Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
File: NM-cB0OwPV4EX0bprPToAKnxio4.mft (raw, json)
Hash identifier: luP9rKTsB9VJ5iPJcbJrvwFm47yTO7wuZJ14iN4/9I0=
Subject key identifier: CE:15:72:4E:13:40:00:0E:E6:B0:59:B3:D7:9C:DA:D0:74:B0:14:AE
Authority key identifier: 34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
Certificate issuer: /CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Certificate serial: 019655A572C7B68D03EC730DD714A17482E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
Manifest number: 0A0A
Signing time: Mon 21 Apr 2025 00:00:28 +0000
Manifest this update: Mon 21 Apr 2025 00:00:28 +0000
Manifest next update: Tue 22 Apr 2025 00:00:28 +0000
Files and hashes: 1: NM-cB0OwPV4EX0bprPToAKnxio4.crl (hash: 2xu5S398hGGs1+0f2xXC39Z85UL5LaK9H0FnO5sb53k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:72:c7:b6:8d:03:ec:73:0d:d7:14:a1:74:82:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Validity
Not Before: Apr 21 00:00:28 2025 GMT
Not After : Apr 22 00:00:28 2025 GMT
Subject: CN=ce15724e1340000ee6b059b3d79cdad074b014ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:54:30:3a:f7:7a:ae:ac:45:2d:01:29:d2:
55:3c:d9:f0:78:9f:03:4c:00:8d:7a:bc:09:72:32:
ca:c5:52:35:6e:3c:11:37:5d:06:16:4b:64:63:68:
7a:f0:88:98:48:33:85:02:fc:06:83:88:b8:9c:c6:
1e:03:e9:a5:13:8c:7b:f9:a7:15:13:e0:72:6a:64:
cf:6d:33:37:91:bf:c6:85:fb:e4:ef:12:9e:ef:86:
0c:b3:90:ca:55:9a:31:93:64:6e:1c:3a:62:f3:41:
33:e4:89:79:2d:73:5f:21:82:65:13:e0:05:e4:92:
0a:17:32:5f:1b:9c:f4:20:9d:8b:13:e9:bf:22:3a:
30:db:9d:76:01:ae:a1:f9:f3:dd:9e:2b:a1:7e:e3:
b8:2e:01:be:d0:d0:34:63:e5:7b:2c:3b:d8:b6:8c:
61:eb:61:a0:48:65:a0:35:22:eb:78:ac:4b:6d:09:
c9:2c:f2:e4:c8:fe:5b:98:78:8c:f4:58:b0:2b:9c:
b1:e1:c3:1e:9f:ef:a2:38:99:af:93:58:97:d5:3e:
bd:91:30:3c:5f:74:8a:4c:12:35:7f:33:25:af:da:
38:d8:2f:90:cd:f4:34:4a:50:3b:13:56:78:24:37:
e9:bd:d8:fb:18:cd:ab:0a:47:19:69:68:20:ce:fc:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:15:72:4E:13:40:00:0E:E6:B0:59:B3:D7:9C:DA:D0:74:B0:14:AE
X509v3 Authority Key Identifier:
keyid:34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:79:2a:6a:b5:be:0b:15:0b:b1:47:24:25:e1:ff:20:88:c9:
f6:dc:67:6b:20:1d:c4:4f:03:88:6a:26:4a:96:1f:0f:48:bc:
20:bc:88:4d:4d:bb:bf:82:69:5f:27:08:ad:d6:0f:97:09:d2:
d1:67:d5:9e:7e:fe:92:5a:cd:8f:90:a1:c0:f7:9d:cd:d5:33:
e3:42:14:56:6f:df:3d:d0:bf:57:83:1d:f0:c4:0c:ca:e5:cb:
bb:f7:23:3a:15:d5:02:82:db:c1:3b:27:5e:89:29:4c:19:a3:
a2:cf:a1:f2:71:76:c9:75:65:fa:dc:27:fd:c8:3e:03:e8:21:
bb:d5:94:be:b7:93:71:18:e1:ca:56:d4:c5:8b:f5:bd:dc:03:
55:47:5e:1a:fb:dc:2e:19:52:e2:d1:a0:0a:b4:cd:77:7d:05:
3a:19:b8:4f:e3:9f:b8:e3:93:12:54:7b:dc:1d:7f:ba:0d:2f:
30:b1:59:31:93:e4:17:cb:7c:09:eb:a8:6c:7b:0a:85:ab:6f:
7b:b5:e6:38:7c:fd:73:e9:30:b1:30:f8:dd:6f:a0:68:be:4c:
30:7e:c7:ad:ab:48:ad:6f:ce:73:c4:1d:f6:2a:35:64:3a:cb:
84:96:08:96:95:38:fb:f8:f6:ef:f0:8a:a4:b0:09:84:ee:01:
c7:70:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:47 2025 by rpki-client