Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: esjYplBmJv/khMXyJSDqnutfxNBIv7Ms2KIZgVglOH0=
Subject key identifier: 1F:64:F9:A1:C4:AB:EE:FD:00:BE:DD:7B:B5:63:7F:68:65:19:E5:73
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 0196759E98CA84A19953E0ABFDBFD18AE260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 0BE4
Signing time: Sun 27 Apr 2025 05:00:50 +0000
Manifest this update: Sun 27 Apr 2025 05:00:50 +0000
Manifest next update: Mon 28 Apr 2025 05:00:50 +0000
Files and hashes: 1: Puy-0P_jBepIb5u3SpvEh4v47j8.roa (hash: ZN41z34tLWoaRsScijTCdX/mIzcEneubj96rKehXEgw=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: f04+YV3jR7apcHx8qxuT5WS2qC7qLubv5RxyHNrFxp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:98:ca:84:a1:99:53:e0:ab:fd:bf:d1:8a:e2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Apr 27 05:00:50 2025 GMT
Not After : Apr 28 05:00:50 2025 GMT
Subject: CN=1f64f9a1c4abeefd00bedd7bb5637f686519e573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:7a:6e:b2:56:fc:69:1e:45:c6:21:3a:3c:
3b:5b:e4:3b:e9:1b:78:37:62:c1:68:ac:fc:df:c8:
c3:90:c7:18:41:0f:04:6e:4c:15:77:16:9b:c7:69:
2f:b6:23:2d:88:a5:e1:4d:dd:71:21:e5:69:71:6c:
41:7b:d4:7a:21:68:f5:4a:61:27:95:0d:1b:6f:68:
21:2e:b2:fa:db:7b:26:04:b8:78:01:ee:0c:98:78:
ab:c2:c9:ba:12:00:84:42:a3:50:01:ef:11:56:24:
8b:40:00:ed:7a:a0:5a:b5:7c:dd:e0:cd:2f:fc:3f:
24:eb:e2:4a:e3:e3:16:44:39:b5:6a:f1:04:94:4b:
99:0e:5a:6a:bc:f5:3c:52:df:b3:8d:bc:ef:72:45:
f9:fc:74:79:6c:7d:29:13:d7:cb:d3:bd:fb:6d:d0:
8c:00:80:e8:55:db:3e:79:9c:47:cb:96:03:6d:8b:
a4:4a:04:98:af:be:db:ae:04:a0:ec:f1:55:c7:c7:
8f:94:f0:76:4f:25:cb:f3:ae:2d:65:e2:73:84:a7:
1b:a1:63:8a:af:47:3d:89:06:c2:52:72:e5:ae:fd:
9b:33:a9:47:4e:e1:6d:3f:cb:f1:71:55:02:3a:e5:
01:f1:02:31:bb:db:73:35:30:c3:5c:7d:19:b5:ad:
05:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:64:F9:A1:C4:AB:EE:FD:00:BE:DD:7B:B5:63:7F:68:65:19:E5:73
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:65:fb:8a:f7:4f:90:f7:0e:b5:c4:dc:60:c5:a5:86:f7:0d:
4c:53:50:ff:d8:bd:00:64:8a:6b:8d:d5:3f:ec:7c:ce:f2:99:
dc:b1:a9:7d:ea:87:bc:b8:90:ff:b4:a2:19:ea:d1:5e:49:5d:
f2:2e:26:33:41:96:0c:61:53:09:af:e3:0c:00:fa:8b:47:b0:
c9:fd:ef:39:63:68:f1:6a:ff:df:27:ea:ee:8f:d1:b2:4e:be:
3a:89:7a:03:5b:2e:cc:d1:b1:8e:bf:04:39:b2:11:6f:8c:dc:
ce:bd:2e:f8:a7:ec:8c:e1:56:87:3a:14:3a:61:5b:78:0f:0b:
bb:48:01:12:56:73:b3:7e:5c:07:19:5f:e7:36:bd:f1:59:e9:
1c:60:58:c9:cd:a1:fe:6d:a1:d8:c5:61:b5:ca:83:f2:de:ab:
e7:9c:18:9f:64:43:31:c1:56:a3:ce:6e:70:24:65:5d:89:b7:
20:c6:0e:e4:40:0d:20:4e:de:19:c3:77:9f:e3:ae:bf:00:ee:
37:9b:ef:fd:d7:6f:3d:64:84:65:d7:fb:80:77:66:9a:d8:3d:
ca:53:39:f3:21:d0:98:aa:51:f0:2d:95:bf:38:e5:7f:df:15:
20:ad:12:d5:f2:21:48:ce:23:f5:62:fc:83:bd:68:77:f9:03:
fc:64:f8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:40:53 2025 by rpki-client