Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier: QiRO3pxFQZPGZwBL2M0x5zkThJI6VhWFYVz5OTfFFHU=
Subject key identifier: 05:09:75:70:19:45:66:5E:48:46:67:B6:EA:97:8C:C5:6B:E3:77:9C
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 019653EE2BE4B9A0A8CDD8003AAB8E2989F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number: 0995
Signing time: Sun 20 Apr 2025 16:00:39 +0000
Manifest this update: Sun 20 Apr 2025 16:00:39 +0000
Manifest next update: Mon 21 Apr 2025 16:00:39 +0000
Files and hashes: 1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: RH30eVxq8sfde7QVtqjwO1wFoiVQM7oOII96GnSGLxs=)
2: zElW9nBSEefX0nViIsarFQPCkZs.roa (hash: CmIv1btIhlBvo+yXBuSYJkAIeImv5p3pKaVYvxzuwhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:2b:e4:b9:a0:a8:cd:d8:00:3a:ab:8e:29:89:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Apr 20 16:00:39 2025 GMT
Not After : Apr 21 16:00:39 2025 GMT
Subject: CN=050975701945665e484667b6ea978cc56be3779c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:e3:24:27:ca:8a:0e:4b:14:d9:c0:f8:74:
3a:0a:4a:0e:92:bf:37:d9:57:7b:ec:db:ea:fe:20:
2d:17:8c:60:bd:26:9b:e2:f1:2f:65:ec:6b:dc:45:
4a:40:49:0c:c5:e8:eb:b5:53:63:70:18:3e:cb:78:
e8:f7:14:3e:30:33:6b:d0:55:52:9b:27:ef:33:b9:
bc:23:8c:f5:41:01:e4:78:f6:8d:d8:0b:4d:51:1c:
f8:55:b8:08:bf:f3:8c:04:c5:c6:55:e7:f2:80:43:
a6:6c:ab:57:42:6c:d0:03:ae:cc:37:cc:8f:d1:0d:
89:37:82:eb:07:24:9d:3f:e2:21:31:9b:9c:dc:e9:
05:0d:87:83:34:61:4a:a4:f6:fe:92:a6:4c:f1:94:
88:c6:95:a6:ed:fa:83:a5:50:44:e4:57:cd:67:82:
f7:98:66:7a:41:bc:ba:b0:01:1c:d7:cc:dc:e5:c2:
b3:03:ee:30:e5:09:6c:63:d9:72:bc:b5:5d:d0:a3:
66:74:86:c2:34:00:c7:ba:7e:29:05:5d:84:67:56:
d5:08:64:55:85:14:2d:5a:bd:56:da:d0:a6:f2:0f:
74:77:5c:e1:4d:ba:64:1d:ad:8f:8d:8b:54:08:64:
ba:72:e3:95:de:81:8c:cb:97:57:85:48:92:c2:1b:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:09:75:70:19:45:66:5E:48:46:67:B6:EA:97:8C:C5:6B:E3:77:9C
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:96:64:27:e8:00:9f:e9:48:a2:83:52:3c:a6:fe:7f:e4:9e:
61:03:be:f5:e7:59:9b:b8:b0:9b:c1:56:88:72:6e:77:26:4f:
9b:4c:ef:f4:ad:d6:40:80:f7:75:cd:20:4d:c6:31:73:91:be:
30:92:7c:50:80:57:eb:c0:0a:3f:39:93:bb:ac:3b:11:60:e0:
46:ec:f1:f5:0a:a3:00:85:50:d2:28:00:19:87:d8:a8:7c:b8:
7a:33:89:ba:38:06:90:34:92:5f:42:24:52:52:d9:35:07:47:
9b:d2:43:d4:e5:d6:6e:1e:be:2f:d5:41:b6:9f:57:d8:74:fb:
25:81:ad:13:1e:5a:9a:d0:04:13:74:ef:40:5a:f5:1c:f3:49:
21:2f:45:c5:c9:04:a2:03:bc:1b:9f:a7:c3:90:ef:67:a2:ba:
e7:2f:fb:18:0c:95:13:36:76:f2:55:ae:09:7f:06:21:05:79:
cf:a6:bd:d9:a4:37:e6:03:de:21:f2:c8:10:68:19:59:99:5d:
ef:fc:50:9c:0e:3f:87:3c:c2:8b:d5:40:9a:e2:5a:66:ec:24:
5f:2d:90:1e:f8:5c:b1:e0:4a:9c:0a:30:a4:3b:76:2c:36:c8:
3d:57:bd:3a:ba:6e:e5:17:e1:6f:b2:a6:1b:a8:ab:62:20:bf:
80:cf:3b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:52 2025 by rpki-client