Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier: hT7lZe+MPaL8BSCOaZulzT3BgqBNF6WNw2XDHUzznIk=
Subject key identifier: 65:B0:6D:86:4A:40:DD:86:92:1B:9A:B9:A9:14:6A:22:D6:A8:E3:FF
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial: 019684DA8DD84CF4F777EBD130754070EA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number: 09A5
Signing time: Wed 30 Apr 2025 04:00:37 +0000
Manifest this update: Wed 30 Apr 2025 04:00:37 +0000
Manifest next update: Thu 01 May 2025 04:00:37 +0000
Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: hCsPSgLTMllNIKWr6vlBglgMwA0JjnKN5t/Zwng8DY4=)
2: SN4WN6j4-rBWWV-Y2IngI0okDFk.roa (hash: /CIKiQgS+ZyX8NEUirY7oJW+SA7En87kVbxutLDyvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:8d:d8:4c:f4:f7:77:eb:d1:30:75:40:70:ea:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
Validity
Not Before: Apr 30 04:00:37 2025 GMT
Not After : May 1 04:00:37 2025 GMT
Subject: CN=65b06d864a40dd86921b9ab9a9146a22d6a8e3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:7d:eb:f9:d8:40:bb:ff:e5:5e:5d:9c:89:
24:28:44:e8:91:9c:df:35:b9:cf:62:59:77:36:e7:
a7:3e:62:93:45:27:20:da:ae:1a:8e:b6:a3:3a:da:
06:a0:fc:9b:78:d8:46:d9:33:dd:da:e5:ab:db:2d:
69:20:ec:7b:b7:70:13:39:64:1f:72:00:f2:73:ed:
d0:c6:66:8c:ea:c9:20:c6:9b:01:4f:65:02:4d:11:
3c:d1:75:09:27:26:49:39:92:35:97:c7:22:c5:d7:
83:66:8b:01:90:7a:d2:42:fd:74:37:f5:3e:9b:5e:
53:65:ec:53:72:7a:31:14:7b:33:9a:c4:e8:c0:67:
fc:0e:2c:44:1e:72:61:0a:a6:37:5b:30:75:33:c0:
1d:41:b5:7b:ac:2b:12:12:93:88:c5:4a:30:65:8b:
bd:fe:5f:bb:bb:24:99:39:f5:25:2b:0b:6c:a5:bb:
81:c1:71:84:a3:52:7c:c1:df:55:f5:2a:97:f2:ae:
82:7f:32:7c:a0:8e:01:ad:39:ff:7a:c1:86:d4:bf:
0f:70:45:d3:9d:f5:12:9c:6a:3a:3a:40:0b:bc:61:
be:0b:a9:e1:ca:e5:52:83:95:a5:87:c8:37:5d:52:
13:78:4f:4b:51:f0:7f:44:cf:e5:06:b9:af:94:e0:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B0:6D:86:4A:40:DD:86:92:1B:9A:B9:A9:14:6A:22:D6:A8:E3:FF
X509v3 Authority Key Identifier:
keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:35:d9:25:80:50:98:d7:02:db:d7:b0:de:a8:fd:93:ea:2c:
d1:e4:be:c6:9f:72:3d:64:8b:72:68:27:24:ec:5c:93:62:4e:
33:79:ed:98:a2:e6:7c:5b:60:c3:8d:ec:4c:7f:65:6e:89:28:
13:7d:6c:fd:70:d6:22:af:35:67:49:26:7d:d5:88:a0:38:53:
6c:18:8d:ae:79:96:9b:75:72:c7:8b:01:2d:8a:dd:8e:f7:d3:
47:c8:4b:aa:9c:5c:3c:02:3f:1b:c2:6d:20:54:dc:60:d1:f2:
1e:61:5c:fa:e7:d6:c4:bf:5b:0c:b1:51:0d:62:63:4f:dc:df:
9a:c6:0a:c2:33:a3:11:82:98:81:8b:17:8f:cd:cb:47:a1:06:
08:e5:2a:cd:4c:03:86:c4:a2:c5:cb:19:9e:df:40:c9:09:77:
98:fa:74:bf:b5:0e:d4:81:a4:33:07:87:f2:1b:6a:be:e3:93:
4f:ce:92:ca:88:8c:49:62:c7:b1:db:26:c7:4c:7b:00:bc:e4:
53:b3:b9:b9:a6:ed:d2:6e:ce:56:46:98:41:b5:67:5a:e5:54:
c4:d3:6a:ab:88:39:6f:63:c0:23:3b:70:53:55:7a:01:f7:e1:
a1:d5:a7:45:3d:1e:e3:d8:ab:fe:4e:20:f2:5b:88:1c:07:41:
84:00:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:37:25 2025 by rpki-client