Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier: 2FPJRNfksL9pBqwhyqBx+LEHKQJZrdaZq3HCwTtqlQA=
Subject key identifier: BD:46:84:1E:06:7D:99:60:E2:9E:86:8E:67:C0:26:20:23:DA:5F:74
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 019686C8E87C40C046EA51DA902DC0A9BEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number: 1449
Signing time: Wed 30 Apr 2025 13:00:35 +0000
Manifest this update: Wed 30 Apr 2025 13:00:35 +0000
Manifest next update: Thu 01 May 2025 13:00:35 +0000
Files and hashes: 1: F8WpKfkO6WPBdgcnLvLi6tQEwfY.roa (hash: aC9X5Qw0ukYXbx0znES1kvpxFjIQA5ZR++ffurv/QKw=)
2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: Vg4zavDwQYaIhXu6qV9Mb6BmQAzuff1s15Y4Ib1aBx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:e8:7c:40:c0:46:ea:51:da:90:2d:c0:a9:be:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: Apr 30 13:00:35 2025 GMT
Not After : May 1 13:00:35 2025 GMT
Subject: CN=bd46841e067d9960e29e868e67c0262023da5f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:8f:ec:78:3d:c8:5c:81:59:30:d4:7d:83:
d2:6e:0f:e9:e8:a9:81:51:34:e6:b2:c8:d0:2e:d9:
a7:34:da:d5:f8:f2:f1:c2:ab:b8:74:99:0e:51:a5:
75:d5:23:80:9a:57:bc:19:b2:69:ba:8b:da:f3:8d:
6d:3e:8b:a9:e4:2e:c5:92:06:b7:e4:2a:89:86:2d:
c1:50:33:7a:e7:47:18:18:c3:68:8c:e9:b6:4c:c9:
43:f7:20:ce:fa:a9:48:36:a6:2d:d0:98:16:35:a2:
86:89:8c:60:cc:c1:47:53:99:9c:61:51:a8:5f:ca:
12:dd:6d:1d:f4:01:f4:27:14:e1:6c:ed:ee:19:28:
f5:dd:78:1b:ac:f6:eb:1a:8b:76:3a:cd:2d:e0:79:
a5:a6:dd:9b:4f:14:d8:49:5a:40:8d:7f:05:be:c9:
6d:06:2b:db:1b:7d:e6:37:23:6e:88:66:fd:55:8b:
72:86:a4:ae:e8:89:78:ff:f7:a2:c7:c1:e7:01:e3:
07:da:dc:1d:9a:6b:74:92:34:6f:02:d3:1f:fc:3b:
ae:5f:8d:06:9f:64:44:90:23:d8:96:ea:40:08:5e:
94:53:a4:c8:83:23:62:f2:55:a4:40:5c:f4:c9:f4:
76:ea:f8:ee:4a:5f:60:db:dc:d8:b0:0f:72:71:50:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:46:84:1E:06:7D:99:60:E2:9E:86:8E:67:C0:26:20:23:DA:5F:74
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cd:f7:c5:62:1a:3d:e8:63:26:74:6e:fd:7d:48:ce:98:1c:
75:46:51:13:ae:26:0a:1f:b5:d5:17:58:68:bf:e4:50:38:fb:
4c:a8:9f:00:d8:88:05:b0:8b:f5:75:5f:0c:cf:81:29:1c:66:
92:61:15:f7:89:2c:24:db:7e:99:f4:d6:b3:02:64:dc:64:3d:
5e:aa:02:d7:fe:cd:5a:5d:d1:d4:ef:fd:db:45:63:42:a0:24:
a8:ce:5b:e5:5a:f5:4c:8c:0c:d4:a4:fb:0a:da:6c:9e:c1:25:
ff:84:51:e4:7e:84:0e:da:2a:6e:28:51:68:92:42:2b:65:ed:
51:3b:68:c5:07:bf:e0:f1:7c:73:05:f3:3e:aa:ef:8e:12:f6:
41:7b:e8:7f:ba:1a:c6:9f:4b:b9:cc:2d:bb:cc:4b:da:b0:36:
c7:90:a9:24:28:c9:ae:74:6b:34:75:4d:24:f6:09:cd:d7:db:
a3:ea:d7:e3:17:b6:2b:80:34:60:70:10:8a:42:ca:c5:3b:d2:
a7:ca:6f:a1:2c:e7:4c:19:a5:e5:0d:28:ec:1a:26:c7:72:42:
46:2d:01:26:a0:da:78:41:18:79:97:a5:50:17:ce:c8:f8:66:
ee:32:e0:6b:65:6b:77:0f:ac:71:9d:92:ed:96:69:eb:1f:2f:
c8:64:84:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:09 2025 by rpki-client