Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File: ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier: G3KJ9q0/2R6eGEmiaq3hjVRdZfEFqc1UjSFKzjWA6Bw=
Subject key identifier: 5A:85:F2:A6:DA:32:93:A9:75:E4:58:0B:86:48:A4:62:1B:45:E2:84
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer: /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial: 01969905D56DE428A65E6550B561B5CCF367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number: 0D79
Signing time: Sun 04 May 2025 02:00:18 +0000
Manifest this update: Sun 04 May 2025 02:00:18 +0000
Manifest next update: Mon 05 May 2025 02:00:18 +0000
Files and hashes: 1: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: 50dByHZdaLdc0MF2Qn2cLwdtNOAjP2Fq/5OLLMbSuIw=)
2: uweYkDCu-qqfi3ug1YgUgTCGT6M.roa (hash: /KpNT+Dkmz13bWhCJTvJ8D+AbxL/YrXSoux1HxprkcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:05:d5:6d:e4:28:a6:5e:65:50:b5:61:b5:cc:f3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Validity
Not Before: May 4 02:00:18 2025 GMT
Not After : May 5 02:00:18 2025 GMT
Subject: CN=5a85f2a6da3293a975e4580b8648a4621b45e284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:94:b9:9a:b9:a6:ca:b0:40:d6:2f:df:9c:
fc:7c:06:52:46:4a:de:38:13:0f:52:7c:1c:06:ae:
f3:42:f0:b3:02:c1:1b:b7:2f:90:4f:d9:3f:a9:c9:
7a:1d:a7:3c:c9:2a:88:4e:59:d9:83:36:00:7b:1a:
b6:18:31:cf:7c:ed:f0:07:d3:fc:29:6d:63:ca:64:
14:c3:d6:8f:7a:41:86:bf:15:df:c5:f5:60:1d:f0:
ed:25:f2:af:db:88:c1:a9:14:19:a2:09:f6:2f:aa:
c4:31:24:2f:80:40:8e:67:65:76:95:72:07:64:51:
dd:b5:db:e0:a5:ed:22:cb:db:ea:a7:dc:a2:c9:2a:
65:ff:3c:9f:0b:06:e1:6e:0f:dc:c6:86:cc:88:2f:
a4:62:50:c1:03:30:e0:25:35:9f:33:83:6c:20:57:
24:7a:c5:2b:de:ed:c8:1f:d8:39:51:cc:fb:0f:31:
84:58:0b:30:a2:b0:b5:83:b0:8f:8c:86:ac:2c:37:
21:a6:1e:2b:01:96:de:8e:43:0f:58:a3:01:f4:94:
35:4e:78:0c:15:ef:2e:f7:6c:57:5f:b3:cd:57:99:
25:49:48:79:5c:97:57:6b:a7:a0:dc:72:82:cc:29:
b0:e6:55:71:76:98:c0:9b:ea:8c:2a:5e:24:77:1a:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:85:F2:A6:DA:32:93:A9:75:E4:58:0B:86:48:A4:62:1B:45:E2:84
X509v3 Authority Key Identifier:
keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a7:3c:c6:ce:77:53:ed:e7:6a:0f:90:1e:6e:3c:f9:d3:82:
4e:1c:fb:c0:6c:06:90:56:69:b1:7e:5f:da:ac:86:21:2b:81:
5b:69:cc:3e:7d:d3:61:68:b8:51:53:cc:f2:36:eb:40:64:21:
35:04:0c:47:b7:74:d8:6b:d4:cd:e9:9b:6b:47:f0:00:63:41:
c7:15:cd:2f:4f:71:6c:59:15:9b:b9:56:19:54:52:14:44:05:
ba:81:da:05:29:0f:c8:e7:e6:16:d5:a0:f7:91:0b:57:7f:23:
40:48:36:32:06:1f:95:31:02:83:3c:b8:52:8b:63:97:b0:fc:
df:51:75:98:09:84:48:8d:84:33:ce:cc:ab:4b:81:22:9a:4c:
4f:0c:15:a7:fa:6a:38:0a:d9:64:d6:f1:96:bb:4e:95:39:08:
34:6c:1d:8d:bf:9c:54:0a:14:cc:ed:96:a2:92:85:c3:d6:d9:
4c:83:dd:31:3f:e8:ac:a7:92:5a:b4:18:91:c9:0a:a5:d7:22:
9e:be:fb:7b:e5:7c:31:36:71:ae:e8:6d:4c:88:b3:10:b2:68:
f8:6b:27:ff:54:80:61:4c:0b:42:44:b2:3b:cb:ad:3a:77:4f:
cd:9a:9d:c1:58:5e:e8:13:54:9d:fd:7e:f8:60:81:a2:e0:0e:
2b:5b:2f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:06:01 2025 by rpki-client