Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json)
Hash identifier: ifNVm8IYDzIc78DiP3gTxMLAVLXhinQ+kDczupqhbKo=
Subject key identifier: 44:27:6C:B7:E7:85:8A:72:CC:CE:B0:2D:C4:EE:35:38:0C:C0:F0:47
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 019673B000A493E466E6E260669E834D1797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
Manifest number: 1521
Signing time: Sat 26 Apr 2025 20:00:36 +0000
Manifest this update: Sat 26 Apr 2025 20:00:36 +0000
Manifest next update: Sun 27 Apr 2025 20:00:36 +0000
Files and hashes: 1: 1ZViwBwJWukG7x8H8vOJHhjrl20.roa (hash: +aEN4SwtP07CGGNGf2sl0Ng37swdYqF9I3PWCaVNvKY=)
2: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=)
3: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=)
4: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=)
5: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=)
6: _GnprUL9RiOSINIgt8MCDfPJSj8.roa (hash: Yrrm+IlBuBC0Z/pDmaIlkiimbDJKKuFiMeYQ+bxwX6M=)
7: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=)
8: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: 6FRW0tC7plQUMbNtBRM7oQw80+gAzVYJmkKOg/GRNJQ=)
9: wRQWlx5VTlfOioAPy2QXY4Uk2Xg.roa (hash: rPHBxj4mRhTnPsN1GhR6ZZjmr/wkKhGGUErpiW2+PN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:00:a4:93:e4:66:e6:e2:60:66:9e:83:4d:17:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Apr 26 20:00:36 2025 GMT
Not After : Apr 27 20:00:36 2025 GMT
Subject: CN=44276cb7e7858a72ccceb02dc4ee35380cc0f047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:2f:ff:06:01:12:2e:76:c3:2d:a9:62:d9:
ee:d2:ef:c8:6c:0b:3e:ab:35:fb:e3:d8:19:08:d9:
c8:2f:06:dd:76:94:db:c9:90:c1:af:a5:39:4d:7c:
0e:a8:ed:bc:79:db:10:07:69:17:d5:5a:78:ce:66:
2d:28:be:9b:92:e9:63:d2:f0:e1:2b:71:e1:8a:05:
3f:3d:54:f0:31:6a:35:aa:28:1b:24:c7:3e:af:f4:
f0:51:c2:c7:eb:a5:52:af:15:a4:af:80:31:d6:de:
76:26:40:5b:0e:b3:66:82:cf:e5:1a:5a:64:77:96:
e3:0e:91:38:75:ec:4e:8d:7c:99:34:c1:34:db:7d:
08:4d:6f:9c:72:ce:cf:1a:e3:d0:8a:3e:12:f5:c8:
2f:a6:cb:78:cc:dd:08:23:1b:98:75:e8:c4:ff:b9:
59:17:83:0a:84:24:b4:7c:ce:55:f7:d3:60:aa:87:
7c:31:1b:74:f1:d2:92:68:84:3a:34:d1:86:f0:7c:
21:24:d7:a9:87:23:34:e1:46:33:fb:ba:18:a9:65:
5b:6a:1c:be:f3:d5:25:92:6b:ba:11:f0:7b:b6:1f:
6b:80:ee:06:b1:5b:5c:b9:27:1f:b4:ff:2e:fb:47:
58:5e:02:fd:41:46:dd:65:ef:50:3b:41:a6:4e:d3:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:27:6C:B7:E7:85:8A:72:CC:CE:B0:2D:C4:EE:35:38:0C:C0:F0:47
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:06:d2:f7:12:8a:b8:93:3a:a3:3b:c3:8b:d9:29:23:2f:71:
54:c1:44:56:5a:9c:66:82:5c:70:aa:84:3e:84:d3:ee:f3:fc:
2f:ce:de:4f:1c:79:ef:e3:5a:45:5c:25:73:27:e6:64:76:7c:
86:7b:40:ef:6f:5b:9c:f8:b1:60:22:42:04:bb:8d:ec:da:5d:
e8:17:af:04:e2:2a:84:3e:7f:63:f7:74:a6:50:06:20:cf:a0:
0c:89:02:8e:6c:c3:a6:9b:b7:de:38:ec:c2:a0:f1:c5:89:4b:
9d:41:48:4c:ec:97:a7:e9:78:93:21:c3:2c:80:49:e8:ea:49:
c8:ce:7d:e5:1b:1e:6d:de:6d:ef:56:bf:70:73:22:a6:d2:df:
7b:a9:13:95:2b:db:50:cf:05:3a:d6:c4:92:bb:f2:b0:32:8f:
6a:04:ef:2a:07:d5:e4:49:e3:49:5c:80:c7:00:4a:ab:14:61:
f0:42:46:62:9a:99:45:ab:56:ff:53:3b:fe:40:3e:39:a5:5d:
d8:dc:72:0a:59:05:64:0d:db:21:2e:99:b3:a3:f5:7c:2d:e8:
15:9c:97:32:87:21:a0:72:10:84:cc:b5:68:65:97:a8:29:58:
44:e9:e4:c8:65:ed:ed:31:40:8c:cd:b3:32:18:e4:99:a5:94:
83:ec:0f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:54 2025 by rpki-client