Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: 3PWiVE9VTbDTLTOHnGKqnDfO80CFyB1o78qrkqFD+BQ=
Subject key identifier: B4:29:E6:78:2F:D2:40:74:D2:18:B2:08:86:09:C7:8F:9A:C4:47:1C
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 019678D644AC11282232DF23638ACB7282F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 1519
Signing time: Sun 27 Apr 2025 20:00:30 +0000
Manifest this update: Sun 27 Apr 2025 20:00:30 +0000
Manifest next update: Mon 28 Apr 2025 20:00:30 +0000
Files and hashes: 1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: 8A8C1wsgLNsicxgR3ccv7cp2KDUv8ROWt0ObpsfO6rk=)
2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=)
3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:44:ac:11:28:22:32:df:23:63:8a:cb:72:82:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Apr 27 20:00:30 2025 GMT
Not After : Apr 28 20:00:30 2025 GMT
Subject: CN=b429e6782fd24074d218b2088609c78f9ac4471c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:9c:6b:2e:42:69:f9:11:c0:a9:17:6c:8a:
ca:ec:89:a9:f5:8e:34:78:11:9c:82:c1:3e:54:6f:
19:84:17:90:4a:d2:5e:d9:60:e6:20:84:0e:b2:f9:
78:d4:4a:80:ec:ab:41:a0:3a:df:c5:b1:f7:7e:7d:
cf:f8:3b:3b:88:b7:41:3d:e9:64:84:8b:a8:ac:e1:
34:fd:81:84:0f:13:5d:ea:41:40:23:a8:ed:42:ee:
e3:7c:ce:7b:f2:ac:a0:0b:6c:67:b7:aa:89:12:0b:
7d:b9:10:9e:b2:53:94:ef:14:b7:08:06:64:14:a5:
c9:85:1e:ce:59:dc:1a:b7:97:c6:6a:8c:af:ed:12:
38:c8:04:9a:1e:fb:c2:98:c9:ee:41:95:b5:19:5f:
93:3f:ef:8c:21:9c:f8:54:56:86:c3:73:54:10:3b:
0f:19:10:ff:28:ad:3d:99:71:f8:ea:39:8f:9e:1a:
c6:81:eb:dd:12:d9:a8:5b:b8:e1:eb:1e:0a:17:5b:
ed:e0:57:cb:57:45:23:92:8b:db:bd:28:eb:29:dd:
a5:20:80:fc:17:0b:d1:59:24:c1:6e:3b:2f:4f:4a:
b1:2e:1b:21:48:2c:1d:6f:5a:b5:0a:53:d4:c9:a3:
4f:cd:f3:10:cb:db:38:36:2b:df:9d:21:c3:9f:bc:
e4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:E6:78:2F:D2:40:74:D2:18:B2:08:86:09:C7:8F:9A:C4:47:1C
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6c:b1:59:8e:bd:26:a4:39:e0:33:2f:7c:b4:f5:3d:27:ac:
be:34:70:96:2a:f1:fc:9d:71:58:62:39:5c:92:ef:a2:a5:4f:
cb:0a:46:e8:ee:0f:1a:fd:49:a5:ee:d5:99:53:b4:b8:9b:41:
ec:a5:a2:d6:60:3b:a5:0f:4d:ca:ca:29:e8:d1:bf:02:c3:4c:
9e:5c:f5:1b:c0:4e:2a:18:dd:e0:a0:98:82:4a:57:bd:23:c4:
ec:e9:e2:69:8e:50:fd:80:cd:78:98:43:0b:49:44:6e:dd:60:
43:5d:f5:8d:41:53:3b:71:b8:bf:19:09:f4:c2:26:e3:e1:43:
0b:77:4d:01:0a:7f:26:15:4a:57:f8:b6:65:6b:47:15:24:3e:
7e:85:f9:95:fc:da:99:f9:a6:97:4f:a3:d0:de:62:d3:1c:c7:
8e:bb:a9:4f:72:6a:4e:6c:be:c6:60:6d:82:5f:bc:21:1d:a9:
84:cf:6d:a6:e9:73:18:c1:25:f9:27:2c:42:27:4a:ef:f1:52:
5d:33:73:28:7b:13:87:4c:3a:19:0e:c4:68:23:8e:f4:45:11:
d6:2f:6f:c2:f4:38:16:17:e1:75:3a:45:f5:24:3d:d8:8e:85:
05:62:ba:91:cf:80:91:6c:b1:26:66:71:d4:3f:ad:d0:24:f6:
da:10:45:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:57:33 2025 by rpki-client