Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
File: nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json)
Hash identifier: IAngy+hn5FlRtDOB4DVZCZgrQw2tZ3CGfu95myMXX6M=
Subject key identifier: 92:90:32:71:58:48:DF:A6:E6:CC:B9:90:DC:1C:CA:1F:B2:0D:55:10
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial: 01968BB8306719E6428E571B5FF253708954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
Manifest number: 0AE6
Signing time: Thu 01 May 2025 12:00:26 +0000
Manifest this update: Thu 01 May 2025 12:00:26 +0000
Manifest next update: Fri 02 May 2025 12:00:26 +0000
Files and hashes: 1: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: eIAx0i8253geJdiRAi35E/eSurrXrG5aEGvYOapOlaI=)
2: vzUoCVHRR9ZHE2kigNi06PdimLU.roa (hash: a4CslL3J1RRiTZFOjWgZdX3HIAOzGd5qiCR9i0+UhrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:30:67:19:e6:42:8e:57:1b:5f:f2:53:70:89:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
Validity
Not Before: May 1 12:00:26 2025 GMT
Not After : May 2 12:00:26 2025 GMT
Subject: CN=929032715848dfa6e6ccb990dc1cca1fb20d5510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:2c:7f:52:18:3d:44:e7:f0:2e:41:6c:b0:
8b:94:76:b1:61:26:4a:0c:76:bc:31:40:f7:23:38:
cb:70:6c:90:c8:8f:4d:f6:68:cd:57:88:58:e4:03:
c8:a0:a8:a0:1d:17:df:6c:e1:dd:bc:ba:50:ba:e5:
fc:90:5c:57:e4:4f:70:53:e0:73:12:ce:4f:5d:c8:
f3:14:8d:1b:a9:8c:32:ba:1a:f6:a8:0a:9f:83:0e:
dc:e6:df:63:bb:26:57:01:de:6b:27:12:f2:2f:9d:
29:29:7a:79:59:cc:74:b0:37:77:33:ca:b3:e8:a6:
c2:9e:1a:1f:75:cd:fa:05:20:8b:80:94:23:93:b6:
64:45:8e:30:69:b9:e2:85:b2:2c:bb:e1:ba:e1:14:
be:50:5c:94:60:23:4a:36:d4:0f:fd:d2:b6:c4:bd:
61:76:cf:d5:74:41:b2:5d:68:06:ca:5a:0e:56:da:
52:af:24:b8:d9:c1:9a:c5:d2:d4:3e:9b:1a:0f:b8:
b8:52:3b:d6:b1:be:6e:84:a4:ff:51:1a:d5:5c:1d:
8d:d6:65:d3:1d:55:39:14:1f:d0:db:98:aa:6c:de:
b4:ba:55:08:39:28:1b:5c:0f:4f:4b:27:8f:17:fc:
af:d6:eb:7e:80:86:fe:bc:48:29:b5:1a:95:37:59:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:90:32:71:58:48:DF:A6:E6:CC:B9:90:DC:1C:CA:1F:B2:0D:55:10
X509v3 Authority Key Identifier:
keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:40:40:4e:9f:66:eb:cd:ce:c2:ef:e6:6c:fa:f4:f9:40:fb:
d0:78:8e:46:7a:7a:b8:bf:4c:aa:3f:ea:db:32:19:89:12:45:
c9:41:10:cd:d7:29:36:f1:54:d2:82:85:4a:1f:f2:7a:17:a2:
c8:4d:4a:04:c2:ba:e4:1f:84:26:03:5c:4c:47:7a:83:ca:e7:
36:5c:23:b9:c5:58:b2:6f:10:61:49:bf:04:cb:b1:c0:00:78:
13:ac:a9:eb:ac:9e:74:6e:7a:0e:6a:1b:b4:19:41:5c:a4:d2:
4b:76:3a:2b:3b:59:67:33:e7:1b:e4:35:af:98:44:a8:4c:6a:
57:c6:2e:c1:57:c3:03:4f:cf:ad:ee:91:1b:40:5b:fa:3d:a7:
9e:01:25:b1:46:63:fa:f5:ea:74:57:00:99:e7:45:1e:29:d5:
b8:2e:ca:a3:8a:ab:8a:69:6d:a8:76:40:c0:96:1b:36:06:d6:
5b:27:67:e2:85:5e:2c:8a:0f:a2:16:db:f6:71:2e:b9:9e:e0:
ec:c2:95:82:67:0f:72:06:c1:7a:0d:0e:85:e3:ef:bf:f9:90:
56:36:0f:3f:7a:9c:7a:a2:0a:59:72:b1:e4:1e:3a:0c:ad:27:
ae:67:42:5f:7a:2c:85:3a:84:a4:54:00:3d:10:b0:51:80:4a:
f0:57:2f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:05:58 2025 by rpki-client