Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier: U1V5BLXvBQAuh1bUjfdz+3jb04kWHY+hw21tLbAPMQg=
Subject key identifier: D1:97:52:B1:B7:79:24:A6:43:03:D5:E5:EA:B2:E9:C5:25:F2:93:71
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial: 0196586F67F02A2A75459FE73C675C6667B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number: 098E
Signing time: Mon 21 Apr 2025 13:00:18 +0000
Manifest this update: Mon 21 Apr 2025 13:00:18 +0000
Manifest next update: Tue 22 Apr 2025 13:00:18 +0000
Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: AcUhcDct1sC4cN5yJsVJ5hMoD9MitwKDOyHkMu+ZdJo=)
2: SN4WN6j4-rBWWV-Y2IngI0okDFk.roa (hash: /CIKiQgS+ZyX8NEUirY7oJW+SA7En87kVbxutLDyvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:67:f0:2a:2a:75:45:9f:e7:3c:67:5c:66:67:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
Validity
Not Before: Apr 21 13:00:18 2025 GMT
Not After : Apr 22 13:00:18 2025 GMT
Subject: CN=d19752b1b77924a64303d5e5eab2e9c525f29371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:8f:d1:60:49:d0:19:77:f6:f1:ea:86:f2:
5e:21:2d:71:32:8a:5c:9b:85:91:dc:ca:c2:0f:3c:
e3:0e:1b:5b:cd:8d:37:3d:84:d4:a9:8a:64:18:6e:
f5:e9:cd:da:a4:ba:51:68:4f:64:1b:4b:de:a8:03:
50:97:13:d3:99:08:fa:56:84:17:9f:ed:90:16:b5:
33:ca:1e:a7:46:af:1a:24:11:e6:59:a7:da:35:5b:
43:a1:ab:7f:f0:5a:97:d9:aa:c7:9c:f1:2f:9f:d7:
92:4c:c1:ac:d6:c7:f7:d0:9c:d2:98:7f:3e:eb:a1:
74:e1:5a:74:76:d2:9b:c7:07:15:5e:b2:4c:a2:bc:
08:74:4e:99:4e:1a:00:e0:20:04:0a:1d:7c:68:77:
51:e4:9a:f6:04:0b:70:3b:6d:f7:f8:21:26:86:80:
59:b2:b8:88:01:20:71:9f:3e:05:b3:97:8d:83:16:
f8:f7:ca:c2:93:6c:b6:4f:f3:27:28:61:08:7b:e0:
a4:83:46:d0:78:f5:92:ff:40:09:6f:5b:fa:3a:ab:
26:c6:3e:38:b9:20:14:ce:7a:6e:d0:56:1c:bf:44:
2d:1d:c6:e4:52:8a:73:77:ea:7f:69:61:59:f1:66:
16:a8:bb:d8:cb:12:54:9a:b2:81:87:5d:8d:c7:4e:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:97:52:B1:B7:79:24:A6:43:03:D5:E5:EA:B2:E9:C5:25:F2:93:71
X509v3 Authority Key Identifier:
keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e7:36:fa:8a:ab:5c:b6:f1:30:a9:7c:2a:26:51:47:48:92:
e0:33:62:6c:0b:a8:8f:c8:23:be:1c:95:62:f0:12:6a:f2:1c:
a4:0f:d4:5a:41:87:61:f2:0b:01:05:58:7d:c9:42:91:71:c1:
e7:e3:4e:50:e9:e3:99:5f:45:47:65:3a:f5:b7:a7:26:90:ea:
f5:b7:54:0c:16:42:8f:9c:dd:13:55:49:6b:1a:f6:19:0c:f8:
0c:88:81:80:d6:0f:59:1c:ff:80:91:9e:8f:a5:42:6b:00:74:
4a:ea:e6:20:c2:e9:e1:d7:56:10:0f:0a:5c:c1:23:ed:dd:7f:
0c:7f:2a:8b:57:7f:e2:d4:99:a3:e9:52:c1:4a:d2:52:d3:1c:
ac:c4:e1:10:d4:7c:43:bd:70:ea:83:1c:7c:e8:b0:f0:c4:80:
9d:87:86:f3:72:9b:d0:5f:41:57:cf:8c:b4:0e:d4:82:52:05:
05:64:c2:ff:be:2f:a2:59:a0:4c:aa:9b:36:ec:fa:c3:f5:8e:
3f:26:eb:1a:6b:b6:04:52:f0:f6:44:df:25:46:09:63:8a:52:
2e:51:c7:ac:23:4b:fc:02:1e:8e:19:49:60:a3:70:f1:c0:a1:
c6:b6:1f:85:64:d1:e1:85:d4:67:a8:ae:a0:ae:40:e1:07:22:
5a:d3:98:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:07 2025 by rpki-client