Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
File: NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json)
Hash identifier: viH2yDkYn0ax6B0qUt/ybsBtZDh+irxOP+EXdhh1cI4=
Subject key identifier: A9:E0:F9:FF:5D:90:AA:83:E4:E0:EA:69:E6:4B:46:E8:A6:5A:AE:6E
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Certificate issuer: /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial: 01967F4601127EB02A6DC2BA419C0D61C697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
Manifest number: 1223
Signing time: Tue 29 Apr 2025 02:00:16 +0000
Manifest this update: Tue 29 Apr 2025 02:00:16 +0000
Manifest next update: Wed 30 Apr 2025 02:00:16 +0000
Files and hashes: 1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: 8GEefvlX4L8mpkTQ6SWd+CFt38bynfrmNrrJOixdOZA=)
2: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (hash: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:01:12:7e:b0:2a:6d:c2:ba:41:9c:0d:61:c6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Validity
Not Before: Apr 29 02:00:16 2025 GMT
Not After : Apr 30 02:00:16 2025 GMT
Subject: CN=a9e0f9ff5d90aa83e4e0ea69e64b46e8a65aae6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:9c:cd:b4:48:76:21:a8:d5:9b:87:3f:ba:
33:d7:02:34:98:4d:4b:18:ca:20:42:13:9d:89:72:
71:f6:95:58:42:8f:a1:9b:a6:23:85:bf:e3:cf:da:
70:8b:9d:8f:5c:33:fe:1f:ff:d4:08:ae:d4:b9:15:
94:4c:ef:5c:2a:ed:4f:b2:62:44:e2:36:f7:16:bf:
b9:1a:e6:2f:41:08:85:a5:d8:c6:25:8c:99:10:fc:
7b:7a:78:fe:03:87:21:79:21:4f:93:7a:e5:c5:3d:
e8:2b:7f:8e:fd:e7:75:e2:d8:25:57:4f:62:40:e2:
4b:5b:43:fe:39:4f:b7:25:48:bf:86:63:ec:30:a9:
0b:49:8d:9a:09:9c:c8:ad:91:4a:01:4a:dc:21:34:
46:f2:0b:af:44:d6:4f:53:fc:0d:0a:cd:a8:8f:97:
4e:db:3f:fe:45:c8:66:e1:d9:c8:44:f0:da:d8:bb:
6f:17:fe:64:a8:19:36:79:85:b2:3b:4e:54:de:c4:
50:0f:af:0f:33:1f:8e:56:04:13:47:db:36:4a:e0:
9c:cc:42:25:c7:54:dd:76:1a:cb:0f:58:c4:14:1c:
7b:20:e5:2c:e0:c3:e5:41:51:c3:db:57:0f:f2:f3:
a1:cb:aa:53:b6:3b:64:a6:e8:ab:7d:8b:6f:cc:58:
c1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E0:F9:FF:5D:90:AA:83:E4:E0:EA:69:E6:4B:46:E8:A6:5A:AE:6E
X509v3 Authority Key Identifier:
keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ec:e0:c0:42:2a:44:02:8e:4b:f0:98:31:8a:2f:45:7f:10:
2f:07:b0:8e:6c:9e:ff:08:82:bb:62:f8:e6:1c:97:6c:04:aa:
f6:96:4d:d3:b4:a1:37:17:fa:d0:a3:63:da:1e:e6:49:f9:f8:
17:61:ed:ed:1a:6d:b1:86:04:cb:f4:cf:2a:83:98:80:b3:3d:
7c:a6:f9:4c:ca:4e:a7:17:4c:a8:fc:8b:98:76:15:f6:72:43:
75:34:94:bd:78:c3:ea:77:30:ad:4d:6b:bf:29:3a:0e:e3:ed:
80:9f:e7:bc:2f:9f:e7:13:6d:37:ad:5f:fd:e3:19:2e:f9:56:
1a:55:7c:00:ae:a0:1f:40:32:7c:2f:d5:44:85:ac:c3:ed:ca:
fb:32:64:e2:01:ba:95:77:d7:9b:16:4d:e0:75:01:c5:38:1a:
7c:c4:8d:76:3c:9e:fe:06:f4:95:2c:ac:9a:76:b1:4f:bb:65:
9c:1f:6d:50:b9:7e:f5:b8:41:b0:be:40:a9:74:42:e0:10:7d:
40:ae:f9:73:7a:ee:67:6e:b2:31:12:8c:7a:56:c6:00:a7:06:
4f:49:ae:48:25:ee:df:9d:f9:ba:02:a6:95:7c:d7:41:bb:78:
08:6f:a6:2a:ac:10:fd:f9:65:07:f6:42:91:89:3f:c1:bf:85:
08:de:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:18:15 2025 by rpki-client