Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
File: nY85NIPUicQp_Biwk0LXbQr-QkQ.mft (raw, json)
Hash identifier: E7096XBZqd5DJUMT6HUk9goxY4nFgv5r/kpE6SqMq1k=
Subject key identifier: 8C:E7:DE:B6:E4:65:60:B9:FE:1D:6D:74:B7:E4:99:98:08:A9:59:DB
Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
Certificate issuer: /CN=9d8f393483d489c429fc18b09342d76d0afe4244
Certificate serial: 019686C923A7922CDB37539640907719DF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
Manifest number: 1101
Signing time: Wed 30 Apr 2025 13:00:50 +0000
Manifest this update: Wed 30 Apr 2025 13:00:50 +0000
Manifest next update: Thu 01 May 2025 13:00:50 +0000
Files and hashes: 1: fCKBgjNaPgCYlEAaSC02t2TX-HQ.roa (hash: z50OwHqPJLgmTj1OD+z+QDtPxp5JJkD8lN3khIG3bwQ=)
2: nY85NIPUicQp_Biwk0LXbQr-QkQ.crl (hash: e3cv2io87fWTe7IN1mmhh584Y4z939s4ITmugzrOquQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c9:23:a7:92:2c:db:37:53:96:40:90:77:19:df:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244
Validity
Not Before: Apr 30 13:00:50 2025 GMT
Not After : May 1 13:00:50 2025 GMT
Subject: CN=8ce7deb6e46560b9fe1d6d74b7e4999808a959db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0d:d6:cb:5a:64:a8:26:7e:eb:d2:2b:37:ce:
f9:a2:41:12:e2:88:e4:0e:3b:1c:7a:7b:98:6f:09:
5c:8c:24:5b:86:91:99:11:9d:ca:80:de:88:f6:6d:
f5:71:d3:c7:67:1f:99:52:f0:a9:e9:53:f1:b6:8c:
58:44:3a:9c:f4:c8:40:d2:a1:10:f4:7f:42:04:a7:
f4:ad:ce:6d:70:a0:eb:89:eb:02:06:42:0e:bd:02:
2c:f3:69:7a:ba:c7:9b:7d:e0:e9:c2:27:3e:9e:c2:
e5:98:22:7a:e2:53:07:4b:c5:08:a8:4e:1a:e2:a0:
30:b6:1d:08:98:6f:e8:5f:c2:9d:fb:fb:c5:de:98:
b4:22:e2:db:11:64:0d:9c:c4:b9:07:7c:7c:58:bd:
0c:e8:de:73:64:0b:83:3a:a3:83:25:1d:88:99:df:
2c:17:4d:49:a0:d7:28:9f:f3:a1:1b:f7:7e:34:1b:
04:dc:57:ac:4f:71:45:f1:00:83:4c:27:b4:79:eb:
78:2a:82:52:70:97:95:da:af:e3:62:69:1b:24:c6:
dd:71:19:1e:61:c8:53:8c:e0:a6:24:13:c0:7b:75:
ba:4d:9d:5d:83:79:96:3d:52:ee:2a:9b:ed:d6:a9:
fd:f2:e3:3b:58:82:b9:b0:06:1c:cb:51:dc:c3:56:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E7:DE:B6:E4:65:60:B9:FE:1D:6D:74:B7:E4:99:98:08:A9:59:DB
X509v3 Authority Key Identifier:
keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:dc:7c:ae:0c:d5:b1:a9:7b:29:7a:5f:68:22:0b:ab:aa:6c:
e6:ba:c6:17:c7:be:13:22:51:db:30:2f:90:13:35:a5:dc:7b:
93:68:70:fd:b6:a3:65:c1:36:31:9f:4b:f2:f7:86:38:4e:ea:
15:ac:54:e5:ec:fa:39:97:b5:16:e9:cb:63:d1:b2:2a:91:b4:
36:6d:d5:9f:63:2e:36:59:ed:d1:72:15:b1:78:6a:6d:bc:0c:
7a:37:53:35:1e:06:c0:13:c2:f7:6c:ab:ca:e3:43:1d:fb:0b:
bf:b6:f8:23:a7:76:89:06:da:5c:b0:8c:8e:cc:00:c2:ba:aa:
31:1e:80:78:8c:73:ac:b3:49:cd:87:5f:c0:6d:ff:77:45:1e:
bb:51:c9:5e:d0:f9:ee:14:6c:4e:35:05:84:54:0e:89:a6:68:
09:2f:ad:01:31:8c:d1:b1:88:88:59:4a:28:b6:b9:fa:a8:26:
4a:6b:5b:e8:36:d4:7d:14:01:ef:57:52:ed:77:7d:0d:ce:a9:
2a:2d:59:a5:2a:31:54:0a:2f:65:8c:c5:88:ee:4d:a0:7e:ce:
28:1d:0c:66:88:25:57:22:03:16:68:f2:dd:8a:22:ab:eb:00:
3c:78:47:4f:da:a6:59:21:53:ea:f6:ee:7e:ca:c7:0e:d1:f3:
3d:9c:90:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:42:56 2025 by rpki-client