Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: eab4gb2f+Nem8IS7k+OcxmVahhUJhrnDZyM6pGRP/jo=
Subject key identifier: 12:74:8B:41:9F:CA:F9:A2:D4:EF:E5:52:3D:C0:DA:51:3D:AC:88:26
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 019673E697AD9017B945F8ADC3838E49EBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 029D
Signing time: Sat 26 Apr 2025 21:00:14 +0000
Manifest this update: Sat 26 Apr 2025 21:00:14 +0000
Manifest next update: Sun 27 Apr 2025 21:00:14 +0000
Files and hashes: 1: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: sCVADVgpuDY3Zf8u0DbqXTqTtaGlef/fVkJqIwQqzI4=)
2: sazfzVz6q9bIns0N5tJ_KIxOhyU.roa (hash: 7Dx7RnLHW4HsXUHgAbio+tOs+19yMbUTjmWX8tX1e1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:97:ad:90:17:b9:45:f8:ad:c3:83:8e:49:eb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Apr 26 21:00:14 2025 GMT
Not After : Apr 27 21:00:14 2025 GMT
Subject: CN=12748b419fcaf9a2d4efe5523dc0da513dac8826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:eb:35:6c:b3:21:aa:01:c3:3f:08:4d:c7:
0b:02:55:27:6e:84:1e:1c:8a:c9:fa:bc:36:d7:7f:
75:33:c7:4f:b9:4b:12:8d:1a:fe:5d:a5:49:4e:74:
d5:92:4e:1e:e2:93:44:20:e5:0b:a4:b4:ed:a9:60:
c6:aa:31:64:98:df:81:e5:6a:f6:6b:c4:ed:fe:3c:
99:d2:ec:42:7f:1c:e4:0a:d2:63:53:8d:d8:c3:84:
00:72:4d:1a:d6:b6:3e:a9:21:1b:74:2d:bc:3c:4f:
88:aa:a2:9a:4e:71:e8:3c:5f:00:4d:4b:d7:a1:26:
0f:d6:86:b2:e0:5d:cd:c9:88:e3:2b:da:a6:30:8e:
c5:4b:97:55:72:3f:94:0c:a1:2e:1a:10:58:cb:8c:
5c:ef:01:7a:93:59:50:55:4e:e5:7a:cf:fd:ca:cc:
9b:ae:1e:53:c5:e3:1e:b6:15:a3:66:8a:21:d5:a7:
b2:f3:96:e3:2e:fa:dc:2e:fc:d8:68:37:a7:04:77:
f8:92:65:66:3a:6b:c5:82:c3:4b:00:9b:4d:df:5f:
a3:3c:ab:ca:2b:ce:f1:99:4a:c0:7e:99:b5:41:fd:
13:f1:a2:72:fd:4e:dc:4e:b1:40:45:b6:bc:32:d8:
d7:a6:76:56:d2:4c:0f:01:b9:59:9d:22:88:28:7e:
4c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:74:8B:41:9F:CA:F9:A2:D4:EF:E5:52:3D:C0:DA:51:3D:AC:88:26
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3e:e9:00:c3:90:e2:2c:d8:a5:1e:35:dd:d3:f3:f9:41:11:
2d:58:c4:2a:d9:7a:72:46:14:51:17:60:f6:f2:e2:86:b9:18:
82:16:bf:94:68:2b:39:ab:50:37:4e:10:a3:71:72:5a:43:9e:
52:6e:98:cd:6a:ca:26:fd:39:d6:ef:e9:91:ed:e5:2e:63:31:
c8:49:dc:0d:8f:04:fa:53:38:80:13:a6:7f:5e:81:36:01:5f:
76:94:0a:d1:59:55:4b:8b:34:8f:91:85:0c:0e:d5:d2:30:ec:
74:2b:dd:b6:a6:74:da:fc:62:ef:fb:d1:80:4d:ab:ee:2a:d4:
28:82:34:c3:3d:cb:2b:99:84:c0:80:c8:8f:16:91:40:2f:1d:
39:6e:9e:1f:b0:0c:58:9c:8f:f4:22:68:0d:d6:ef:07:c9:e4:
07:59:ab:34:bf:f8:4a:58:24:8c:bf:86:8a:8d:75:9b:3d:cc:
12:d1:2c:14:b6:00:e7:ee:b7:7c:77:b9:fc:d0:fc:85:6d:ef:
53:f2:ce:03:97:71:e5:94:3c:6e:66:9a:46:9d:bc:46:7f:cf:
b2:41:53:d2:71:c4:af:20:f5:e8:a0:d1:24:2e:3b:35:f9:3a:
d5:d5:94:2f:10:da:5b:2e:1b:be:91:0e:8b:94:38:6d:1e:e1:
6c:99:7f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:41 2025 by rpki-client