Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: 3gJOYt9Cv4RFBdchSZympSUjX+ndoGOhQyqZ52C5uCE=
Subject key identifier: 68:3B:75:C5:4D:21:F3:92:0E:AA:7A:A8:C1:C9:52:92:62:1A:3F:CE
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019676B0DA683CF199380AB260E2660A35A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0882
Signing time: Sun 27 Apr 2025 10:00:23 +0000
Manifest this update: Sun 27 Apr 2025 10:00:23 +0000
Manifest next update: Mon 28 Apr 2025 10:00:23 +0000
Files and hashes: 1: Vsn3jYRWMir2G2-W8jrydR_iJwk.roa (hash: +JLCfjRT9K7qAkhsFi/9o8pUTPcML+dFZemwYUpHZ7U=)
2: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: Ji+BoOzBrmir/WoVXybkoYkgVSb4gECn54Xwe1XPq1g=)
3: zVbtVTb6VEP2n5e5elBZRVf7PBc.roa (hash: VV/l24AMORfvu1S58DBbEXwpnZJ00Cz7FHLsGnZlDXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:da:68:3c:f1:99:38:0a:b2:60:e2:66:0a:35:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Apr 27 10:00:23 2025 GMT
Not After : Apr 28 10:00:23 2025 GMT
Subject: CN=683b75c54d21f3920eaa7aa8c1c95292621a3fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:3e:92:2d:d5:6e:3e:52:54:7a:0d:10:23:
23:9e:f7:d7:7f:e8:a7:fb:97:cb:c6:f6:2e:7b:b1:
b0:2e:46:59:7f:58:d0:97:80:54:5f:82:4a:75:ae:
1d:8a:df:33:a9:bc:88:ce:48:43:89:ea:88:dd:42:
97:2a:f8:f3:3c:ff:a5:5f:2e:9d:be:4b:42:cc:69:
47:3b:c1:95:d5:73:5d:30:a6:cf:9a:17:66:35:9d:
4a:97:99:10:f7:07:43:27:f9:1e:0b:ab:60:1c:71:
20:cc:77:42:43:9f:16:a2:25:64:f7:0d:e8:96:7d:
01:4a:e2:0f:60:6a:15:55:3d:d8:c9:95:2e:00:32:
3c:ab:ce:8a:bb:d3:2b:09:3d:3b:b8:53:be:b8:9b:
88:2a:15:c5:98:eb:22:6d:9b:5b:9c:1c:3b:69:2a:
d2:c9:12:42:26:ac:ac:e9:a2:f9:ad:3b:be:37:18:
b7:54:fc:08:ec:0d:af:b8:26:3e:00:38:52:c0:60:
c3:69:f2:c7:72:bb:47:6b:fd:7a:bb:81:3e:1e:ca:
62:1c:c4:6a:1b:b5:0a:f5:a8:c0:5a:ed:cf:ec:e2:
60:09:08:a7:f1:bc:7f:2f:17:07:05:57:99:c5:7b:
34:0b:5a:03:88:89:aa:0f:51:1e:de:15:ed:c7:e3:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3B:75:C5:4D:21:F3:92:0E:AA:7A:A8:C1:C9:52:92:62:1A:3F:CE
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fa:93:4d:21:09:22:e9:6d:13:fd:79:66:6d:d7:28:cc:8e:
17:da:41:29:34:ff:29:3a:ea:f0:d5:17:e4:0a:93:02:90:a4:
d5:d2:a0:e4:9a:a5:da:9c:d2:b0:4a:5d:c8:7a:c7:2a:9b:f5:
d5:24:9a:24:5a:90:89:69:a0:35:f4:b9:f1:c7:52:c4:6c:65:
27:fc:41:97:75:db:23:aa:50:02:df:09:e7:4a:24:70:e4:f5:
6d:95:21:08:79:89:1a:e4:fb:62:59:a0:ac:f4:65:f5:a3:37:
51:18:9a:29:c2:06:b9:5e:47:ac:22:99:8a:00:53:3b:49:73:
a7:1e:f5:ab:21:d2:02:30:53:e4:04:2e:f6:4b:ca:6a:23:3c:
9d:d6:e4:40:88:16:41:1d:27:9f:4f:1d:0f:80:2f:e2:8e:c3:
8a:69:f2:ea:6b:2e:87:48:18:99:85:58:2d:37:07:55:98:2b:
f3:bf:ff:96:7c:a5:e8:77:d9:df:27:b9:24:c6:c9:46:4c:e6:
0c:98:6a:1b:7a:97:9e:a8:c8:b9:2b:5b:20:a7:e2:26:1d:13:
b2:6a:07:91:3b:23:89:77:6f:3c:1f:46:3f:da:cc:14:1a:bd:
ce:b7:a2:7b:cb:32:2d:d2:0f:81:78:19:20:dd:bd:74:2f:fb:
91:a7:e8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:15 2025 by rpki-client