:96:bb:fa:f6:35:ae:3c:a9:ca:b6:f3:ba:d2:8e:d2:9e:67:
09:0d:a1:8c:12:ea:f0:2d:ee:cd:8a:4a:5d:44:68:fc:68:74:
ae:79:b1:ab:b8:67:11:21:13:71:aa:07:1a:c5:f8:20:04:25:
02:af:bd:7e:98:ab:c5:4d:22:aa:f8:ab:c5:d0:77:d7:bc:34:
8c:1b:e4:9b:c2:cf:f0:35:c8:a7:e5:65:9e:82:be:21:51:e1:
9c:95:8f:ce:a2:b5:3c:6a:16:90:11:1f:b9:a7:3e:bd:09:ba:
4c:e9:e5:b6:52:d4:71:23:cd:04:79:43:5e:29:41:9c:b5:31:
43:5a:d0:27:76:fa:dd:6e:c3:a9:10:8f:6c:96:5e:11:9a:b2:
2a:39:0f:86:b2:1e:27:07:4b:da:9a:8d:6f:23:e9:41:36:9e:
fe:ec:34:ce:2d:71:04:08:d4:dd:15:8c:1e:59:8d:5a:fb:06:
b9:e9:e8:df:27:6f:2b:7e:ad:d5:83:91:03:95:66:2e:96:c5:
9a:29:f3:d4:e5:61:b2:fe:52:45:9a:a9:e7:f3:88:2d:f2:ec:
46:ce:d3:d5:3f:65:76:f5:43:88:67:b2:6b:a0:ce:a2:de:91:
4d:ba:26:18:c1:b6:d3:ae:90:f0:9f:1c:54:be:bf:53:43:a6:
df:7e:ac:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:15:19 2025 by rpki-client