Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: 5cYLC8xAacqDm6D07HCPCvjCecZu4wI9pkfkk+1m190=
Subject key identifier: F5:D5:A9:33:10:5D:9D:91:95:FF:D8:58:EB:4E:63:14:1F:2A:5C:D6
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 019679445C74F452AB9162C1407F6E2E5E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 0FB4
Signing time: Sun 27 Apr 2025 22:00:45 +0000
Manifest this update: Sun 27 Apr 2025 22:00:45 +0000
Manifest next update: Mon 28 Apr 2025 22:00:45 +0000
Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: a0PQgHWtl9FxoPlzUpJNV8DBf2zqKURFBjRxBx0lCRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:5c:74:f4:52:ab:91:62:c1:40:7f:6e:2e:5e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Apr 27 22:00:45 2025 GMT
Not After : Apr 28 22:00:45 2025 GMT
Subject: CN=f5d5a933105d9d9195ffd858eb4e63141f2a5cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:ae:d3:0d:58:42:25:a9:f7:a9:31:dd:79:
1b:fc:94:84:63:b5:98:98:45:fb:a3:99:89:a1:f8:
09:b8:66:b0:7c:58:07:7e:42:75:42:e4:b3:71:0a:
86:b0:61:f4:0f:f5:dd:a7:b3:3e:95:ce:f0:5e:52:
10:20:cc:13:59:26:ae:0f:01:e5:f5:1c:68:7e:73:
04:3d:81:8e:6d:67:79:a7:f2:78:b4:86:ec:3b:0f:
24:d7:1c:38:69:21:91:70:f2:22:c0:44:df:2f:b8:
78:3c:f4:0f:54:96:d9:52:cd:06:ca:82:6a:f4:50:
fd:9a:b7:9a:48:7d:16:29:a6:f4:ba:0e:4a:f9:1b:
59:80:9a:43:f6:91:f2:a1:04:79:1f:ee:f8:2e:ca:
c0:b1:c3:ef:40:a7:5c:ae:14:3d:dc:0b:ff:54:2a:
b5:a6:10:8e:e0:34:77:64:4e:eb:e6:15:9a:83:62:
64:6d:b5:2e:3e:80:52:4f:61:2b:28:4d:35:26:89:
9b:cf:68:8c:c1:ed:e3:90:14:d8:be:c0:cb:17:cd:
91:5e:38:30:10:4f:82:43:05:1c:43:41:2f:34:d7:
80:61:33:63:50:7e:b6:ef:5a:f9:86:15:8e:1b:30:
d9:17:0c:e8:ad:59:ff:cb:7f:57:4b:50:c1:e3:a3:
2a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D5:A9:33:10:5D:9D:91:95:FF:D8:58:EB:4E:63:14:1F:2A:5C:D6
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:54:9d:4b:df:3a:af:a9:ad:fe:c5:d0:65:cc:9b:9a:7b:d1:
50:df:e6:7e:f1:6f:ff:a8:57:ed:7c:a5:2f:70:77:e2:ab:ed:
76:49:13:4a:df:b2:80:f0:8d:2e:82:a7:f7:4e:33:6b:28:3e:
22:53:53:c8:cd:10:08:9f:44:9b:83:c8:12:16:ec:95:fa:cf:
08:e8:c8:b4:6b:c1:4d:b6:f2:f8:0f:1d:4e:49:a3:b2:74:81:
df:44:34:5e:ad:df:5d:4a:c2:47:3d:dc:ce:6f:b3:a2:cc:aa:
fc:b4:3d:67:87:7b:ee:96:e0:2a:81:56:f7:dd:63:82:55:a4:
e6:58:36:32:e0:7f:83:80:27:b6:99:56:d7:b5:33:77:e0:82:
38:f4:e8:81:d6:25:82:4f:e7:ca:22:06:18:2b:f3:ca:05:ca:
19:c1:84:51:b9:5e:d6:7a:d7:df:2f:6e:8a:5f:86:18:e1:33:
66:1f:0d:9f:45:09:dc:9a:38:46:69:91:f0:cf:75:21:00:10:
48:cc:d7:fd:dc:06:cc:db:c9:d8:4e:f6:bf:6e:d9:fa:2d:4d:
21:9e:ed:92:01:e3:d4:30:b1:e3:e7:21:7b:37:d5:39:06:fe:
87:41:eb:b6:b4:85:a4:3c:a3:e3:d6:31:e1:74:fe:7b:e5:e3:
15:d6:19:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:06:06 2025 by rpki-client