Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier: 1NOHMWVHCMei31IpWSsw1TLot/DFQdALVmt8q/54Ud8=
Subject key identifier: 02:85:3B:CF:50:65:91:69:72:0D:7B:32:3D:84:F1:91:86:90:1B:D2
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial: 0196827E7AD730B6718F5C6921C9F2261800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number: 05AE
Signing time: Tue 29 Apr 2025 17:00:49 +0000
Manifest this update: Tue 29 Apr 2025 17:00:49 +0000
Manifest next update: Wed 30 Apr 2025 17:00:49 +0000
Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: EL1DelZHpTykVLhwREIlvLH/c2KrGSTv90tztsCqd7Y=)
2: jCF0UZxubcg2boAXKn66J2n2ZyE.roa (hash: Jnz70fxzRetWB+WwfJpKB4S2++FXBxK+gp589kR2o6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:7a:d7:30:b6:71:8f:5c:69:21:c9:f2:26:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
Validity
Not Before: Apr 29 17:00:49 2025 GMT
Not After : Apr 30 17:00:49 2025 GMT
Subject: CN=02853bcf50659169720d7b323d84f19186901bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a0:6b:e4:b6:05:c0:48:c8:ca:b8:2b:d1:12:
ed:0a:58:0f:d2:31:58:ca:ca:7e:40:bf:ae:cd:46:
bd:71:35:42:1c:a1:81:52:73:21:ad:19:c0:2e:96:
1e:49:99:37:ea:53:58:fb:0f:12:82:a2:b2:ac:29:
61:1e:93:1d:9e:bf:e6:da:6f:b9:eb:94:d8:e4:aa:
06:a7:4c:7f:35:95:4e:19:c7:5a:5b:9e:2f:89:3f:
1e:0b:3e:6e:4e:b5:ef:d4:1e:e5:7a:2d:d3:c2:07:
7b:cf:74:7e:7e:dd:54:ec:9b:42:fe:7b:5e:46:33:
18:8f:c9:ed:5b:78:2a:0a:4d:fe:22:3b:e9:57:7a:
27:13:b6:d4:8c:e3:bf:b9:6e:28:44:59:3e:76:c2:
1f:fa:6c:90:ea:d3:d8:5c:29:56:39:72:45:2d:f6:
bc:90:8a:fc:cd:40:7c:ef:f9:3e:54:5e:55:18:ea:
1a:52:e1:ab:44:cb:f9:84:15:8a:77:da:08:55:e8:
96:4e:73:98:6d:e2:7e:41:e0:ef:99:72:fe:dd:8b:
9d:9a:b7:59:35:c6:24:9d:8f:7b:6b:55:46:a1:41:
af:28:b2:fe:03:0f:93:66:95:f8:42:17:d1:77:50:
29:bd:c0:20:5f:d8:52:c8:79:67:5d:a9:6e:db:2c:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:85:3B:CF:50:65:91:69:72:0D:7B:32:3D:84:F1:91:86:90:1B:D2
X509v3 Authority Key Identifier:
keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:25:bb:33:58:0d:c2:9a:13:5d:18:ae:84:59:6e:40:08:3f:
ff:e1:24:02:9f:72:a4:8b:77:91:66:a8:de:7c:1a:af:f7:3e:
1c:e8:16:6a:57:5d:28:02:3a:c6:2c:12:1d:52:63:6a:1f:be:
3c:2b:ea:fd:1f:c9:33:c9:f4:62:c4:bb:0c:fe:a3:6d:68:69:
18:b2:01:84:5e:d2:db:35:6b:57:1d:9f:83:c0:12:3e:ac:69:
23:79:f6:f9:38:86:d9:3c:95:f9:f2:88:a8:2d:3b:96:13:80:
7c:06:d7:46:3b:2c:e7:c3:62:5d:7d:ca:31:ef:f6:7a:34:01:
92:ea:26:4d:e2:50:38:21:b0:43:84:c5:99:1b:a7:9c:51:b4:
ae:cc:02:88:c8:b9:23:b1:ae:14:17:df:29:4d:ce:00:6c:7b:
81:60:87:ef:3d:96:22:2a:ff:9e:93:4d:d0:51:b9:9f:56:0f:
f0:63:bd:3c:d7:f6:aa:f9:c2:43:bd:d9:08:a6:ed:80:84:68:
99:7f:27:24:d4:0f:96:40:c4:a7:ce:2d:97:43:75:9e:05:e2:
8d:dc:58:78:46:0f:b1:df:0e:d4:d3:83:a7:12:ab:08:ab:35:
37:86:6e:b0:51:50:e8:ea:5b:fb:c9:e9:f2:18:62:aa:b8:9e:
a5:ca:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:48:49 2025 by rpki-client