Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: 3BuaLwKVvkKDMB0eaahq2kW2PN66o0uJzYBHjEG4uqI=
Subject key identifier: F6:AF:88:85:3E:AC:A8:A3:6D:39:E6:38:31:A3:34:90:F0:23:70:00
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 01967F7CE8BE6B440D314AE14434F05D9E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 1254
Signing time: Tue 29 Apr 2025 03:00:14 +0000
Manifest this update: Tue 29 Apr 2025 03:00:14 +0000
Manifest next update: Wed 30 Apr 2025 03:00:14 +0000
Files and hashes: 1: X5jYbn-h_3ZrymXeQcutqUSQLI0.roa (hash: m8dLiyB+f2bY0CN3q6gxqkEWD+kF5d7UEcU/fd6EB40=)
2: nO41lzHTLA0qnXGNSido0EKnbG8.roa (hash: p9hF7X8F0vCkUimBjAw1aM4Oym1MBxjaah21sqRzrUE=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: EDIgN6tWNRBcULeaddsOqcANEdt2RKcHReiCPlsFd7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7c:e8:be:6b:44:0d:31:4a:e1:44:34:f0:5d:9e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Apr 29 03:00:14 2025 GMT
Not After : Apr 30 03:00:14 2025 GMT
Subject: CN=f6af88853eaca8a36d39e63831a33490f0237000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fd:53:6f:d0:12:a3:a9:0d:36:6e:a5:47:03:
05:b9:21:b5:f6:a1:b5:2e:70:9f:25:c4:70:fd:e0:
36:bd:ad:c3:e5:ab:dd:56:03:84:9c:0b:ae:74:aa:
56:3e:4a:dc:4b:bf:17:ed:27:fd:e3:ef:ba:29:51:
3a:1e:6f:30:0b:ae:7c:5c:ad:cd:4f:dc:68:69:74:
69:a6:ea:dd:d1:0f:c0:c3:75:c0:72:b0:86:82:b0:
d5:4a:21:e6:00:c0:7e:0e:57:fb:34:d4:b9:29:28:
ec:b5:ce:73:45:a5:ad:40:45:60:b1:e0:82:fa:12:
69:9b:ea:3c:1f:a2:6f:61:49:00:e5:51:e5:3f:11:
67:06:d7:6b:b6:76:75:df:6b:4d:06:0c:9c:ee:ae:
41:64:ea:f0:4b:f9:58:0c:63:61:28:88:c9:29:b5:
db:76:bf:51:ba:e2:e6:d7:ad:7b:52:2b:e5:8f:81:
17:17:36:79:15:d1:0d:12:29:aa:43:58:66:53:40:
ad:b8:0e:00:1d:fb:80:23:45:1d:74:3c:6a:62:2c:
99:b4:87:b8:94:b1:e0:09:69:65:07:b2:4c:75:42:
5b:a4:f4:45:6b:f3:2d:6e:4f:c8:b5:63:fc:85:d8:
63:88:84:a4:43:cd:62:10:78:b1:9c:47:d6:5e:da:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AF:88:85:3E:AC:A8:A3:6D:39:E6:38:31:A3:34:90:F0:23:70:00
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:29:93:8b:08:0f:f0:7a:db:34:0b:6a:95:54:80:ed:c6:31:
89:85:cb:17:57:4e:2c:77:fe:0d:e4:13:63:86:ec:81:34:4b:
39:ec:9b:fc:d9:58:dc:52:6e:28:1b:44:66:2e:d0:ef:70:9f:
b1:31:82:96:d1:a4:f4:bd:1a:bb:9a:d5:cb:2a:8d:f7:37:9e:
2c:5e:4c:b0:9d:78:4b:da:ad:23:16:e6:83:28:17:d7:5a:c6:
ef:f1:3c:60:fe:cc:cf:4a:13:e7:32:8e:c7:a5:76:7c:8d:87:
f7:99:7b:1e:a0:9f:a9:fb:41:34:4d:62:bc:6f:c0:c1:f7:14:
0e:d1:69:7b:db:18:07:d5:ff:29:6e:56:03:76:3d:3d:4c:96:
c4:ea:4c:bc:19:25:9d:d9:26:c3:e8:80:d2:d5:9f:bb:a8:59:
46:e7:78:c7:34:fa:9d:2c:17:82:f4:fe:a0:fe:f9:25:bc:73:
af:3d:50:ce:e4:16:99:9a:f4:ac:91:e6:a1:45:23:ba:f8:9f:
11:46:89:f2:02:60:8b:9d:0b:1d:76:00:96:dd:3a:fb:2f:26:
33:f5:78:a4:27:c2:1e:e1:16:33:8d:63:a3:b0:67:22:c1:8d:
b5:75:41:c6:21:1a:46:06:f5:85:e9:08:1c:94:e6:bd:f0:92:
84:73:85:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:10 2025 by rpki-client