Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: uaorU/PyZk1+5bAWrK2c2dxNeC5xIvvgG8R+CliOI4w=
Subject key identifier: 4E:5B:A5:AA:C4:3D:B2:61:58:CB:87:4A:44:9F:1E:01:B1:DE:B3:3B
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 01968E82A7413760444573C29D121F1CE6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 0406
Signing time: Fri 02 May 2025 01:00:49 +0000
Manifest this update: Fri 02 May 2025 01:00:49 +0000
Manifest next update: Sat 03 May 2025 01:00:49 +0000
Files and hashes: 1: 6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa (hash: cToJ6urjtRkBvRK35UPrzOd0uWCJVgb7/Yiw0ySoKxo=)
2: fHXFtYnbSLZ1gn7isNOv-X6g-Vc.roa (hash: oCDSfP23EAfcpuHp3yCgmbR/p7P3oSuSoD6KDdGkf7Q=)
3: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: 1vhGhIYr8rpd3FYomFy+Tq2kvzwAl7yfTaTDVUEvjFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:a7:41:37:60:44:45:73:c2:9d:12:1f:1c:e6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: May 2 01:00:49 2025 GMT
Not After : May 3 01:00:49 2025 GMT
Subject: CN=4e5ba5aac43db26158cb874a449f1e01b1deb33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:65:27:9a:72:b1:df:43:96:41:1f:48:37:
5f:6b:74:54:c0:8b:d9:d3:aa:29:b2:b7:d2:66:e2:
14:1b:fe:b8:de:ee:3e:01:a3:4a:f8:31:eb:19:dc:
59:84:a2:dd:83:6b:88:75:bc:f4:d6:27:49:33:63:
4f:25:2f:3a:67:0e:e4:59:ef:8a:41:12:9e:79:ba:
91:2c:39:88:fe:7f:c9:57:ca:c9:69:25:81:98:cc:
86:fb:69:56:1c:ef:95:bb:4b:26:a0:66:cc:3b:95:
90:9c:24:14:fc:94:d2:b0:3d:8e:c8:22:ae:35:66:
3f:f6:41:d4:9e:49:e7:51:7f:59:38:22:45:8a:0d:
38:b0:74:e5:1e:12:b6:ab:08:f4:10:82:32:4e:1a:
e1:0e:98:50:78:3e:37:02:55:5c:80:67:5c:66:c1:
34:3f:7f:ce:94:89:d3:86:4e:7d:e6:78:6a:2e:6a:
64:e6:2b:24:9c:ef:1e:e7:cb:b4:8d:3d:06:c5:c2:
a4:bd:c9:0c:ea:96:02:76:8f:b2:ba:55:80:cc:5f:
f6:dd:67:97:85:f4:30:87:02:3f:c4:98:c9:4b:00:
43:45:42:aa:90:eb:15:c8:96:43:6f:98:ed:b1:4e:
e1:ae:55:f3:fb:4f:af:75:9b:87:3f:5f:82:2d:ce:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5B:A5:AA:C4:3D:B2:61:58:CB:87:4A:44:9F:1E:01:B1:DE:B3:3B
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5b:4a:c4:dd:b7:b0:b0:77:c1:99:c8:53:f6:27:46:8a:90:
3b:bc:04:05:dd:ca:ea:78:ba:a5:7f:54:5e:12:35:e7:62:2e:
54:f3:78:44:01:3c:7d:75:f3:8f:1f:3d:d9:f9:63:98:8a:bf:
d6:e8:4b:48:c5:bd:e7:ac:04:c3:3b:f1:b6:fd:3c:5b:a0:c4:
dc:85:29:fe:64:fb:b9:0f:94:20:d5:b8:95:50:2f:55:05:04:
d4:c4:5b:ca:c9:7a:d5:17:a4:f6:a0:80:2b:9e:4b:3d:6f:76:
9c:2f:89:b0:7c:88:3c:56:71:f1:57:41:8b:57:83:55:21:fd:
34:2a:5a:25:52:e2:76:b3:87:e7:18:87:39:23:60:86:7b:fb:
cb:1c:57:ac:5d:80:b4:48:a4:63:9b:87:1b:fe:e7:7e:aa:87:
d6:36:6c:79:bb:0d:26:03:b4:96:d9:5c:0b:1e:15:77:78:fa:
85:ef:8d:2b:f7:85:f8:d1:6a:f8:8e:15:7c:74:ca:56:49:a1:
58:5a:66:7c:67:41:19:25:25:3c:e7:22:45:0d:a1:17:24:2b:
53:ad:3b:88:a7:fb:e5:09:f1:06:a1:89:48:25:46:89:67:4d:
c8:94:96:64:10:21:42:5d:59:ba:50:ea:f7:20:df:1d:73:76:
bc:a3:13:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:04:09 2025 by rpki-client