Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: Wwek/8fLKB8P6PWCviKT6Z+HNNt4ZpojkjzQ0z1wgF0=
Subject key identifier: A3:CE:45:E1:C5:BA:94:1B:3C:CE:BC:9B:78:6B:BB:77:F6:25:9A:14
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019671F83A9E0B84B6D5945766660BC1C007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0BA6
Signing time: Sat 26 Apr 2025 12:00:15 +0000
Manifest this update: Sat 26 Apr 2025 12:00:15 +0000
Manifest next update: Sun 27 Apr 2025 12:00:15 +0000
Files and hashes: 1: 1-YKY-kDb-ok-O2t52erxOSFI9tY.roa (hash: Puf+xKue+984oQxVfH82nttD3pZrp9rN15gRLEzYPtg=)
2: 9DNpUDfjfX1cw67GoTejssp0I60.roa (hash: waZpM47Y+Uz4d9MPb5IIUjKVJuGJ/1amyn5dhXRlaKQ=)
3: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (hash: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=)
4: BuDcPMwCapskKDGJlWsZctPOBc4.roa (hash: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=)
5: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (hash: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=)
6: nVCJmhFMb83gvB2R2U-hSqvqOrY.roa (hash: /YERfaDChwnXHF/qpIBHQyOtHUuBLeX/WEtxA7mKmAY=)
7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: Kjg2z0cD/Ee71fyQKdf7PnFSSBugDOyQMYXPRkc807Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:3a:9e:0b:84:b6:d5:94:57:66:66:0b:c1:c0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Apr 26 12:00:15 2025 GMT
Not After : Apr 27 12:00:15 2025 GMT
Subject: CN=a3ce45e1c5ba941b3ccebc9b786bbb77f6259a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:c3:db:9d:f4:bd:59:2e:6a:f8:e0:67:b5:
48:77:9a:37:03:41:c7:4a:7d:38:36:3e:25:95:93:
a9:79:36:24:fe:08:bf:4a:d5:86:b3:04:d2:22:37:
7a:62:56:52:e9:61:b5:f4:27:e6:c4:6d:65:3e:24:
22:dd:4a:38:e3:a0:9a:74:a2:ce:12:97:54:66:23:
f6:06:dc:13:76:23:65:b2:9d:9b:ef:9b:fe:a7:77:
ee:1c:8b:fd:2e:83:6d:37:07:c2:97:e7:29:40:1e:
71:af:de:22:99:07:96:ed:2d:05:36:c0:3c:be:1a:
d1:56:a0:2e:5c:39:90:1e:9d:19:cb:f6:0e:a7:ea:
f2:36:fd:80:e5:f5:db:0f:56:a3:69:5c:82:25:1e:
1f:5b:b1:85:36:89:f1:4c:16:10:13:5a:59:06:d3:
e6:0f:f1:67:e8:67:e2:0c:ab:77:7f:7d:a9:3e:69:
e1:39:05:75:c8:e2:13:df:da:d3:a3:bd:84:82:29:
70:15:23:9c:8e:13:bc:11:a8:00:7b:70:03:b4:ec:
29:90:3e:77:43:54:73:96:0e:ec:4a:5d:78:ad:92:
c6:b4:96:69:bf:97:d8:f0:e1:49:77:dc:b8:60:15:
e2:cb:06:78:3d:b7:c9:ec:0d:01:37:20:18:bb:1d:
a5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CE:45:E1:C5:BA:94:1B:3C:CE:BC:9B:78:6B:BB:77:F6:25:9A:14
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c9:a0:12:d5:86:b1:25:15:54:02:dd:cb:89:9a:de:10:8e:
9b:cd:ec:52:d6:55:b1:1e:51:e0:b0:41:c6:11:03:4e:4a:24:
c3:a2:05:0a:98:98:07:2b:8b:ae:60:35:16:57:12:4b:fc:19:
d4:55:b6:80:68:b8:4d:43:6f:13:5e:a9:4e:9a:2b:d4:d4:ac:
4c:ab:6c:e2:fa:de:a9:ba:31:e7:ac:ab:82:59:45:cb:b3:cb:
15:4c:22:63:c9:38:12:5c:6d:92:39:f2:b4:1f:32:a1:f2:ed:
0c:ad:2b:d0:2c:72:6d:0a:13:0c:09:7a:3b:71:b8:9f:d7:0f:
ef:8c:d1:1e:b6:50:a4:80:b4:0a:77:13:1b:75:a3:03:17:04:
88:0a:1f:b9:e7:d6:ff:86:d5:29:01:2c:1d:ff:7f:c8:8c:b8:
85:e6:3c:cb:21:b6:70:a9:fa:86:f8:a8:09:09:0f:56:5b:5d:
d6:0c:53:0e:e5:4e:70:67:8b:d9:60:b3:21:74:07:79:19:29:
7e:6e:a9:6f:81:e1:2a:17:2f:eb:67:c6:54:74:fb:81:dd:b5:
ea:86:97:02:b0:2e:ba:7b:2e:2b:77:57:08:79:55:72:c2:af:
5a:bf:bf:12:f0:6e:b5:3d:11:8e:56:e3:d4:58:3e:6d:43:c7:
b0:a1:bf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:18 2025 by rpki-client