Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: 0LtxPzpbNdDJ4YYNk8jLQ1jrIzG+kNTYV38YXOrdjzA=
Subject key identifier: CD:D5:A9:47:03:65:35:09:E7:CB:23:8D:1A:7C:4C:11:9F:40:F8:77
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 019678682F845149C6AB22E27326858FE0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 14A2
Signing time: Sun 27 Apr 2025 18:00:15 +0000
Manifest this update: Sun 27 Apr 2025 18:00:15 +0000
Manifest next update: Mon 28 Apr 2025 18:00:15 +0000
Files and hashes: 1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: 5oqJW1MWBpC9g7fMoC2vk5jtk9jXKrULHfJ4fVhShBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:2f:84:51:49:c6:ab:22:e2:73:26:85:8f:e0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Apr 27 18:00:15 2025 GMT
Not After : Apr 28 18:00:15 2025 GMT
Subject: CN=cdd5a94703653509e7cb238d1a7c4c119f40f877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:31:a7:67:70:c2:17:e3:32:3b:f0:ba:6a:3f:
9d:ab:22:4e:fb:2a:45:04:57:26:b5:28:5f:75:b5:
8b:46:31:98:f8:0a:88:25:72:19:b3:dd:ce:83:f6:
cf:76:26:a6:5f:e0:b0:b3:9d:73:75:78:b0:d5:63:
c1:5a:63:6e:8a:a5:ca:20:f4:0c:6f:fa:be:76:c6:
3c:58:0c:00:a1:81:60:27:18:aa:71:e8:a6:d4:16:
6f:a7:47:92:0a:55:e3:56:db:15:0c:ab:b2:4c:98:
1b:5c:47:10:74:0b:cf:49:b5:67:f8:9d:43:18:75:
9f:1d:61:ff:47:15:1d:e8:8e:1f:9a:59:99:5e:28:
2e:0a:87:af:4a:0a:4a:bc:c2:9b:c0:6a:d4:f6:22:
cb:ca:c0:57:89:9b:56:c7:d7:44:fa:06:71:d0:95:
84:dc:62:ef:20:03:1b:2b:b3:22:a3:8a:d9:d9:dc:
b4:0e:82:32:c8:24:ca:9e:fc:4b:60:3d:0b:b5:ce:
e4:a9:7b:8b:35:c8:d4:a5:1c:c0:5a:58:6c:5b:b0:
db:2d:a5:5d:d0:cf:92:a0:10:1f:09:b3:58:9c:05:
90:f8:ea:98:4b:f0:b7:9b:0d:b9:94:64:12:80:26:
bf:18:05:52:ba:c7:6d:fc:71:06:98:d5:69:a2:0d:
ca:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D5:A9:47:03:65:35:09:E7:CB:23:8D:1A:7C:4C:11:9F:40:F8:77
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:23:c3:7b:4f:d2:a6:c1:be:48:98:69:e6:d9:4f:0f:0d:49:
4c:f1:81:d8:a6:12:cf:bd:2b:df:b4:88:02:1d:20:c3:14:70:
b3:c4:e9:78:8b:31:41:2b:29:14:03:b2:fc:f6:77:80:9b:d5:
34:f1:e3:ea:ea:d1:55:3c:51:27:94:fd:ac:40:62:8c:eb:b7:
47:83:d4:d6:3d:5e:cd:24:d8:7e:6b:f0:5d:e5:b1:44:ca:ea:
8c:60:6f:ff:b3:f7:04:f5:aa:b3:05:c0:51:e1:29:12:c4:86:
22:68:32:87:eb:1c:a6:6f:5f:13:92:33:0c:5a:10:28:4f:4e:
e0:74:48:91:e5:54:62:95:25:0b:71:8b:f9:6d:91:d3:33:9a:
c3:42:de:a6:c1:87:8b:2f:72:08:ae:b1:51:cd:d3:fa:97:e9:
12:5b:d9:76:a7:50:d5:fc:06:79:a8:39:41:03:0c:df:f7:9e:
50:3b:ab:e1:54:42:06:32:f1:95:f4:a1:7d:dc:43:7a:81:19:
c9:9d:e2:c3:57:15:45:a7:e2:39:d5:f2:13:49:58:6d:d5:98:
a4:89:b8:8a:c6:4c:d7:d2:ab:1b:f8:00:60:47:b1:97:93:c7:
f1:a3:0e:f7:3e:5e:5f:b1:de:b3:7d:97:07:13:8d:b6:b7:44:
f3:46:53:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:49:31 2025 by rpki-client