Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: S87pruyZOcwYAOCCP/gf42XMDcpd3LzgIcTqXBQx720=
Subject key identifier: 59:A6:3C:8D:3F:03:2C:1D:7C:A2:DA:92:7D:CB:0C:40:29:B3:4F:95
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 01967755D70B874B7B72B4A1444BAC375316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 08E5
Signing time: Sun 27 Apr 2025 13:00:36 +0000
Manifest this update: Sun 27 Apr 2025 13:00:36 +0000
Manifest next update: Mon 28 Apr 2025 13:00:36 +0000
Files and hashes: 1: DTF9ONSmCnj34QSV3oz7U0spqDo.roa (hash: Kw2YkPP6grSzeM7Vvpfj0GyDu4r4ER5vZalMBblwx+c=)
2: E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa (hash: hTQ5VP+ecunyC7viVfskT54aK8ITC6qcoUrC0ZEyNns=)
3: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: ZunCiTyVyXjtQKd4iD85vJcHeHAtDPPLP22DHbkhNeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:d7:0b:87:4b:7b:72:b4:a1:44:4b:ac:37:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Apr 27 13:00:36 2025 GMT
Not After : Apr 28 13:00:36 2025 GMT
Subject: CN=59a63c8d3f032c1d7ca2da927dcb0c4029b34f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:4c:24:63:f5:af:c8:60:dd:f4:e6:ad:45:
e0:fe:23:06:1b:e2:2c:4c:3f:92:62:1f:43:50:26:
ef:87:95:68:73:cf:31:4e:dd:89:1f:14:d6:cd:79:
84:8b:a1:be:5f:50:aa:82:c9:39:82:71:1d:c3:58:
11:f7:9c:f2:8b:76:7f:c1:2e:46:d0:46:e3:b8:2f:
a6:90:90:a5:29:a9:1f:14:9f:29:c5:f8:0e:c0:4d:
a1:21:0d:e9:08:31:2b:3e:65:ef:5f:de:51:6b:03:
f5:db:72:9a:ba:eb:0a:58:40:15:32:f6:89:98:6c:
72:e3:e4:e9:35:4b:10:7c:28:bf:40:83:60:27:3d:
c4:2c:22:4f:84:a5:80:60:0f:56:a7:af:dd:8a:21:
ac:0d:9e:fb:24:03:6c:40:cd:56:a5:9b:f4:be:b2:
16:c3:e4:07:6c:05:d0:b3:63:a2:09:f3:ed:ab:01:
0b:0a:94:60:c2:35:ec:ab:59:90:9a:e8:cd:62:14:
fa:5f:e2:de:32:c7:29:78:0d:20:9b:72:5a:04:1e:
08:0b:54:97:31:46:47:c5:33:78:2f:09:2f:ca:ef:
29:94:71:ac:4e:8a:19:f3:7a:34:d9:9b:a9:11:fc:
20:bc:7e:ec:3f:98:38:f0:40:5d:49:b8:7a:3a:5f:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:3C:8D:3F:03:2C:1D:7C:A2:DA:92:7D:CB:0C:40:29:B3:4F:95
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f2:79:8d:87:5f:da:53:53:4a:a5:bd:f9:da:12:cd:b6:29:
1b:d9:bf:38:e2:ae:28:ea:14:28:43:6b:47:68:9b:fa:98:e1:
8c:47:64:cd:9c:6b:17:a8:aa:c3:e3:d4:0e:70:5b:b1:be:e0:
be:02:71:4f:36:18:c3:48:3d:ea:c3:1f:46:5a:35:62:61:fa:
d2:32:53:99:cd:5a:92:97:1c:b1:29:32:03:c1:c1:fe:23:36:
b6:57:a3:40:6e:97:77:3b:5e:bd:ef:96:10:8f:67:06:da:05:
a6:61:3b:c2:48:ae:55:c1:3f:ee:86:a2:9a:aa:2a:aa:74:56:
a3:62:9b:63:0a:9b:12:bc:53:13:3e:1f:42:2a:70:8e:6a:1a:
1b:e1:83:06:55:b9:fc:bb:17:79:eb:35:94:c8:4f:aa:4e:e0:
be:57:a5:fc:98:9b:6e:5b:11:54:1d:db:9a:30:3d:06:3b:51:
b7:91:fc:3a:ad:e8:cc:0a:aa:ff:64:b7:fb:fe:90:e6:77:e7:
e9:cb:e2:c2:86:3b:3a:38:c3:96:f3:06:25:e3:f8:04:db:83:
7f:40:c7:b0:94:9b:ed:2d:32:85:d1:aa:3d:9f:ea:62:0c:88:
d5:7d:44:9d:47:eb:88:22:b7:81:ed:97:4d:c2:cd:7d:84:16:
8b:6e:af:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:21:22 2025 by rpki-client