Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
File: n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft (raw, json)
Hash identifier: DquInIue3Z8uqRf/WK/p024UuvIcLEZn0awvlQu0cmg=
Subject key identifier: 37:79:18:55:BA:56:CC:FD:17:A6:74:21:56:E7:3F:E8:AF:7E:21:E6
Authority key identifier: 9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
Certificate issuer: /CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Certificate serial: 019680C70AFB50FE68FB4379A29D1D5C17F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 09:00:50 +0000
Manifest this update: Tue 29 Apr 2025 09:00:50 +0000
Manifest next update: Wed 30 Apr 2025 09:00:50 +0000
Files and hashes: 1: 1J8y1mQKbllZPdpNvAX7bscmWlI.roa (hash: jhx/+OmQQVqiCuyQX4gR49r4SoPl20ExxxakSlp8D6M=)
2: WBEZkdOtzqubY4jYGPTdt89fcs0.roa (hash: YzzD8M9BLKgLshmZ4kyXFcT1vvqCniPNKBqVVUae9sY=)
3: n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl (hash: J968/xMNgdm9/gh563ZMIEiFAc3AgDS1cfJm2XDALhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c7:0a:fb:50:fe:68:fb:43:79:a2:9d:1d:5c:17:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Validity
Not Before: Apr 29 09:00:50 2025 GMT
Not After : Apr 30 09:00:50 2025 GMT
Subject: CN=37791855ba56ccfd17a6742156e73fe8af7e21e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:b2:34:42:17:22:03:1e:ab:8a:9c:92:cb:
a2:d3:5a:c3:3d:69:4e:d9:3f:b9:45:59:d5:64:3a:
12:67:ea:6b:dc:2b:43:69:45:65:ae:2a:50:a4:b1:
cd:0b:34:99:6b:bf:35:b1:d4:b0:13:af:d5:82:07:
f6:a8:83:6a:28:89:8a:15:01:ea:fd:b8:19:32:2c:
c6:35:a5:76:14:21:2f:88:f6:6f:2f:68:fe:6c:a6:
12:04:5b:f0:53:75:17:0e:7a:06:99:1a:f0:e4:30:
fb:26:58:03:69:43:bb:d9:d0:e3:0d:d8:c6:f4:d0:
3e:58:58:91:4f:82:e6:7c:df:d8:da:3c:e8:7e:b4:
f2:c7:78:b7:e2:74:f9:1e:9d:5d:b1:9c:08:a2:be:
f3:28:e4:f2:c2:29:6e:ca:11:4d:a0:4b:55:51:60:
e4:97:b7:aa:3c:47:4c:45:fb:6e:f0:4a:21:16:ac:
86:67:06:2e:ff:9e:90:fc:8f:ff:c3:59:ed:c6:fb:
67:53:60:ed:54:58:30:6a:6c:dc:8d:ee:3f:e3:1d:
6c:8a:d4:95:b5:53:63:85:64:0e:85:c2:a6:a6:1b:
8e:63:17:8f:c8:07:17:b9:4c:ae:0d:cf:ca:96:84:
80:d8:56:76:f7:a3:70:a8:1c:be:85:91:d0:81:f6:
ec:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:79:18:55:BA:56:CC:FD:17:A6:74:21:56:E7:3F:E8:AF:7E:21:E6
X509v3 Authority Key Identifier:
keyid:9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:11:48:4a:16:16:9e:b9:06:d3:53:ad:d6:c3:14:16:61:01:
6f:1e:3f:66:aa:7f:9d:b0:8a:e1:d8:56:33:6c:20:80:78:13:
0c:96:60:46:57:49:52:08:48:66:97:5f:17:19:8e:ae:44:1e:
c2:19:02:84:81:09:77:7f:c8:bd:9c:7a:3f:67:2d:86:79:32:
6c:65:a5:0c:e1:b9:f6:f7:19:99:de:ea:71:15:02:64:a6:4e:
d3:80:d8:19:07:17:75:e0:fa:cd:bc:a1:c7:70:69:4f:72:cc:
9a:19:19:b2:cc:d3:8b:d6:e8:3d:63:e8:14:f0:12:3d:b7:06:
3e:e9:5d:11:71:18:97:97:62:cf:46:8f:95:f7:9e:2f:da:1a:
2a:23:27:a0:05:11:15:ad:80:f1:56:2a:b4:21:e1:dd:d1:45:
f2:57:0c:b7:b8:90:34:39:ec:4d:91:1a:56:9d:a6:a3:9e:09:
e0:29:4f:f2:31:2a:d1:1d:9b:e4:1f:09:4f:51:da:aa:ff:41:
36:fb:99:d4:16:9d:15:d6:b0:a9:69:77:c6:5b:50:89:35:08:
d5:7c:80:20:b3:94:52:71:b7:32:af:48:9f:c4:dc:1a:05:18:
7a:e8:d8:4f:4d:49:65:67:31:0d:bf:bb:3e:66:31:a4:67:41:
2b:ee:90:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:26:28 2025 by rpki-client