Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
File: N5jHIczxJbe4Klf7Pdk7d6YqOag.mft (raw, json)
Hash identifier: EznmY++390mjo2imkxGbLtVePO/d82ihK5cM7QFTEhI=
Subject key identifier: BF:97:4D:43:84:8F:8E:12:49:F6:FF:AB:B7:E5:64:5F:79:16:EE:3B
Authority key identifier: 37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
Certificate issuer: /CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Certificate serial: 019659822DED408E748A8F423F0C6D53D444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
Manifest number: 096A
Signing time: Mon 21 Apr 2025 18:00:25 +0000
Manifest this update: Mon 21 Apr 2025 18:00:25 +0000
Manifest next update: Tue 22 Apr 2025 18:00:25 +0000
Files and hashes: 1: N5jHIczxJbe4Klf7Pdk7d6YqOag.crl (hash: iGv9AQtrB4runMM/ll8S26NowOElWE3/skparcDtC8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:2d:ed:40:8e:74:8a:8f:42:3f:0c:6d:53:d4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Validity
Not Before: Apr 21 18:00:25 2025 GMT
Not After : Apr 22 18:00:25 2025 GMT
Subject: CN=bf974d43848f8e1249f6ffabb7e5645f7916ee3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:3f:3a:ab:91:4d:5b:db:5f:df:fd:ee:43:
6e:b5:91:f7:95:aa:9b:87:9e:a4:11:3e:84:4f:a8:
59:b1:b3:03:0f:22:37:ac:24:b5:f1:71:82:9b:31:
34:3a:78:24:82:9b:62:ef:26:0f:d8:cf:fa:38:56:
77:15:6b:42:13:8c:7b:5d:0a:0c:4e:db:e0:cc:1b:
16:c6:0a:b5:53:f0:03:0c:23:d0:5d:e1:96:d6:0d:
0c:fe:46:b0:b3:e1:a5:17:6a:46:16:ec:55:e1:27:
b9:d8:eb:98:64:99:50:12:e0:92:fb:c2:ce:58:50:
fb:d4:f0:bb:5f:52:d0:fb:1f:bd:b9:8c:49:47:78:
ae:39:f7:12:22:2f:4d:81:aa:c7:ad:e6:11:a0:8c:
df:34:4f:73:ba:96:d4:75:0f:4d:5e:cf:fa:35:d8:
b7:d8:22:e9:a2:72:cb:e1:08:ac:90:57:0e:80:bb:
2b:53:41:7d:af:05:0d:30:51:a1:6b:9a:89:cb:26:
2e:cf:d9:38:5e:b9:66:ef:d7:5b:04:fc:cd:08:23:
d6:05:d8:42:b1:86:2b:90:9b:c8:21:6a:02:60:35:
93:73:cc:27:98:67:b5:b7:ac:32:bb:c2:6e:3a:76:
d2:94:49:e6:5a:16:f6:d1:47:93:74:ed:2b:7e:72:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:97:4D:43:84:8F:8E:12:49:F6:FF:AB:B7:E5:64:5F:79:16:EE:3B
X509v3 Authority Key Identifier:
keyid:37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4f:af:d9:3d:d0:03:d2:91:76:05:34:0c:98:a0:11:e8:ea:
2a:7e:cd:17:57:98:dc:25:ec:0e:8c:a5:72:56:8e:41:0e:ea:
d3:3a:b9:ed:b6:73:14:ea:6e:fb:f5:a7:50:13:73:8d:d4:51:
97:d2:0f:46:a9:67:e5:4d:65:74:26:6f:af:0c:c1:53:d9:d6:
35:c1:9a:7b:c6:c8:e8:4c:92:45:27:6c:2b:62:4f:04:c9:e5:
cd:ef:ae:77:46:a1:c2:ec:74:6e:48:a4:00:42:85:d2:f2:7d:
a2:7a:98:ad:89:eb:66:ec:da:b0:3e:57:c9:9b:ea:86:6e:22:
35:cc:0c:a2:5c:90:a8:e9:14:d6:56:ad:bf:78:93:b6:aa:ba:
98:35:14:83:87:14:4e:db:8e:60:b7:58:a1:48:8f:97:18:34:
34:04:10:90:3e:be:0f:5b:7b:79:ff:46:2e:e1:3c:40:36:f5:
19:b2:2e:14:14:2c:95:6f:8e:3e:64:09:39:a0:9e:65:97:32:
52:58:2f:02:14:0e:21:e0:09:48:c6:13:04:50:7b:15:ed:fc:
42:76:b4:ab:52:d6:ba:b4:e6:31:6b:4a:bd:c1:c8:66:d5:11:
b5:f7:a4:7f:66:b5:22:00:fa:14:f2:d5:d6:76:79:32:ec:8b:
b5:40:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:15:55 2025 by rpki-client