Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
File: RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json)
Hash identifier: hJlrFVVLElQ+XB3Hds0cH2itqomnBsTc/CctcPrdG3k=
Subject key identifier: 6F:3F:0C:A0:56:4D:EA:7E:14:0C:68:EE:EB:CD:BE:7B:46:06:32:D9
Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Certificate serial: 0196895C2240FD9795F39D28359CF520E118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
Manifest number: 0757
Signing time: Thu 01 May 2025 01:00:38 +0000
Manifest this update: Thu 01 May 2025 01:00:38 +0000
Manifest next update: Fri 02 May 2025 01:00:38 +0000
Files and hashes: 1: DzVVrFISV3SBn05LsG8ndsYg1aE.roa (hash: hA/w0PY+vo1QpcIrf2hV7eRwasuyeWDku9nC2cWOSxo=)
2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: DgO1+4+obeGB7ztNfRfyG982Chd1hPauzZiyYCQPkNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:22:40:fd:97:95:f3:9d:28:35:9c:f5:20:e1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Validity
Not Before: May 1 01:00:38 2025 GMT
Not After : May 2 01:00:38 2025 GMT
Subject: CN=6f3f0ca0564dea7e140c68eeebcdbe7b460632d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:51:15:b2:65:d7:ca:45:24:86:72:c8:ec:
cf:a9:4f:49:e1:d7:72:08:c2:da:49:5a:4a:3f:bd:
3e:df:2a:db:f0:e0:48:fd:00:0a:00:7d:d7:cb:99:
39:ee:4d:d1:78:7e:05:b8:7c:8b:8f:63:cb:66:2e:
e0:1a:bf:ed:f0:af:05:bf:00:16:bb:79:49:a1:9f:
72:e5:a1:bd:5e:58:5b:cb:e8:8d:95:a8:e9:96:7f:
8b:1e:95:d3:56:05:30:99:87:9d:d0:04:6a:89:bb:
94:b6:5f:98:4f:c2:d8:64:2d:f1:83:da:09:67:57:
ff:92:6c:c5:de:67:3e:6f:2e:5b:95:84:16:06:ee:
07:4b:0a:79:16:89:f4:4d:06:9d:30:98:7d:f8:1c:
b5:42:c0:b7:29:40:03:93:a4:77:f5:d7:69:1e:45:
3e:9c:65:60:0f:62:57:b4:0e:a8:b1:69:b1:bb:c0:
b9:58:26:59:45:1f:09:a8:08:81:43:88:9c:a4:a8:
00:af:93:15:e5:3f:6a:71:46:94:18:2d:7c:64:ed:
eb:97:e3:5d:97:e7:ac:55:52:08:4f:0b:35:11:3c:
8a:72:30:95:c3:59:7f:ba:1d:cf:d9:cb:8b:f3:3c:
be:a1:6a:25:27:48:1a:07:fb:61:c8:73:75:8d:c1:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3F:0C:A0:56:4D:EA:7E:14:0C:68:EE:EB:CD:BE:7B:46:06:32:D9
X509v3 Authority Key Identifier:
keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a2:74:b8:18:69:77:1e:35:8e:d2:f7:ba:57:14:ab:06:da:
8e:b1:7f:9f:6d:42:d0:2a:54:c5:e8:57:ac:90:e9:69:3b:18:
de:fd:d4:dc:0d:61:6d:bc:6d:39:1d:31:28:b0:97:42:9c:a3:
11:9d:dc:3a:a7:c1:4e:96:0c:a5:8a:ee:57:ce:42:84:0e:6a:
05:88:00:05:c6:19:c5:1b:a1:c6:8d:f0:46:dd:34:f7:65:94:
4e:95:39:46:76:4a:7f:02:69:a4:c6:b9:94:71:40:61:96:85:
74:75:a6:77:5e:aa:3b:3b:54:4d:67:d0:03:b7:d5:f3:49:d6:
8d:f5:40:0b:0a:06:34:f4:2f:f3:35:eb:3c:bc:1c:34:be:19:
b9:5a:d6:1c:00:fc:39:89:68:2a:39:0b:cb:fb:7b:5f:73:ec:
b8:d4:fe:a3:ba:79:25:64:32:b7:e1:d7:5a:f7:17:be:bc:c6:
92:ce:5f:80:13:97:3f:d2:93:db:3e:d6:cd:31:17:7f:56:44:
d6:ed:9a:86:6b:9e:c1:0f:0e:bd:78:db:8d:7c:28:5e:7a:f9:
38:65:c5:73:c0:f5:8d:92:33:38:d6:b0:42:73:fd:04:c8:a0:
0a:8d:48:e8:b8:64:d0:6e:58:6c:90:b7:60:33:af:3b:92:ef:
79:23:fa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:47:04 2025 by rpki-client