Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
File: nHLoTFLlxJCdvHAqodIS1HiHX60.mft (raw, json)
Hash identifier: V4Z5yaECw4P8DBDlD7x8j7FdHusl+MjfRS/yli/cWnY=
Subject key identifier: B6:AB:96:4E:8C:30:52:F7:38:8A:AB:89:C1:79:9D:95:40:9E:89:7F
Authority key identifier: 9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
Certificate issuer: /CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Certificate serial: 019679E970C9389F4ED147E63A7C1502705F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
Manifest number: 04FC
Signing time: Mon 28 Apr 2025 01:01:04 +0000
Manifest this update: Mon 28 Apr 2025 01:01:04 +0000
Manifest next update: Tue 29 Apr 2025 01:01:04 +0000
Files and hashes: 1: MJgreWjojTG3TWAm0IOsT3PX7yE.roa (hash: QQOCbVX4ydh8RHwVZnu9QI+n2Ns0Q1CadZGcMjFSReI=)
2: nHLoTFLlxJCdvHAqodIS1HiHX60.crl (hash: 2p4qNgVN8CHR/vkcmCReIrxM1rMiw5PQV6jlCZVUUuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:70:c9:38:9f:4e:d1:47:e6:3a:7c:15:02:70:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Validity
Not Before: Apr 28 01:01:04 2025 GMT
Not After : Apr 29 01:01:04 2025 GMT
Subject: CN=b6ab964e8c3052f7388aab89c1799d95409e897f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:9b:b0:3b:84:15:ff:ca:c3:8a:40:88:50:
50:10:c9:e2:4f:24:60:ee:fb:7d:b1:dd:f0:23:fd:
a2:4a:3b:71:4f:c1:aa:92:4d:f8:ae:2a:26:dd:55:
cc:3f:c0:df:90:f2:8f:cd:4a:b1:48:37:03:08:ed:
81:97:fd:dc:e6:99:f2:8b:47:00:be:65:f5:95:76:
e1:58:75:22:09:29:5d:fa:2d:52:61:2f:88:df:dc:
0d:dc:da:3a:52:47:f8:41:1a:74:a0:35:68:9c:5d:
ff:97:9f:04:1f:30:9c:22:9c:ea:b3:11:57:df:eb:
95:4e:1f:d2:02:c4:25:13:11:a9:66:81:29:27:50:
24:d3:b4:61:2f:13:b2:97:a9:25:d9:b3:52:c2:11:
84:d4:f1:7f:6a:d6:6b:98:62:75:13:63:95:e3:bb:
07:5a:07:cd:9a:c6:64:f0:73:a9:7a:5a:39:63:74:
af:40:84:29:7c:dc:a8:8a:54:5b:1e:17:82:ed:7f:
bb:69:cf:e6:64:37:56:8f:0c:94:34:d5:e1:a4:64:
8d:60:70:18:75:7e:28:d9:31:b2:df:6d:8c:81:0a:
2a:1b:80:3b:3f:1c:84:b5:a4:a0:04:10:b9:2f:b3:
f0:a2:6e:ca:3e:11:1a:4a:bf:80:65:6d:26:b3:8c:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AB:96:4E:8C:30:52:F7:38:8A:AB:89:C1:79:9D:95:40:9E:89:7F
X509v3 Authority Key Identifier:
keyid:9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:25:d9:df:a6:98:13:11:67:e2:b5:09:1b:09:80:76:d8:06:
ef:4b:9e:3f:43:f4:04:ed:d4:12:97:4b:a9:df:c4:77:b9:ab:
fd:12:6e:82:fa:db:41:52:a1:59:96:83:d8:76:b4:4f:a5:3e:
6c:bc:3a:a9:46:e4:73:1e:64:6a:1d:ac:0d:ca:05:ed:47:34:
20:9e:ea:8e:d0:5b:02:cd:a0:0f:0a:a4:12:67:1d:40:dd:98:
65:86:9c:64:0a:57:27:72:af:c8:e0:94:f0:86:32:2e:3d:40:
86:72:29:9b:b8:d1:8a:ea:b3:ae:1c:33:6e:e2:63:3e:d7:c5:
31:47:44:97:34:01:23:55:e1:a8:bb:df:4b:23:82:d5:46:b0:
18:29:e6:e9:5d:0c:dc:1f:03:3c:0d:ab:45:f3:21:a3:97:c3:
1e:2b:65:80:99:af:f2:90:53:bb:83:79:5f:6a:38:fd:1d:51:
33:5a:a1:04:bd:17:0e:9d:b1:c6:5c:3c:ad:f4:a6:78:ff:6c:
c5:32:2d:9f:5e:28:e4:42:5b:be:ba:5a:9b:41:06:97:23:ae:
5d:fa:fe:3b:32:8a:52:f5:39:f5:cb:c6:32:14:00:39:55:5a:
b4:49:56:54:b1:a8:16:4a:48:d2:59:67:2f:11:aa:aa:83:03:
7e:81:59:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:43:50 2025 by rpki-client