Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
File: N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json)
Hash identifier: ihtyZScO2nHLMk6mjeGsdqFyztY4vwk6mT6AH3mM2Ys=
Subject key identifier: B1:F5:EF:92:2E:2F:D2:CB:D6:D2:3F:1B:81:A7:E4:A2:67:D3:87:FA
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial: 019659825491C80E894839E8FD09CB6DFC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
Manifest number: 0E75
Signing time: Mon 21 Apr 2025 18:00:35 +0000
Manifest this update: Mon 21 Apr 2025 18:00:35 +0000
Manifest next update: Tue 22 Apr 2025 18:00:35 +0000
Files and hashes: 1: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: Iointhe+En+VXWYOMRGDFOgiq9NjUrv7piUQumXs1fs=)
2: Vldb1Pv9SKH1pSEjNm1gf_bg3_M.roa (hash: Ox3xcaNfkxGbMXT71Q5JDbePmqXmxZEbJ+Iew6AAo/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:54:91:c8:0e:89:48:39:e8:fd:09:cb:6d:fc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
Validity
Not Before: Apr 21 18:00:35 2025 GMT
Not After : Apr 22 18:00:35 2025 GMT
Subject: CN=b1f5ef922e2fd2cbd6d23f1b81a7e4a267d387fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:7e:08:91:c4:af:4d:50:31:e1:b7:9e:42:
54:93:f0:2d:99:4c:74:e9:3a:db:53:27:aa:20:73:
c6:e5:64:7e:d8:8f:15:73:06:4e:ac:55:ba:18:27:
18:db:91:5f:4b:4e:0e:d1:36:46:ce:35:58:24:b6:
23:3a:ea:1e:d4:f1:2d:88:8b:45:1e:05:38:2f:83:
fd:38:73:39:88:17:2a:6f:8c:5e:b7:10:d3:81:01:
a2:2e:5b:98:18:3f:a4:85:6c:65:c2:36:5c:5e:76:
fd:c2:da:bd:e3:92:58:f6:a9:3a:ca:6d:b2:52:32:
41:a2:54:4b:9a:3e:14:51:c4:42:9d:5c:8e:d5:7b:
eb:c0:6c:6c:f8:2f:2a:83:88:64:ac:f2:74:9d:b8:
52:74:9e:bf:3c:15:3a:e6:ff:9a:9b:18:20:30:2b:
10:d1:31:6d:4a:53:1c:a0:03:a8:7f:e4:ec:18:41:
12:d9:44:76:ae:60:63:6f:f1:e8:53:b7:80:94:40:
20:8b:5b:be:91:93:bb:74:bb:9c:7b:d8:19:aa:dd:
cc:d0:46:68:a1:61:d8:ec:e1:52:76:e0:7e:ff:68:
45:dc:12:fe:5f:1f:dc:1c:c1:7a:e0:53:7f:3f:6c:
b7:12:90:9c:41:20:63:75:11:8f:de:6b:7d:ca:82:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F5:EF:92:2E:2F:D2:CB:D6:D2:3F:1B:81:A7:E4:A2:67:D3:87:FA
X509v3 Authority Key Identifier:
keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d9:2b:88:75:a8:82:cf:38:a2:4b:b2:28:8e:c0:26:7a:c6:
1e:37:19:bb:97:97:57:94:2a:0b:df:7e:f7:b6:75:81:bd:2e:
df:72:6f:71:4c:bc:86:7b:52:34:4b:3f:d6:8d:73:8f:d5:b9:
28:2d:a4:78:4f:9c:22:31:0d:2c:01:6d:f4:de:50:e5:e2:4c:
a0:74:f0:a3:cb:b6:39:76:fb:4c:42:66:f5:a2:4f:4a:b3:93:
e5:9e:d9:be:07:2e:ee:54:c2:32:37:3b:38:ad:2c:7a:d2:5d:
e6:94:7b:0d:92:41:4d:3f:41:38:8f:42:9a:3d:d6:6a:86:dd:
3d:5e:75:15:72:3f:bb:0e:fe:dc:37:01:56:df:8e:d1:c0:b5:
75:46:98:33:47:cc:a5:a9:4a:66:b9:e1:27:f0:eb:33:c2:a9:
c8:0e:cc:28:b6:fa:5b:0f:ba:93:ce:74:a4:44:3d:9c:26:35:
ba:9e:5d:68:50:c3:f8:ea:0d:d0:c2:51:c9:53:1d:4d:0c:9b:
92:06:2f:72:ae:a1:fe:c1:35:68:3d:8f:18:1a:ae:8f:52:93:
90:38:07:d5:8e:00:93:55:d9:ec:af:13:44:75:a4:47:47:43:
42:33:7f:c9:ad:2c:4e:fc:e1:7c:71:99:85:63:9c:ea:dd:db:
17:2a:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:58 2025 by rpki-client