Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: 5JfbwYz8T+ElES4GkH+XTSae4mzIZx1K940zAx5wAfM=
Subject key identifier: 2C:36:C4:1C:4C:D3:DC:EF:CE:F4:D3:C8:7C:21:D9:71:EF:39:A1:77
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 01968E826073659713CD2E178F7213D56A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 0CE6
Signing time: Fri 02 May 2025 01:00:31 +0000
Manifest this update: Fri 02 May 2025 01:00:31 +0000
Manifest next update: Sat 03 May 2025 01:00:31 +0000
Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=)
2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=)
3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: ON9+LUzjJrfN2iEBVwYCkdtNPreFxt/w0zrTnPk8w34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:60:73:65:97:13:cd:2e:17:8f:72:13:d5:6a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: May 2 01:00:31 2025 GMT
Not After : May 3 01:00:31 2025 GMT
Subject: CN=2c36c41c4cd3dcefcef4d3c87c21d971ef39a177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:f1:c5:74:72:1d:59:da:0f:2f:a1:d5:a2:
b3:de:14:b1:5c:b6:76:c0:fc:a0:e3:a7:63:45:0f:
1a:19:a3:d2:e5:cb:14:20:1f:74:da:0c:05:82:45:
e8:be:f9:b7:76:28:a7:74:a3:01:1a:ea:0e:d2:02:
19:74:d6:72:03:3b:ce:23:58:94:26:ec:c5:eb:22:
29:7d:68:6b:80:da:f4:33:9c:d5:ce:11:f3:4a:a6:
f2:99:61:70:d5:c0:04:2a:17:a4:45:e5:e9:17:5c:
a6:ac:01:29:34:bb:8b:09:61:9d:b3:94:06:7f:71:
53:21:ff:b9:6f:e1:ac:fc:42:4c:25:c2:ba:12:54:
56:a8:d2:42:e7:76:e0:96:07:b1:08:ed:23:4b:21:
1c:9c:bf:d2:72:0a:77:29:ff:b8:42:cc:28:af:6c:
a4:53:31:d2:e3:80:12:c2:fc:aa:47:c5:54:79:9f:
eb:3b:76:62:fb:61:53:b8:15:bc:49:75:8a:7a:52:
26:05:52:88:31:9f:fe:fd:8e:b5:30:ae:2d:ac:ff:
25:fe:76:58:9b:7b:35:18:53:5c:9c:f2:5e:fc:f7:
48:99:ce:03:15:38:b9:a9:e3:46:94:96:a7:f2:7f:
72:da:e2:c1:9d:f4:a2:75:f8:87:6b:69:98:98:27:
09:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:36:C4:1C:4C:D3:DC:EF:CE:F4:D3:C8:7C:21:D9:71:EF:39:A1:77
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:96:e1:f5:ef:94:79:06:c3:17:b7:5c:5e:29:90:d4:e7:d6:
68:ec:36:12:05:5e:8f:b0:bf:04:79:f0:86:b0:6a:c2:d2:be:
a1:58:21:6b:07:25:f0:05:ee:2f:8f:e6:24:cb:0b:42:c1:d3:
da:91:a5:5d:7d:e1:a5:74:c3:2e:9f:9f:8f:70:4a:60:3b:15:
ae:05:9b:d7:42:c6:cb:c9:a9:be:31:c7:c5:9c:fb:d9:df:a9:
86:28:ee:7e:55:ba:a2:8b:2c:d2:fe:6e:61:dd:34:b3:4f:5d:
66:65:77:eb:ba:bf:e4:d2:8e:e7:1e:af:65:37:1d:2e:97:a0:
17:fe:a4:9f:3c:89:ce:a2:56:12:f2:91:07:b5:e1:8d:15:1c:
fe:73:ce:45:1b:8a:b5:18:9d:25:30:00:37:ab:d0:c5:4d:b9:
f7:68:52:05:27:2d:ae:e5:b4:aa:aa:b0:93:8d:26:df:7a:f4:
fb:db:d7:ff:cb:6c:55:71:84:43:46:fc:21:65:3b:46:ae:35:
07:7b:1d:61:dd:9f:94:2b:a3:d6:2b:84:62:ce:66:6d:a2:59:
02:ea:e9:ef:37:8c:98:63:3b:c7:48:01:4b:95:58:0a:8f:79:
07:04:a9:dc:44:6f:98:fa:00:ad:29:65:da:c0:c8:ea:ce:91:
82:0f:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:24:52 2025 by rpki-client