Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: xGtPJGhvTEyIOeGrTggREeHfQTCNw90dF/MSUa0wZHY=
Subject key identifier: 1A:B2:4A:13:C3:5E:55:DE:67:F7:A8:89:6D:16:EF:76:B0:EF:E1:3C
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 0196760C9E52B1DB34857BD1B3E880F69B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 083F
Signing time: Sun 27 Apr 2025 07:01:00 +0000
Manifest this update: Sun 27 Apr 2025 07:01:00 +0000
Manifest next update: Mon 28 Apr 2025 07:01:00 +0000
Files and hashes: 1: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: th7d/t3kh1ZNOp9NDWd3tl9LVfuc5FFabOqCkcUo5Yg=)
2: udQIyLLEg9QQXb-UkTqLHg_TlmY.roa (hash: tqfLE5OeUFZI9sRR907kQS3AlAfPN5yiahDFaxm0yMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:9e:52:b1:db:34:85:7b:d1:b3:e8:80:f6:9b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Apr 27 07:01:00 2025 GMT
Not After : Apr 28 07:01:00 2025 GMT
Subject: CN=1ab24a13c35e55de67f7a8896d16ef76b0efe13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:5a:8e:42:82:5e:d2:25:29:16:4b:43:c2:
fa:33:3d:72:fd:63:4a:c1:2f:e9:dd:e4:05:a1:b4:
3d:03:c1:2c:25:5b:14:c2:55:5a:2e:fc:f3:0a:61:
21:b3:db:5d:fe:8c:1c:34:26:28:5a:38:73:6f:d2:
d7:c4:07:40:1f:10:2c:5a:f7:6a:98:8b:76:dc:7b:
af:cf:1d:be:74:97:dd:05:20:e1:62:1e:b3:9b:14:
87:c6:74:e9:4b:94:ee:b8:d7:ba:81:e2:c7:70:ee:
98:54:0b:0a:cb:82:7f:14:f7:cc:ac:bd:ab:91:bc:
a8:a1:6f:29:95:dc:3c:06:ea:77:50:34:ec:dd:ff:
bc:15:45:a5:e5:f8:38:b7:c8:c9:93:89:de:8a:5b:
7c:6e:4f:06:75:a5:e8:50:97:79:04:f7:48:61:13:
6c:2f:37:74:3c:a3:96:36:80:7b:7e:8b:71:66:cd:
10:fc:b4:87:81:f7:91:9b:a6:bb:73:f2:85:df:30:
d9:33:40:ed:45:65:21:38:64:a1:6b:63:4a:ad:50:
5d:e6:a9:31:aa:73:74:8a:a2:f8:67:ce:12:2d:40:
17:e7:f2:2a:a8:5b:95:33:8f:69:30:f7:03:ab:ee:
3f:e8:1a:15:2a:a6:82:71:ef:36:a9:ee:1f:76:3c:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B2:4A:13:C3:5E:55:DE:67:F7:A8:89:6D:16:EF:76:B0:EF:E1:3C
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7a:c1:d4:dc:82:3c:fd:01:bd:94:d5:a5:9f:d2:d6:45:6c:
4a:7e:3d:eb:72:68:c4:97:f6:55:09:70:c4:39:8b:57:fd:ff:
f0:63:7c:7e:2f:67:58:e1:3b:ab:c2:d5:a3:e2:5f:0c:36:30:
bd:fe:86:10:2f:cb:c0:1f:ac:f5:70:1c:33:8b:49:e9:3d:e7:
22:0d:8e:39:09:1f:0a:73:ec:c2:77:80:c7:8a:a7:e6:cc:9b:
7e:f1:2e:f0:52:68:86:c5:89:ea:3c:5c:fb:28:60:0d:8d:45:
3d:d9:3f:fc:a5:34:41:3f:97:a1:d2:20:d3:74:91:dc:91:2b:
90:c4:46:83:fe:90:c6:76:59:f2:b2:0c:d8:43:ae:74:07:39:
18:ff:12:42:5d:6d:25:43:62:e4:fb:9e:99:eb:aa:b4:97:88:
fe:18:1f:cd:66:9e:9f:7e:b7:8d:b2:c6:ba:43:6a:cc:54:88:
4e:a9:91:bb:2a:ec:a6:b0:d9:bc:78:6d:6d:50:71:78:d4:51:
5a:d6:6a:35:1c:b2:e2:0d:e3:8d:1e:2c:e2:1c:32:9c:41:fe:
fa:d4:45:1c:3f:d2:5a:c8:e6:3a:e4:6c:49:97:05:28:28:48:
7e:f0:47:d3:70:24:c5:49:5f:54:c8:ae:4c:7e:b6:04:f6:72:
84:cc:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:42 2025 by rpki-client