Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier: GQHZ08qgsVDranWZxSj+SwnXW6v+TFC+8PBC6Ks0d44=
Subject key identifier: B6:2B:D3:51:5C:27:A8:C4:26:C5:A2:EA:EB:57:C8:58:73:6A:F7:22
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 01967567134209C0715AC6994D196897EEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number: 0BDF
Signing time: Sun 27 Apr 2025 04:00:11 +0000
Manifest this update: Sun 27 Apr 2025 04:00:11 +0000
Manifest next update: Mon 28 Apr 2025 04:00:11 +0000
Files and hashes: 1: MxLcAgXC0vRpPyT-3NXtB6NlTcM.roa (hash: glwD9i/+OFABXNduZaHp2v7di44Ewcx6kWVCmGzy8h8=)
2: g1QBI0oBpZMDfLnVbzlJh58dtno.roa (hash: DThH0UYff9JRlzHoLRkutIVBWjbtodZbQuiDh8h2xSo=)
3: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: 85bLBkbTMrCObBOPRmXThevYAXhIeGskuzbwpOAlxy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:13:42:09:c0:71:5a:c6:99:4d:19:68:97:ee:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: Apr 27 04:00:11 2025 GMT
Not After : Apr 28 04:00:11 2025 GMT
Subject: CN=b62bd3515c27a8c426c5a2eaeb57c858736af722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:65:dc:38:66:36:e9:3f:fb:0b:0b:60:da:
fe:45:cb:0d:b0:06:a4:1a:d3:88:40:b3:fd:ae:5f:
84:b5:d7:cd:0e:d2:e8:55:6d:0c:51:85:31:45:52:
0b:9b:8a:a7:ab:ff:9c:a2:54:9e:e9:0e:a2:d5:21:
e7:61:45:f3:07:81:28:aa:12:49:f0:a9:9c:df:f8:
dc:b3:53:3d:75:f2:e8:6a:38:27:0b:78:86:40:c7:
9c:87:d2:c3:02:60:77:62:1d:a2:ec:0f:39:ba:26:
b6:85:a5:fc:5c:10:06:4b:ea:eb:3e:a0:c3:f3:90:
b6:14:1e:6d:f5:26:53:99:ae:d6:a4:c7:68:6c:37:
9b:57:20:50:04:4c:da:12:0b:20:7d:0c:37:1a:1b:
76:d9:77:86:ff:97:16:9c:f5:95:32:75:84:10:76:
e6:fb:a8:f3:8a:1d:9e:f1:db:c9:57:d2:1c:07:c2:
99:e4:2c:5a:96:2b:66:db:ce:f8:5e:3a:35:f0:a2:
79:5c:a4:34:68:9d:f4:1e:c1:c5:b9:97:a5:c5:9d:
fc:75:61:da:c5:11:05:1d:b0:43:f5:fe:a4:1f:1b:
88:c1:70:04:a6:7e:34:9d:69:13:df:2d:44:e0:74:
97:2f:1e:a1:0c:10:61:58:5f:3a:16:ca:a3:16:f9:
0b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2B:D3:51:5C:27:A8:C4:26:C5:A2:EA:EB:57:C8:58:73:6A:F7:22
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0f:a2:e2:d0:fb:88:e2:5f:91:ca:d4:66:c5:ca:8e:80:ac:
87:76:83:28:4e:e7:3b:30:a9:cb:6a:1d:72:fb:b0:71:2d:74:
8f:a7:26:5e:c1:4d:92:c7:10:b2:fd:e7:8a:6e:45:0b:af:c9:
fb:56:1d:b6:0b:69:c5:33:70:db:d7:15:49:71:a3:92:55:07:
63:0d:6d:c4:f0:21:cd:88:8f:65:12:1d:6f:5e:7f:37:78:5a:
77:14:f3:69:82:01:0d:a9:4d:66:6b:de:ed:8d:84:d0:b9:f7:
9b:9d:ff:d7:84:ae:b1:5a:5d:81:24:b0:e3:51:94:ac:9a:3a:
39:bf:7c:65:9f:c3:89:e5:fa:c6:5e:fb:07:bb:7b:a7:0c:b0:
82:79:21:72:b7:0c:31:0c:56:c5:62:57:88:34:a4:2b:c9:a6:
f9:b8:71:28:ca:6a:65:b4:f9:8b:20:63:eb:ee:b4:66:b4:5a:
83:ec:1b:18:79:2a:cc:14:00:0c:70:6b:28:d5:93:da:63:02:
3c:32:2b:f2:46:ba:a5:4f:1a:e0:37:1b:85:de:1c:70:15:5a:
7f:21:4c:01:e6:1c:5a:8d:1f:de:06:9d:54:a8:7d:e7:ab:dd:
a1:8e:92:64:9f:b8:d9:18:f5:f3:9d:74:95:86:fa:76:0a:b4:
23:e9:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:39:07 2025 by rpki-client