Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
File: c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft (raw, json)
Hash identifier: ox7YaOBjTIoV8dUiAPMnShHwS9OhIEz4gpq0VrRmLZo=
Subject key identifier: D1:91:AD:D6:80:5D:F8:D4:AB:68:B2:21:71:3D:35:F5:71:CE:B4:39
Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611
Certificate serial: 019679B21B9CBB6EFD8BDE8C05B2D914BC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
Manifest number: 0F97
Signing time: Mon 28 Apr 2025 00:00:37 +0000
Manifest this update: Mon 28 Apr 2025 00:00:37 +0000
Manifest next update: Tue 29 Apr 2025 00:00:37 +0000
Files and hashes: 1: KP2_oc8mgsgfljoO1nuvZhPkZ0Y.roa (hash: PSZpKzA/dVK4VjiYCM36fNdW8Sa7IO0CzoAwBYd8p8Q=)
2: RBTbCW5svUL6Cw1MIQlw5NXmiIA.roa (hash: u5ALsd3YagCY6CP2gAQK7C+3YkJeTGAXRJm4HepnwlY=)
3: c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl (hash: nit0XPrC+p6xzUE02YqieqmzLYm7kYNZirTHM/nnzg0=)
4: jmJ3eXmaKm_C4rKzs_zDcoYf_z8.roa (hash: f4DN47+xITITW5Z3XzBvZV99OJ3Lahvtt0rfcMK3ExI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:1b:9c:bb:6e:fd:8b:de:8c:05:b2:d9:14:bc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611
Validity
Not Before: Apr 28 00:00:37 2025 GMT
Not After : Apr 29 00:00:37 2025 GMT
Subject: CN=d191add6805df8d4ab68b221713d35f571ceb439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:94:6f:10:82:cb:3d:cc:fa:a2:38:76:a7:
73:2f:97:66:54:6e:64:39:37:6f:0a:f6:03:4b:22:
d1:f9:b5:71:6d:54:07:cf:26:42:c1:4a:4a:4f:38:
a7:5c:3f:8f:96:9e:28:7c:84:5b:fb:c3:c5:92:8a:
e6:bb:93:f8:84:51:19:66:f0:c2:8a:8f:b0:60:c0:
40:5d:52:31:0e:ef:f4:de:99:3f:10:17:32:94:b6:
24:09:7f:6b:a5:a0:74:bd:00:19:53:4a:9d:d3:0b:
96:aa:ba:43:bf:66:96:b9:13:ca:a8:bb:6d:de:b7:
90:35:04:61:23:19:b4:b5:62:a3:f2:a6:33:34:b9:
88:ac:9f:e1:5b:00:c6:f6:b2:bd:f7:1f:32:cd:ce:
48:64:27:2d:f3:52:20:cc:c0:af:14:b8:2c:d9:c4:
13:15:44:72:f8:41:93:c9:e0:ad:a7:f6:38:d3:97:
27:b9:95:a1:96:f5:77:40:38:57:36:59:d3:bf:0c:
75:90:ac:04:18:68:a8:93:1b:4c:80:b4:08:23:f0:
dd:76:8c:47:25:bc:c3:d1:d2:88:84:aa:61:ac:af:
7e:e2:4f:11:48:5e:68:51:21:b9:23:23:59:d8:94:
e3:51:e4:c0:88:53:03:c3:d8:ef:8f:20:8a:7c:16:
5d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:91:AD:D6:80:5D:F8:D4:AB:68:B2:21:71:3D:35:F5:71:CE:B4:39
X509v3 Authority Key Identifier:
keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:47:fe:0c:f3:99:12:4d:0c:44:bc:7f:de:1b:33:52:53:10:
62:c6:38:8b:4c:62:1d:8e:5e:1c:f3:f2:6f:8f:d7:89:58:65:
87:12:27:9a:4f:fe:b8:a4:4c:27:21:1b:38:8a:6c:dd:77:6f:
00:cb:9b:e5:15:06:26:ac:92:66:c6:ea:22:52:95:24:46:f5:
ad:89:68:1f:e0:82:95:bb:d4:4c:12:c1:df:87:3e:9e:68:e8:
a8:cc:7c:f2:56:a0:2b:2c:42:15:73:dd:f4:76:23:25:88:1a:
c9:62:1e:3c:f4:c0:4a:f0:41:e7:56:9c:e9:ff:b3:78:2d:01:
1b:ed:61:75:ff:42:75:ad:2f:89:8c:5e:f9:91:6a:90:cb:d8:
f3:83:9a:0c:33:65:ce:db:ee:56:2a:4b:35:db:7e:00:9e:1c:
65:7d:d0:53:c9:c4:d2:94:84:22:6a:aa:f7:df:84:91:02:98:
b4:e1:a4:8d:33:23:f9:22:8d:74:4f:74:38:06:20:18:82:d0:
65:d3:51:44:09:fa:0e:cf:95:29:53:ca:55:78:7e:2e:7e:34:
9d:1f:15:42:33:1c:e1:41:3f:27:95:6a:e4:98:c7:37:40:17:
9c:ed:9e:62:b0:a5:e8:be:d7:62:42:a4:19:c7:fe:4b:c0:3a:
78:24:60:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:08 2025 by rpki-client