Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json)
Hash identifier: 15rpG20mt6n3R03vTdpDLI+K5kdw4lEXyLRrWpGGNuU=
Subject key identifier: 2F:42:4C:82:B0:FF:B1:22:B4:BC:F1:B8:D4:6D:DF:8C:A5:19:59:9A
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial: 01967831A1143689F1817200A8E1593335B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
Manifest number: 127C
Signing time: Sun 27 Apr 2025 17:00:40 +0000
Manifest this update: Sun 27 Apr 2025 17:00:40 +0000
Manifest next update: Mon 28 Apr 2025 17:00:40 +0000
Files and hashes: 1: 6mwpgZ5jMyOU3uGB0qn2Rbl29vU.roa (hash: zgnUk23gS2UF4J68R+bIiwgYj0q0EdWy/Z/fr9n8soc=)
2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: c/suzrSPX3tSR377qkdqLTPm5yRDYHgS1hQSiximc20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:a1:14:36:89:f1:81:72:00:a8:e1:59:33:35:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Validity
Not Before: Apr 27 17:00:40 2025 GMT
Not After : Apr 28 17:00:40 2025 GMT
Subject: CN=2f424c82b0ffb122b4bcf1b8d46ddf8ca519599a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:bb:cf:a5:05:0c:62:6f:08:b3:42:35:37:
b3:33:90:09:28:02:ea:bd:a8:4c:3f:7a:a8:68:e1:
a4:e5:22:b2:71:c5:11:f5:86:58:8f:bb:7b:fe:e5:
b5:12:d4:3e:02:b9:e4:a4:03:70:2b:5d:60:f6:64:
c0:40:c6:84:ea:dd:18:81:bd:9c:9b:5b:b6:23:9c:
ea:a2:cf:2b:17:2d:02:cc:00:f8:8c:d9:b2:ce:f6:
ad:a1:88:9f:6c:9a:32:43:c3:f5:4a:a0:31:e8:a1:
4c:27:c4:70:9d:45:d7:76:f0:93:2a:76:ff:fc:5f:
ce:8b:df:69:88:62:e4:d9:c1:9f:54:f3:e0:f6:b4:
6a:1d:4c:51:b8:19:df:35:96:96:06:58:9b:a7:6f:
ee:22:26:4f:84:c9:04:b4:c0:df:50:a4:d6:35:03:
be:c8:48:ac:5b:95:a1:23:1b:97:5c:e2:82:06:76:
cd:4c:a4:f8:5b:ba:6f:9f:17:67:6b:78:25:fb:ab:
bf:27:be:ec:9e:b2:96:3a:c0:85:24:73:f5:2f:90:
dd:0a:9f:6e:a8:2f:54:23:63:4a:fd:a3:3d:c1:17:
be:fd:ca:87:ba:54:36:ad:b5:10:dc:32:57:3d:3b:
8b:1e:38:d9:8a:f8:1e:d2:29:53:f4:ab:88:2e:fe:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:42:4C:82:B0:FF:B1:22:B4:BC:F1:B8:D4:6D:DF:8C:A5:19:59:9A
X509v3 Authority Key Identifier:
keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:40:7c:fc:ea:ad:df:34:dc:e6:17:67:77:9e:76:4c:a0:92:
84:49:21:f1:2c:2e:06:08:8c:0e:d3:78:64:ac:7d:c0:54:31:
0f:31:22:72:f3:21:66:83:0f:a6:89:e0:2e:70:50:6b:1f:76:
f0:79:88:0a:55:b1:ef:9a:7e:1b:30:62:74:10:14:76:fe:47:
10:30:ff:25:fc:fc:8c:92:10:c9:e3:b3:a5:99:30:b6:10:e9:
cd:02:eb:b0:8c:e3:c5:1f:52:fa:1c:f4:20:99:bf:2f:b4:c9:
a4:4d:bf:bf:7e:96:b1:2c:98:dc:48:61:b4:fa:fa:2e:63:3c:
7c:85:bc:d5:c1:09:16:ce:bd:ca:af:a0:b9:a7:a3:98:b6:a4:
02:16:c2:ac:08:1d:8d:99:2c:e6:d2:96:6e:72:fe:cc:f5:66:
18:45:56:81:cd:a7:42:52:f8:90:ee:a4:6f:25:fe:ae:17:ff:
2e:52:00:2f:9e:5a:fb:6e:db:2e:de:22:22:b5:59:09:b5:b1:
fc:e1:23:19:41:94:17:27:a9:96:68:4b:53:60:3a:fa:74:8c:
eb:d1:ac:6b:2e:62:ab:05:db:69:e7:10:f7:4f:fd:ad:3d:38:
0d:cd:b1:7d:0c:ff:ed:91:29:2b:22:f9:66:1a:78:7c:c5:0c:
4a:71:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:45:06 2025 by rpki-client