Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
File: Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft (raw, json)
Hash identifier: ZesToxd2kpcullqaOHLoyMrRpBnRjG0BPLI/bVeZDUk=
Subject key identifier: A1:60:EC:BB:0A:94:52:DC:B2:DE:D0:DC:0A:08:90:BC:D2:74:F4:49
Authority key identifier: 36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
Certificate issuer: /CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Certificate serial: 01968FCBB676672A468450451B229F6969C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
Manifest number: 04C5
Signing time: Fri 02 May 2025 07:00:14 +0000
Manifest this update: Fri 02 May 2025 07:00:14 +0000
Manifest next update: Sat 03 May 2025 07:00:14 +0000
Files and hashes: 1: GPRnxVZYbgXJj70_iEKvlXgPN24.roa (hash: 4zWTgka5oRO1IFS4EYqUZybX548raJeNOyBzsRKEzd0=)
2: Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl (hash: 2CXDVdLEJjg7u4l2TnTu2G0zGNQ3P5eh0RQMNUp8d9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cb:b6:76:67:2a:46:84:50:45:1b:22:9f:69:69:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Validity
Not Before: May 2 07:00:14 2025 GMT
Not After : May 3 07:00:14 2025 GMT
Subject: CN=a160ecbb0a9452dcb2ded0dc0a0890bcd274f449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:b5:01:f1:2f:b1:d8:39:0f:cf:99:2e:e6:
c8:d7:84:2c:3f:63:cb:42:ed:12:a8:c6:00:65:63:
9e:23:ca:a8:1b:75:d4:56:79:cf:e9:0e:81:23:83:
2a:92:cd:25:23:33:4e:77:b1:39:bc:49:5b:e6:83:
b8:79:de:4e:75:d9:aa:cc:c7:b0:53:29:e9:41:40:
9b:df:2c:b7:4c:d5:f9:7b:6c:f8:1d:61:f0:98:ae:
0e:72:67:20:a7:79:51:e6:e8:39:40:c6:4e:41:70:
89:c7:bd:d4:62:33:0d:f4:4f:c6:ae:6d:23:63:2a:
b4:c7:a3:d8:f0:b0:fd:90:2b:c9:f5:98:6b:8f:35:
3d:1f:86:a9:04:bc:6d:72:9e:b5:bf:15:89:06:23:
be:1c:ec:de:62:e5:bd:89:04:e3:83:8f:69:cf:d3:
cc:c9:7d:bf:8c:4a:f3:09:7a:ef:63:47:84:ac:8c:
2b:ee:d2:16:d6:47:b8:6b:66:79:e6:71:ef:09:b2:
ee:ba:92:2d:0d:8c:29:f4:87:c5:3b:fd:b1:de:84:
74:0e:b6:8e:11:37:4d:43:bb:3b:b0:6d:ec:43:da:
d1:57:39:4b:ec:8d:44:b7:6e:9a:9c:ca:b3:5f:b2:
51:4a:c0:f0:41:09:67:b5:8f:0e:0e:ac:3e:4c:da:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:60:EC:BB:0A:94:52:DC:B2:DE:D0:DC:0A:08:90:BC:D2:74:F4:49
X509v3 Authority Key Identifier:
keyid:36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8e:f8:c5:c4:21:95:6f:9f:74:bf:84:79:3f:77:6c:d3:26:
4a:2e:dc:68:27:e6:7f:ff:a5:cb:df:c2:79:2a:f9:a4:87:92:
2a:56:bd:bd:25:71:88:26:b1:f1:3a:7f:31:eb:4c:4f:be:d1:
26:33:98:61:74:d6:cb:0e:cc:56:78:6d:44:15:66:b4:e4:e0:
b0:66:58:69:c2:08:51:f7:f0:ec:75:e6:ad:05:42:60:fa:7e:
72:8e:87:d7:89:52:ab:92:a9:08:d3:91:1d:8a:3b:60:e5:12:
7b:09:63:aa:5c:4f:3a:fd:55:cd:db:6b:d3:7e:12:47:e3:57:
a7:39:35:86:17:1a:f6:c2:93:3b:d9:84:03:5d:0c:26:d1:4d:
af:1d:dc:4b:d0:76:62:a2:ee:e0:9a:66:47:2d:49:5b:ac:69:
7c:0e:e0:c2:e2:fc:a2:07:fb:46:13:40:45:13:01:a2:fc:60:
e7:de:c4:49:b3:09:5b:30:83:a9:5c:ff:82:32:4c:dd:43:da:
37:b3:63:5c:1a:fe:3a:dc:c1:f0:80:b1:bd:75:86:08:5b:d9:
f8:c6:b6:31:5f:26:e3:bd:17:32:5d:94:d5:a4:cb:a6:b5:18:
66:e8:3c:1b:ae:ae:6c:de:c1:c7:54:c4:ef:a5:db:cb:57:40:
6c:82:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:42:26 2025 by rpki-client