Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
File: nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json)
Hash identifier: O8KRyyg6WeKvLQCieia5eAG8KAMX3nEiyrYxS08xaTs=
Subject key identifier: 2B:16:11:38:EC:82:4D:8E:8D:C0:45:C8:00:DD:6C:AE:06:0A:C4:04
Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
Certificate issuer: /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Certificate serial: 019655DCB51ECB4021C371A408A170171A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
Manifest number: 0FA6
Signing time: Mon 21 Apr 2025 01:00:49 +0000
Manifest this update: Mon 21 Apr 2025 01:00:49 +0000
Manifest next update: Tue 22 Apr 2025 01:00:49 +0000
Files and hashes: 1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: qmcBCcntU4CJ6yOf+NQr2sWkge8Wj9P2QPKDA+1jFIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:b5:1e:cb:40:21:c3:71:a4:08:a1:70:17:1a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Validity
Not Before: Apr 21 01:00:49 2025 GMT
Not After : Apr 22 01:00:49 2025 GMT
Subject: CN=2b161138ec824d8e8dc045c800dd6cae060ac404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:4b:bf:77:00:1e:a6:b0:a6:08:6a:09:a9:
17:93:20:a2:38:78:9c:76:a2:a0:40:fd:3d:95:ef:
7e:53:92:79:93:c7:d8:c1:f4:b8:0b:b6:e4:90:f5:
8a:1c:9a:c5:49:8d:e7:c7:1f:ae:62:11:21:d5:e0:
a4:80:22:38:40:3a:4d:a9:77:11:9d:ff:72:2b:6a:
a2:c9:26:fa:76:fe:94:83:d6:95:cb:e0:13:d0:bf:
24:66:84:9b:fc:fe:92:8d:e5:41:98:04:43:57:f5:
eb:d9:a8:7c:b5:3e:1a:c5:cb:6a:af:1d:56:4d:e2:
56:78:dd:ea:b9:83:07:01:82:61:05:5f:db:66:17:
e5:e6:6f:24:3f:72:7a:39:c6:6f:e0:2d:85:60:eb:
36:a2:75:b1:23:f1:e6:34:02:be:d5:ba:5e:bd:2b:
70:80:11:a8:e9:39:b0:77:a5:bf:8f:09:35:8d:76:
d9:a4:9c:f5:42:83:dc:2d:0e:45:a6:0f:29:3e:99:
76:c4:eb:dc:47:da:6c:7f:9b:35:98:5f:5d:c2:9b:
f2:ba:38:f3:c4:98:75:56:09:97:da:be:c1:50:97:
df:35:0d:23:fa:cb:7b:ba:29:48:a7:a4:b1:e7:ad:
c2:c1:df:b6:5d:cc:b5:db:d3:ef:af:a0:c8:90:ed:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:16:11:38:EC:82:4D:8E:8D:C0:45:C8:00:DD:6C:AE:06:0A:C4:04
X509v3 Authority Key Identifier:
keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7d:7a:7e:27:e3:a9:9f:bc:e4:94:81:27:2d:a3:19:33:37:
c7:00:bd:e5:1c:9c:d6:14:a7:a9:27:1b:d1:33:9d:fa:1c:74:
e3:ee:39:37:48:e3:95:1a:42:d9:2b:0d:19:05:fa:50:5f:44:
b6:d8:69:a0:97:dc:ef:0e:93:2b:ea:05:6d:b6:e9:76:50:4d:
e9:ed:db:35:37:20:84:56:4d:37:dc:67:5f:c6:6e:bc:0c:ac:
95:24:56:01:38:0a:99:13:80:47:62:99:67:9a:c6:29:de:fe:
6d:98:11:17:a9:e1:cc:28:ef:98:1d:39:e9:ee:24:27:50:3c:
ba:83:c4:c2:17:a0:71:c1:4f:a3:f5:c8:3a:17:69:0f:42:45:
74:69:a7:59:af:90:92:ef:c0:89:79:54:48:03:1c:83:44:9a:
86:ff:1f:00:44:43:33:c7:ea:5d:fa:ae:ea:cf:a2:ed:3b:5d:
39:09:4c:1b:11:38:7a:af:26:36:2c:e3:c4:ba:84:4e:a8:48:
8e:c3:48:76:d2:ab:a4:bb:5e:a2:ec:da:c9:6d:4f:1e:d3:2d:
84:d1:f6:53:45:64:1a:4d:a0:86:2a:fa:a7:81:7c:32:ab:94:
51:e4:37:ad:b8:71:7c:cc:81:81:0e:b2:d5:fb:bf:dd:6f:a5:
52:a3:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:55 2025 by rpki-client