Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
File: N28vTtsjIwxkt5O0GVfvSjI-PFM.mft (raw, json)
Hash identifier: 5UMtivuAhJfTe1hVK8nVbRMdXfCpRIZnBaXK7/NRnrM=
Subject key identifier: 3A:AA:DD:DB:00:FF:EE:E3:F9:7F:D0:B1:07:D1:84:72:C1:6E:39:BD
Authority key identifier: 37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
Certificate issuer: /CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Certificate serial: 01965E3ACDCB715EF2559B63A63A6ED6E852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
Manifest number: 0FAE
Signing time: Tue 22 Apr 2025 16:00:34 +0000
Manifest this update: Tue 22 Apr 2025 16:00:34 +0000
Manifest next update: Wed 23 Apr 2025 16:00:34 +0000
Files and hashes: 1: N28vTtsjIwxkt5O0GVfvSjI-PFM.crl (hash: QdzqIUNUmzZRJKVxNEmLG+1QEOwINVukgody9qhxyNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:cd:cb:71:5e:f2:55:9b:63:a6:3a:6e:d6:e8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Validity
Not Before: Apr 22 16:00:34 2025 GMT
Not After : Apr 23 16:00:34 2025 GMT
Subject: CN=3aaadddb00ffeee3f97fd0b107d18472c16e39bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:93:59:25:e9:4b:28:69:d9:8e:52:67:0e:
f2:a6:16:18:10:b2:15:d2:19:c5:f1:19:0a:55:d7:
46:2f:3c:a8:91:7d:91:8b:f0:b5:0f:41:f2:ac:02:
54:e8:68:c7:6c:a0:7d:e2:27:47:bd:cf:70:af:8e:
98:c2:95:0a:4b:0a:0a:d4:cf:5b:10:48:4c:33:56:
71:bf:19:b4:45:50:4e:b4:35:45:d8:33:e8:c1:25:
7a:91:4c:64:34:75:44:10:45:c4:ca:9c:a9:aa:ce:
c9:9b:fb:58:26:d1:41:d7:15:2c:45:80:ac:e7:12:
a9:35:b4:d0:b4:20:e4:c9:40:a4:e9:9c:57:66:18:
45:d3:32:ac:b1:75:e2:2f:25:47:2f:5c:dd:c3:f4:
87:5d:7b:89:c8:7f:df:e7:5e:fd:46:a5:92:7a:d9:
78:70:23:87:3b:6b:4e:2c:f2:a8:15:a1:11:d8:35:
21:83:02:16:4e:c2:a6:b4:38:f1:28:36:64:53:ab:
d1:34:45:36:38:68:b1:23:f0:66:d6:59:a7:9a:95:
b8:ed:c6:37:49:14:d2:ca:23:0f:f7:33:33:a2:13:
ac:45:4b:d6:c8:80:ec:1f:2b:0d:99:2b:ed:6f:96:
a8:b4:b6:cd:52:66:29:0f:64:9a:b6:c0:83:6c:49:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AA:DD:DB:00:FF:EE:E3:F9:7F:D0:B1:07:D1:84:72:C1:6E:39:BD
X509v3 Authority Key Identifier:
keyid:37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9f:e6:dc:49:99:9e:6e:e4:4d:84:05:1c:ac:4a:93:99:7d:
95:91:77:07:7a:f2:e7:23:d6:3b:36:7a:0d:e9:c3:db:11:36:
61:a7:92:7c:dc:b8:f4:c1:2e:9a:37:f1:43:8d:59:27:76:40:
bd:49:91:b9:5a:3e:19:6c:25:83:53:84:2d:b1:ec:dc:8e:54:
92:78:0f:a4:09:87:e1:a7:a4:21:3e:0c:33:7d:e1:ce:52:29:
f2:98:d2:a8:ef:0b:86:c0:a8:59:70:f8:f8:cb:ae:01:7e:68:
b1:28:bb:46:48:1c:5a:5d:ec:b0:0f:2e:01:28:d6:bd:9f:35:
2a:a4:ee:45:d0:2c:7c:e3:42:13:81:0b:57:f9:cc:54:6a:64:
fe:a0:a3:be:79:91:91:75:29:58:66:db:dd:95:3e:59:d5:1a:
b2:e2:aa:7e:b2:d7:f5:02:c4:66:16:67:49:4f:62:f5:4d:b2:
74:9d:76:20:ff:35:f6:5c:0c:33:2e:ac:64:a4:8a:c1:ba:07:
e7:7a:3d:78:29:a3:2c:49:cc:e4:7b:c5:71:a4:d4:78:59:24:
79:19:d1:98:ed:77:ce:64:36:f6:d2:5a:b5:89:11:cc:f7:9e:
72:f9:57:f8:ce:9d:d2:05:e0:47:89:43:94:be:c1:8b:d8:ed:
28:26:b3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:17 2025 by rpki-client