Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: tIShDBMp925ixlyH+aOgxI/0WH4/OYddor1gr7coznA=
Subject key identifier: AF:1E:A1:C1:A9:E8:1B:13:41:C7:FD:31:63:E6:54:FE:9B:BF:6E:08
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 01965681AEF06C5C03F7AD12B04959F2643D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 0CC9
Signing time: Mon 21 Apr 2025 04:01:01 +0000
Manifest this update: Mon 21 Apr 2025 04:01:01 +0000
Manifest next update: Tue 22 Apr 2025 04:01:01 +0000
Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=)
2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=)
3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: dQM+blFLj45nRM+VhtTY5PC4CSZrXQsKxWp5ZudSPRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:ae:f0:6c:5c:03:f7:ad:12:b0:49:59:f2:64:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Apr 21 04:01:01 2025 GMT
Not After : Apr 22 04:01:01 2025 GMT
Subject: CN=af1ea1c1a9e81b1341c7fd3163e654fe9bbf6e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:1d:e9:29:1e:2d:be:98:2d:5f:56:4f:27:
bd:05:8c:00:21:66:71:6e:30:8e:52:ed:4a:e4:71:
f2:11:6a:81:40:30:2b:21:09:53:6a:30:56:33:f2:
21:9c:e0:96:f7:c1:40:69:08:8b:b8:72:fa:df:91:
ac:9b:44:5a:d0:e1:bf:15:6a:39:c0:8f:c2:ca:61:
d5:1a:31:02:b3:72:45:ee:b7:a6:d8:7e:25:a8:7b:
e5:a7:ff:24:d4:86:40:8c:79:8a:db:f4:aa:fe:72:
c5:f1:ba:f5:af:ca:02:3a:0c:05:15:8c:58:c1:d0:
27:30:3b:aa:07:2a:5a:7b:ff:02:85:18:14:de:3d:
06:63:1c:4a:1c:d0:ff:23:4c:0a:70:f8:f7:88:05:
11:31:e4:58:bf:a8:dd:c9:52:ca:40:ba:08:f5:68:
76:e4:ea:01:5a:f3:02:6a:c7:3b:c4:5c:b5:2b:cf:
59:d1:a6:de:59:61:35:43:4a:54:bf:3b:3b:24:13:
27:7d:0b:ef:f5:44:04:14:b4:a7:23:e2:d9:3f:6c:
29:dd:98:70:75:31:b2:a2:4b:3a:24:49:c2:3f:4f:
ad:b1:48:cc:c9:73:97:26:a3:89:a7:7a:07:1c:40:
7b:37:1e:a6:f3:bd:54:8e:f0:51:ad:56:7d:21:01:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1E:A1:C1:A9:E8:1B:13:41:C7:FD:31:63:E6:54:FE:9B:BF:6E:08
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:93:47:ee:b6:90:1c:4b:6e:c3:6f:30:af:1f:87:df:80:c3:
5a:71:63:5f:8a:c9:1f:67:e2:00:5f:dc:48:f7:44:1f:d8:1c:
8d:9d:a0:fb:9d:1e:12:41:c7:c4:fa:5e:47:95:4f:ea:bf:b8:
85:61:20:79:71:ff:60:9a:c3:7f:ab:49:2d:37:61:c9:11:fe:
3a:97:0a:6f:c0:30:b9:23:94:16:a8:9e:ba:ef:7a:f5:6f:0f:
c8:53:a6:f9:27:58:2b:dc:59:09:5f:1e:db:17:6a:ef:b6:ad:
de:df:25:87:d2:83:33:38:5f:e8:e1:d9:ce:5c:d3:20:58:f9:
83:a5:c3:c9:1d:a1:4e:33:23:6e:70:59:5a:39:50:ab:5a:48:
ef:13:e9:d8:40:52:ad:c6:20:dd:13:57:57:46:31:99:4c:30:
78:54:d7:8f:c9:31:ff:31:d7:d0:7b:c8:c0:43:28:92:07:58:
dd:1b:26:61:6e:52:e7:21:f8:41:b3:c2:66:17:a9:5f:9e:7f:
2e:e7:7d:48:24:33:76:a5:05:5d:ff:14:7e:b3:d9:71:22:ec:
25:33:00:cb:61:d8:b4:ca:46:d2:10:9d:f2:e0:b1:60:b8:03:
20:94:4e:2d:1f:19:e6:62:92:b0:1e:54:3f:fb:99:7e:a1:5d:
a5:bc:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:01:02 2025 by rpki-client