Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier: E85frmKD9a1Emjcy2mBxrqZy3D5JKpkARbx/juBMh9M=
Subject key identifier: 38:9C:29:6E:9C:A4:78:DA:DB:80:D0:1F:F7:09:9E:72:9B:F7:7C:0D
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 019679E937212F95913C6905EABC2D93754A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number: 0926
Signing time: Mon 28 Apr 2025 01:00:49 +0000
Manifest this update: Mon 28 Apr 2025 01:00:49 +0000
Manifest next update: Tue 29 Apr 2025 01:00:49 +0000
Files and hashes: 1: _bVk5KEYMfzUMgiBziaNKeODYT8.roa (hash: vIMcu46lRDXHK5Ht9fIkqPEvFTQHMwND+OPzypT6tAc=)
2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: JQe2LMKY7bX4zVYIcJbnDuQT4TR1pM32BcdyadCwmgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:37:21:2f:95:91:3c:69:05:ea:bc:2d:93:75:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: Apr 28 01:00:49 2025 GMT
Not After : Apr 29 01:00:49 2025 GMT
Subject: CN=389c296e9ca478dadb80d01ff7099e729bf77c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:31:f8:60:d5:46:f1:ce:81:10:d6:bb:55:
25:2f:4d:46:a4:bc:4e:96:9b:67:a1:b0:ee:01:2c:
49:8b:c2:f1:8d:21:07:03:e8:45:dc:9d:86:72:c1:
b2:c7:95:a6:c5:1b:e4:bd:e9:d8:a6:13:7c:38:f3:
f4:b0:14:8f:3c:1b:50:d9:95:a2:78:b1:49:c5:73:
ee:c6:23:98:67:9e:96:52:13:65:4f:56:37:11:c0:
e3:02:97:11:51:b6:d6:9a:f3:ae:2e:31:33:75:d2:
fc:fb:1d:53:b6:e6:c8:40:84:17:4f:cf:b6:fe:88:
a4:16:6d:d9:2b:99:b6:41:48:e1:0e:c9:43:f0:e4:
61:0a:ec:76:9d:24:70:78:51:77:c3:03:18:e7:74:
a9:52:ec:b0:9c:3c:5a:89:80:b0:37:4b:db:5f:e0:
e6:42:b2:03:33:c9:62:96:c4:59:9b:cc:9f:df:cf:
51:08:ad:b7:74:bf:45:55:0f:fd:fc:1a:d4:cf:77:
ad:70:ee:80:ae:de:47:4c:91:a8:0b:20:7f:1c:a1:
56:b9:f6:6f:95:82:7e:58:bb:9f:16:98:92:6e:51:
a4:03:7d:b0:13:15:77:a7:de:c9:02:b0:23:69:88:
8c:b5:db:77:47:d2:8b:2b:b7:38:e5:2c:a1:73:ca:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9C:29:6E:9C:A4:78:DA:DB:80:D0:1F:F7:09:9E:72:9B:F7:7C:0D
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ef:72:b1:64:1e:3f:48:f4:4d:cd:8c:76:36:59:50:e8:7d:
d2:ac:bb:aa:43:43:05:0d:17:f9:0b:ae:d8:80:1e:ff:6f:01:
41:95:4e:55:63:4b:f8:17:1b:f8:c4:5e:84:4b:ce:d4:3a:8e:
1b:30:d7:5c:24:3e:dc:73:2c:8f:1c:ee:d9:ab:58:00:da:ad:
a6:0b:d2:8c:cf:50:5f:09:e4:70:ad:19:f0:de:a4:b5:7e:bc:
74:1e:d7:d3:cc:f4:a4:9b:93:8f:9c:ed:f1:d8:3c:d0:e8:13:
60:da:74:41:fc:4d:e9:0e:84:ac:2f:b9:93:61:28:65:24:7e:
03:b3:49:af:48:b2:aa:20:3f:3b:5d:13:ab:43:8f:3b:4a:05:
51:51:ff:19:ca:d7:23:f8:07:73:43:1e:a2:d8:a9:b3:68:08:
29:93:11:45:72:e1:f1:c5:68:11:e0:dd:98:83:a9:e1:39:43:
fc:60:51:0a:4b:f1:fd:ee:98:57:5c:dc:eb:9b:80:cd:3e:33:
03:38:62:fe:3c:19:c6:b9:25:84:cb:ec:87:f3:fd:ab:c9:41:
8a:46:c9:ae:f0:c2:b6:17:37:c2:ab:4a:7a:1d:cb:1b:fe:5f:
2b:67:c0:f7:90:a2:5f:d4:88:4f:d8:d0:17:f0:c8:be:f7:b4:
9b:cf:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:14 2025 by rpki-client