Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
File: npNqlnzlH9NBCUdGmWvO8WrL764.mft (raw, json)
Hash identifier: 1ZfyD/fHpzoEy7DcfmIvyDWYCJOP4lIbvW+G0/88PoM=
Subject key identifier: 34:99:62:B6:17:2A:63:A1:93:44:4D:37:1F:AB:8F:7D:C7:30:B2:BE
Authority key identifier: 9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
Certificate issuer: /CN=9e936a967ce51fd341094746996bcef16acbefae
Certificate serial: 01965B03AC12620C333130D05A5F98B8335C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
Manifest number: 0BC7
Signing time: Tue 22 Apr 2025 01:01:29 +0000
Manifest this update: Tue 22 Apr 2025 01:01:29 +0000
Manifest next update: Wed 23 Apr 2025 01:01:29 +0000
Files and hashes: 1: npNqlnzlH9NBCUdGmWvO8WrL764.crl (hash: f0ZD1L76eaUJxW4AQFAEY2O1k8CIsQfJC8DI3XEvfYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:ac:12:62:0c:33:31:30:d0:5a:5f:98:b8:33:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e936a967ce51fd341094746996bcef16acbefae
Validity
Not Before: Apr 22 01:01:29 2025 GMT
Not After : Apr 23 01:01:29 2025 GMT
Subject: CN=349962b6172a63a193444d371fab8f7dc730b2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:ee:ec:69:ea:71:b0:24:06:f9:1c:fb:89:
6e:c5:b1:45:97:95:c9:ab:b7:a9:d1:12:ba:4d:79:
bc:ba:8b:ae:ff:61:4d:f8:d5:67:7f:e4:69:08:e4:
de:b5:b1:ee:de:af:e9:e2:5f:9f:1e:e5:b5:58:83:
db:e7:96:9c:e3:95:a9:e1:9e:cd:73:89:de:35:2c:
66:18:b8:56:52:78:db:ef:6b:46:25:c5:e5:72:5e:
5a:06:ef:8f:9e:13:c8:d6:d5:bd:a5:32:50:bb:45:
3b:23:98:1e:be:5b:de:48:0c:3d:c3:ed:4f:cb:af:
08:4b:97:88:65:5c:17:97:e7:1d:44:5d:99:00:0a:
87:83:f7:d6:92:c9:3e:0a:a5:43:48:db:0d:dc:3a:
b6:61:9a:e0:f3:00:7f:34:f7:5b:b6:e0:08:70:68:
2c:e8:13:df:a4:a5:fe:5a:ec:3e:bd:4e:57:85:7a:
b5:68:da:7d:6e:72:41:e3:b0:1c:3e:7b:73:ba:15:
26:b9:82:7c:7f:da:3a:5c:3b:fc:c6:95:d1:3b:2f:
71:70:3a:cf:51:66:31:35:32:7d:00:df:6f:33:89:
e8:a0:42:54:05:88:26:16:84:de:d4:80:e4:14:59:
44:d1:74:82:41:c1:3c:52:e8:43:de:fe:96:02:28:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:99:62:B6:17:2A:63:A1:93:44:4D:37:1F:AB:8F:7D:C7:30:B2:BE
X509v3 Authority Key Identifier:
keyid:9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:18:41:57:15:4e:51:bf:12:14:b2:a1:df:52:77:c5:b0:e1:
4c:d5:da:80:79:71:ee:df:90:3e:82:e9:6c:f1:28:41:5f:78:
60:7c:59:78:d6:4b:7d:ba:7b:5a:cc:26:9c:95:18:b5:a5:6b:
42:6b:59:d0:a9:ce:fe:b9:00:49:6c:c0:26:ef:73:fe:89:77:
2e:23:c0:05:37:06:16:54:c7:e4:f8:09:28:1e:86:67:ab:fc:
8f:3e:af:1c:00:c3:22:7c:a1:23:dc:24:7c:5b:94:b1:9a:0c:
49:78:32:d6:42:d9:08:ea:66:1b:55:ea:f3:f4:af:d1:61:b6:
87:ee:7e:b1:51:75:5f:23:d6:40:73:80:f5:32:47:8e:71:9c:
33:7b:6b:99:47:d0:d8:a4:5a:e5:24:db:18:bd:4b:67:ac:d4:
72:0e:b1:93:ce:a6:1b:e0:1d:3a:a2:b8:8b:90:03:9d:d7:8c:
49:75:82:fc:dd:86:64:19:fe:5c:98:d8:df:bb:81:96:fa:22:
b1:c1:3c:59:6c:1c:b3:b2:4f:50:28:d9:99:e4:98:40:ee:6c:
bd:be:39:4d:3c:d7:65:93:48:5e:b3:12:ed:39:ed:ed:f3:88:
1a:30:23:0b:23:42:2d:10:ce:e4:a4:ab:73:4f:06:f3:4d:a0:
71:e2:39:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:24 2025 by rpki-client