Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: tTfh6xHSNp+7WB7t4EeeRn+xvxgE2FC50/pIpqszqlc=
Subject key identifier: 2D:23:9F:62:55:A0:81:50:D4:09:A1:6E:5A:94:A0:F3:57:0B:0C:0A
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 01968A381A6A29E559D9DC09BFB27454B464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 0CD1
Signing time: Thu 01 May 2025 05:00:54 +0000
Manifest this update: Thu 01 May 2025 05:00:54 +0000
Manifest next update: Fri 02 May 2025 05:00:54 +0000
Files and hashes: 1: 0MrgjigrDPt6rPegZME8cXiUORo.roa (hash: 7glCaQ9Yvpvmun3d90ogrApzDsZCqJLUsDw/+14dTgE=)
2: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: 3iMn+avvwGAhyXkQlmzVxAA46MCsM51HjJMYxiWR8ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:38:1a:6a:29:e5:59:d9:dc:09:bf:b2:74:54:b4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: May 1 05:00:54 2025 GMT
Not After : May 2 05:00:54 2025 GMT
Subject: CN=2d239f6255a08150d409a16e5a94a0f3570b0c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:d2:9f:03:c1:dd:f7:46:2a:5a:20:ca:40:
2e:3c:3d:55:0b:be:1a:ce:4f:4e:bf:c1:c0:b9:d9:
11:07:0c:f3:97:05:ea:71:b0:64:e0:8d:b4:25:61:
3b:31:a8:ad:11:66:3f:20:ac:da:db:0e:11:f5:8d:
f2:41:62:c0:01:ae:b1:ee:8d:57:b8:c2:49:33:b6:
e9:28:a9:f8:18:57:43:d5:ab:8e:49:8b:8b:1d:24:
b7:5f:83:9a:01:cb:48:d6:38:9c:e6:2c:ab:6b:2a:
2b:e5:ef:6d:e8:c4:b7:ba:00:bc:c4:19:54:85:3f:
26:ba:68:42:62:fb:2a:8d:96:7e:54:d4:f1:35:9b:
e1:04:35:70:d0:b1:2d:53:cc:52:a0:31:16:b2:cf:
ac:be:43:15:7d:f5:2d:4a:ff:b0:78:25:db:9a:44:
06:41:fa:1f:de:8e:b0:80:b9:4e:e0:eb:85:54:f7:
54:18:21:ff:ca:99:44:e2:c2:40:03:f7:65:84:0a:
ef:f7:fb:25:3b:ee:4a:aa:f3:07:4e:a7:91:44:af:
9e:74:c1:d4:ce:14:30:ac:1e:80:02:f7:90:86:15:
ce:a6:da:e7:bd:c0:d7:26:a8:db:9f:2d:58:93:57:
44:99:59:4f:35:d0:92:8b:2c:a4:b0:68:fc:b1:54:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:9F:62:55:A0:81:50:D4:09:A1:6E:5A:94:A0:F3:57:0B:0C:0A
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:48:bb:ef:5b:ce:40:c9:82:43:2a:25:37:f9:ea:1a:58:8e:
ca:fa:aa:a2:24:73:33:5a:2f:f7:36:7e:b0:a8:ec:59:51:dc:
01:03:f6:c5:c5:b6:76:ce:99:2e:ea:db:27:ec:01:75:25:7d:
47:c9:95:e7:9f:70:c0:6c:40:dd:db:40:20:8c:e6:e4:97:35:
85:40:f5:10:4a:e7:d4:09:08:6a:4f:7f:27:c7:4c:a8:b2:cc:
3f:73:60:ef:63:7e:b9:b4:9c:75:69:0f:1a:20:8a:a5:d2:a1:
a6:64:a5:75:9c:aa:e9:5b:32:9c:c8:8a:1f:35:c8:e6:24:d4:
ed:72:16:1c:44:53:d3:8d:91:89:ea:ca:0a:95:27:ad:1a:58:
8b:36:59:23:4a:89:3e:d0:12:a4:5e:11:aa:87:20:ed:94:a6:
ab:77:77:7e:f4:64:30:a1:ed:41:71:54:38:c4:4c:aa:66:37:
83:cb:f7:d4:8d:34:e5:3d:01:f6:ef:9c:17:e0:48:79:96:63:
82:60:f1:23:ce:12:d4:78:40:b3:76:7e:30:b4:4a:47:9b:76:
7e:db:64:82:29:27:97:cd:85:9e:9c:c6:fd:8d:40:f8:40:59:
d6:91:71:d5:b0:8b:3c:c6:88:e4:05:0a:84:7c:8b:9c:b7:b8:
a4:34:e0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:19:19 2025 by rpki-client