Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
File: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft (raw, json)
Hash identifier: j09hHC+lLcZGXiNxw/5XgDmgTQ7wHLpKsLK/wh8z4ng=
Subject key identifier: FB:1C:9B:F5:84:6C:77:33:EF:C3:22:CD:54:77:1E:81:B4:86:54:40
Authority key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
Certificate issuer: /CN=9d8ada352982a319b54d5e483d34426346733ea4
Certificate serial: 01968EB9286AE58FE1D55FDF3111D5713805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
Manifest number: 140C
Signing time: Fri 02 May 2025 02:00:21 +0000
Manifest this update: Fri 02 May 2025 02:00:21 +0000
Manifest next update: Sat 03 May 2025 02:00:21 +0000
Files and hashes: 1: KpbjIIUZw0-XxCl1KqQDZ_EUKkY.roa (hash: KJWoFU4L0w8L8ZUG5csCrTHWK3udD7xALiAnkocVeD0=)
2: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl (hash: RavuzL+sf+FN/v4dF8BaylPMGUY41CchSLkKLvpKAUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:b9:28:6a:e5:8f:e1:d5:5f:df:31:11:d5:71:38:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8ada352982a319b54d5e483d34426346733ea4
Validity
Not Before: May 2 02:00:21 2025 GMT
Not After : May 3 02:00:21 2025 GMT
Subject: CN=fb1c9bf5846c7733efc322cd54771e81b4865440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:17:de:36:1c:02:d5:21:5c:ec:56:d5:3b:
9e:87:40:c9:fd:20:59:56:0a:c4:e3:c5:f5:ea:fe:
2d:07:11:42:4b:62:1b:47:df:eb:e0:3b:6c:8c:9e:
b3:63:12:e2:05:58:68:5e:ce:8e:81:1d:1a:d1:1d:
d5:3d:ec:b2:81:ee:75:2d:ba:28:73:09:94:58:12:
71:56:97:d3:a1:08:31:55:ca:82:3b:2d:ff:10:b2:
7e:cc:cf:57:09:37:19:cf:c5:85:7b:85:9e:36:fe:
b9:eb:d3:6a:88:87:cc:39:c2:d2:5b:47:e6:a8:94:
f0:99:4d:af:78:34:d4:e8:55:c9:ad:bb:41:b6:ea:
56:58:2f:89:93:55:65:40:2a:0d:bd:32:f2:77:1e:
68:a5:28:b6:d8:1e:54:ee:6a:bb:0b:2c:31:3c:68:
61:bc:d4:4a:81:a4:b3:36:86:97:b3:2b:5a:9d:ea:
e8:32:c0:98:dc:2f:f8:fd:04:c1:50:35:d0:a6:a8:
af:ae:0e:38:b4:41:98:c0:5d:65:56:1b:29:64:19:
1c:ac:ee:75:bc:83:62:9b:20:69:2c:22:14:06:4f:
80:b3:68:85:cd:b2:d5:d0:d5:c5:41:36:d4:f8:76:
37:8e:c2:50:67:da:a7:5d:c5:42:33:ec:f2:be:48:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1C:9B:F5:84:6C:77:33:EF:C3:22:CD:54:77:1E:81:B4:86:54:40
X509v3 Authority Key Identifier:
keyid:9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bc:6d:e0:10:d4:6c:ea:2a:22:5b:2e:69:05:f0:7e:a8:6b:
a6:02:a2:ab:c1:be:8f:9c:b6:93:f1:0b:03:53:8c:37:83:4d:
b4:f0:fa:b6:7b:b2:78:31:45:2f:2f:81:b7:e5:96:d2:4a:f5:
13:0f:d8:78:f2:5f:a9:e4:e1:6f:d8:3f:2c:61:68:1f:12:fe:
ab:bb:74:fb:72:26:a2:af:ea:22:51:f2:3d:53:d9:c4:ac:03:
9c:79:38:d8:22:6c:81:72:a1:79:b5:19:e0:aa:0e:0b:fb:6c:
10:c5:00:76:e4:f8:87:c7:0d:a2:d3:b5:70:56:d1:bc:e9:76:
a2:22:a0:80:21:71:77:b4:f2:0c:97:c1:de:27:25:61:6c:b2:
3d:36:8b:22:1a:8e:8f:06:95:e9:4d:34:4f:87:61:2a:97:6c:
f2:ec:59:ff:10:50:26:32:73:e8:99:6f:0b:83:1c:77:7b:ff:
1c:0f:4e:26:b8:77:d2:6e:f8:7f:e4:d1:87:cc:a3:73:8a:3f:
96:73:2a:73:81:13:cb:9e:ad:92:53:0f:68:11:c8:b1:ca:c7:
58:bc:06:f8:9b:86:c7:51:c3:b2:c5:80:88:3a:17:ec:b6:04:
f9:b6:2e:5d:31:8b:51:d2:5a:9d:7f:17:c7:dc:be:d6:cf:5c:
95:01:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:37:56 2025 by rpki-client