Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
File: npzXqbifTgVovUoLbCwRzRfn8OE.mft (raw, json)
Hash identifier: Av+ZQB0Osw5YjKv2sFaScVJbtki+KxAvXSvLXjp+pxc=
Subject key identifier: 60:13:89:26:AF:84:DB:B6:BF:93:B0:06:B6:13:37:9B:BB:35:B8:A0
Authority key identifier: 9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
Certificate issuer: /CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Certificate serial: 019655A621986F8A8EDA0CF9F05E62A8E0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
Manifest number: 02B0
Signing time: Mon 21 Apr 2025 00:01:12 +0000
Manifest this update: Mon 21 Apr 2025 00:01:12 +0000
Manifest next update: Tue 22 Apr 2025 00:01:12 +0000
Files and hashes: 1: npzXqbifTgVovUoLbCwRzRfn8OE.crl (hash: RYQST1bbVKheGAnr/oWt1D2ccyKBkFEyMfzelu1WtTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:21:98:6f:8a:8e:da:0c:f9:f0:5e:62:a8:e0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Validity
Not Before: Apr 21 00:01:12 2025 GMT
Not After : Apr 22 00:01:12 2025 GMT
Subject: CN=60138926af84dbb6bf93b006b613379bbb35b8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:a5:e4:c6:59:13:7e:1c:68:33:0a:45:0d:
f7:02:28:a4:8d:6a:f8:16:e2:62:97:a5:e1:df:22:
29:9d:d0:87:6b:05:df:25:4a:3c:3f:4c:9d:d7:e9:
41:e0:76:d1:9b:8e:d3:aa:fb:aa:5b:7a:88:2d:ca:
30:a4:d8:94:7c:14:97:6f:9b:ec:86:3d:fd:28:9d:
70:ff:3e:79:98:cd:40:bc:7f:9e:61:eb:54:d2:12:
2c:df:dd:8b:ee:7c:99:77:ec:a0:1c:a7:37:de:71:
fc:d5:54:6d:7d:c4:d4:f6:da:21:e3:49:5d:92:72:
aa:1c:24:81:f8:00:1a:69:69:93:48:a9:dc:9a:32:
48:a0:44:bf:94:51:7a:b7:2e:81:68:05:3f:ee:04:
3f:9f:4d:5a:a9:6f:33:0d:bb:e4:09:4e:06:55:d7:
1d:ae:7a:92:69:11:08:09:ce:29:73:bb:39:34:14:
de:b8:c1:c9:b4:1f:75:2b:b9:14:0e:51:13:1a:a8:
81:39:0f:f1:b5:61:21:a9:24:09:d9:98:4a:ff:eb:
4f:d4:c0:47:e8:d9:42:96:8a:6f:c7:6b:35:02:e4:
82:ed:97:c6:b0:41:d7:35:64:46:b0:03:a3:60:dd:
a5:82:bb:49:6e:7c:22:cd:b3:5f:89:7c:aa:60:e8:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:13:89:26:AF:84:DB:B6:BF:93:B0:06:B6:13:37:9B:BB:35:B8:A0
X509v3 Authority Key Identifier:
keyid:9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e1:73:6e:9a:da:1c:4d:a0:35:be:0c:65:d7:99:be:b6:76:
05:22:cd:21:43:fc:4f:36:08:5a:28:11:46:e3:d2:a8:81:90:
65:ab:e2:29:b5:e8:db:0f:02:15:2a:6b:48:25:28:31:bc:05:
da:80:db:c6:a8:f1:93:30:3e:94:35:f3:69:58:1d:e5:13:4b:
b3:16:b0:a2:ca:67:c4:71:7c:39:d7:ac:29:63:05:eb:3c:51:
f2:bb:90:47:98:9d:77:25:0e:04:1b:f6:b2:19:25:43:d9:c5:
5f:10:bd:84:0c:b6:9a:bd:71:c2:93:e5:39:21:5c:d9:f3:d4:
df:c3:dc:58:50:bf:31:e2:90:09:0c:08:7e:4b:3d:45:58:d9:
7c:2d:ca:e9:22:54:37:9e:12:92:72:d9:69:fd:c5:f0:a4:12:
1b:92:a8:3c:27:06:73:11:70:6d:7b:89:36:a9:b7:9a:2e:7c:
d4:e9:b3:73:10:9f:42:d9:dc:0f:d5:a7:17:dd:f2:29:b7:07:
5c:7c:36:4e:78:c9:3e:5b:12:2e:31:c9:75:9c:3b:f0:92:33:
2f:be:56:be:74:68:32:e7:69:26:8c:ea:28:45:49:7c:17:05:
63:c7:60:15:a0:72:b4:c3:e5:1e:41:d5:73:01:a2:66:71:1a:
9f:3c:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:21 2025 by rpki-client