Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File: N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier: kqmY9zqkygDgmTV72njaO1D5qzloItzgV/FHYipvvyU=
Subject key identifier: 31:52:1C:E0:81:16:CD:3B:E3:CC:D2:48:DD:E0:CA:0F:56:61:6B:40
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 0196741EA4C24CF408C21F78FD3ADA25F654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number: 154A
Signing time: Sat 26 Apr 2025 22:01:27 +0000
Manifest this update: Sat 26 Apr 2025 22:01:27 +0000
Manifest next update: Sun 27 Apr 2025 22:01:27 +0000
Files and hashes: 1: IX5R2XsrF811pCyYXDNZoJSyFRA.roa (hash: /gZBIGQCMYCl4cQjL9WjQOfClbjeyQFk5ObTpmqIsLs=)
2: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: xiK0C5vrB/U9QOF+SKfWzZTnX2Vj6k5RiH4dN3dh8CY=)
3: Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa (hash: gOor81zffrAZ51A4wHFBhBWmMuS0TeHsEmFrT2SiKO8=)
4: Tbof-4aZ0VQUdZsgIoMBC5FBick.roa (hash: QIa6RV95cu9pHdFNYbOKsVEQPNGhX431Y5yIZA5T6KM=)
5: WGGS94xsmDJgIn8yxV3yOd8oZ6s.roa (hash: xRas7Rjc50dZ3xaSxgVGQWNFnggpWURuZp5tvcHROog=)
6: lbz_04eUBmkCrsObDIi_l3hQ9kE.roa (hash: 9b+KSYQE0O1uMcRhVoqK3mtyhTf347ICutm/lJE1J/Q=)
7: vMQcu8dVQTXwOHWQwcsxAHzUOxA.roa (hash: KCT7eisgtXh1YmsQ/Nh86nF1rLU2oyDhZb6B9PyRluA=)
8: yp2315R2ufQovlLYyqvF4L6qpic.roa (hash: 38mTLXaspclVGWUyPHzLZfab7SdFQNnMV+B1NXi8FuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:a4:c2:4c:f4:08:c2:1f:78:fd:3a:da:25:f6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Apr 26 22:01:27 2025 GMT
Not After : Apr 27 22:01:27 2025 GMT
Subject: CN=31521ce08116cd3be3ccd248dde0ca0f56616b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:f1:68:2d:2f:fd:68:26:e2:66:db:81:b7:
16:ad:7e:99:78:ed:41:32:d2:92:34:e7:bc:f4:7f:
18:fa:e1:79:eb:57:ec:86:bf:d9:6c:54:9a:72:a7:
93:b2:02:9e:fd:81:f8:1d:1b:d8:f1:8f:83:1b:ad:
1d:c7:fd:ae:8f:1c:fe:f3:88:8a:78:17:4d:25:e3:
81:59:da:3c:06:3d:2a:6a:22:1c:3c:0f:4c:17:d4:
2f:6f:fd:eb:13:f0:b9:a0:32:1c:8c:62:63:4c:65:
48:13:13:38:fb:a5:a7:4a:e2:38:bf:fd:b7:36:5a:
38:dd:31:90:12:61:ec:7a:59:d6:3c:91:ba:bd:18:
10:e2:d7:2e:8f:04:14:61:2e:1b:ca:d9:50:d2:65:
d2:be:13:f6:28:f7:00:92:9e:cc:eb:99:0b:a1:bf:
6e:a9:b9:ec:02:03:da:cb:33:53:26:d1:4b:7e:ec:
ea:c8:bb:9f:b2:12:43:15:20:33:f2:3b:cf:4c:69:
32:d2:85:8d:72:af:aa:22:6d:2f:3d:dc:cf:1f:0c:
9b:6d:d4:da:3a:1f:d2:5a:6b:e4:82:6a:65:ee:fa:
e6:fc:b7:ea:0b:4f:72:c1:e6:5f:8d:28:76:6a:ed:
c5:2a:64:fe:27:bc:2b:d5:d3:85:7e:f0:3f:c7:b1:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:52:1C:E0:81:16:CD:3B:E3:CC:D2:48:DD:E0:CA:0F:56:61:6B:40
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:97:c9:cb:75:d8:c1:37:c1:9f:a8:d6:1a:b5:e0:d1:37:f5:
a5:93:c4:9a:fc:69:c7:da:99:3a:ab:11:69:73:ea:2b:8a:ae:
bb:2b:e4:05:47:e2:d0:eb:84:69:e6:c8:1a:d0:01:97:5f:93:
bc:da:dd:a3:5b:df:f8:8e:04:08:5e:7a:1f:2b:7e:79:42:3c:
3b:3f:fa:36:86:54:fc:8f:b8:28:35:e7:95:04:98:2b:c6:b0:
2c:57:37:a5:da:f2:80:21:a8:eb:ef:bd:3a:51:8d:cc:7e:29:
d0:77:55:c8:9c:a8:0f:16:3b:c8:bc:03:93:78:39:b4:ee:0b:
30:d2:74:98:19:7c:3a:fb:d8:6b:e2:4c:7d:08:ce:d5:9d:77:
fe:e5:77:62:04:e3:05:fc:ee:89:ef:f2:ca:17:61:48:67:91:
c9:d5:75:8e:56:2b:8c:21:6b:75:ea:ae:56:bc:1e:0e:8e:de:
fc:48:4b:79:8c:7d:ae:0d:44:2e:de:d5:db:37:cc:16:9e:b1:
8a:d0:2a:30:af:b6:e5:62:6f:37:a3:cd:9c:1c:8d:ce:87:9d:
9b:34:57:47:d7:0d:f8:1d:79:a6:b2:f7:2a:1e:d6:84:7e:9a:
2a:97:e4:9c:97:85:a3:1d:2d:7c:34:ed:65:15:9d:89:36:02:
a3:27:a9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:10:31 2025 by rpki-client