Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: v3SmzIT5sH0F9OIuRkALvcM0UDV/OHWzTpeuPdZXxIM=
Subject key identifier: 4E:A7:C2:55:F8:92:E1:E6:BE:A0:13:F3:C5:4E:27:FA:38:BC:2E:6B
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 0196748B580C0C97BF01E4FF9B07979110A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 00:00:11 +0000
Manifest this update: Sun 27 Apr 2025 00:00:11 +0000
Manifest next update: Mon 28 Apr 2025 00:00:11 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: 9JaxDqi5e1Z1NpiHo3tzLMiwvp54VLLCtt1VrfoFmAQ=)
2: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (hash: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=)
3: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (hash: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:58:0c:0c:97:bf:01:e4:ff:9b:07:97:91:10:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Apr 27 00:00:11 2025 GMT
Not After : Apr 28 00:00:11 2025 GMT
Subject: CN=4ea7c255f892e1e6bea013f3c54e27fa38bc2e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:a0:ab:57:c2:e1:0f:f4:14:e2:88:80:be:
4d:ed:30:65:82:e2:42:06:2a:f5:06:52:52:0f:c7:
6c:5e:fc:54:2a:23:dc:56:f0:e9:30:0e:ab:29:3a:
83:39:29:14:02:51:ed:3a:e7:70:28:fd:11:94:60:
f4:19:44:1a:0e:1d:b3:a0:d9:f8:d2:50:7c:5c:28:
d5:79:f5:14:d0:ca:69:ff:65:20:a2:bf:dc:15:bd:
5c:1b:12:15:da:2b:30:1f:8c:cb:63:4c:57:fb:82:
58:3e:f8:a5:e3:3a:4b:fc:54:6f:e0:a9:2c:68:db:
3b:ff:86:22:95:77:16:b7:78:1a:69:cd:bc:b5:ce:
6f:5d:36:05:d2:d0:7b:0f:cd:37:af:63:d5:c1:8f:
62:1e:29:cb:86:4d:f6:0d:0a:92:0e:c5:82:98:6f:
ce:16:a5:69:f7:df:29:3a:29:61:6e:77:e6:80:03:
90:77:27:96:29:8c:53:1a:20:2f:b4:7e:dc:f0:c4:
17:7b:5f:58:76:4e:ba:b8:00:53:ef:d1:09:24:ce:
78:ea:86:a1:0f:dc:11:50:6d:95:5d:0c:3c:32:86:
2f:d8:01:d4:cd:92:a4:8f:b0:25:ec:a8:3c:28:bb:
a0:96:4e:67:d3:62:2a:1e:b5:b2:bf:84:74:66:44:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A7:C2:55:F8:92:E1:E6:BE:A0:13:F3:C5:4E:27:FA:38:BC:2E:6B
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fd:85:3b:32:b9:95:3e:12:ac:95:f0:e3:22:47:fc:78:43:
85:18:16:33:c5:a4:24:d8:18:30:c7:89:04:36:56:e7:01:61:
0c:89:31:49:b4:0a:e5:df:1f:31:68:ea:33:14:c1:8b:e7:8d:
74:e8:2b:2c:aa:93:9b:99:da:d1:d7:de:67:f2:32:72:d8:95:
97:68:7f:3d:00:5e:f7:42:8d:a1:b9:fe:4f:7b:31:ae:55:99:
8d:6c:30:1e:21:cd:00:8e:11:99:c0:c0:db:4e:ec:7c:6e:5e:
f1:86:fd:ff:ed:d8:48:97:7c:a6:f9:33:d2:a5:47:b0:f0:cc:
e0:73:d3:83:46:9a:63:9a:e8:df:49:11:58:cd:b6:8a:16:ed:
c7:c1:90:ba:a6:26:02:41:59:9e:fb:25:73:d5:62:c0:32:0a:
63:8b:d9:da:31:d8:d0:49:c0:0e:22:eb:80:cc:08:ec:b0:dd:
f2:bd:65:97:c6:3d:f9:98:a9:c4:ca:27:9f:ae:0f:a7:91:0f:
3b:ec:1c:ed:70:05:db:91:74:49:8e:20:09:ed:c4:b6:dc:c1:
79:ba:da:32:f6:04:29:38:5c:49:af:85:05:f3:25:94:e4:ae:
b7:66:db:d0:de:c9:d7:60:89:45:62:95:d0:0c:c4:c8:86:c2:
f7:48:d9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:52:41 2025 by rpki-client