Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
File: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft (raw, json)
Hash identifier: KYhiTqlQs+4QGu9a2kSrzmnRnuUhpCjERQrGZ0MEx/M=
Subject key identifier: 82:BA:51:62:E9:81:A0:2B:9D:2F:C7:B5:A5:4D:C2:8C:02:89:22:E9
Authority key identifier: 34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
Certificate issuer: /CN=34b960f6f19255ea39666f833ebe271761994b15
Certificate serial: 019653B73A9A8CCBA424F7825B9AC8F4E458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
Manifest number: 0696
Signing time: Sun 20 Apr 2025 15:00:39 +0000
Manifest this update: Sun 20 Apr 2025 15:00:39 +0000
Manifest next update: Mon 21 Apr 2025 15:00:39 +0000
Files and hashes: 1: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl (hash: E46M5DyARFkWedbPhdU+O2qnu7gEcUBqGqj+w2XwIag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:3a:9a:8c:cb:a4:24:f7:82:5b:9a:c8:f4:e4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b960f6f19255ea39666f833ebe271761994b15
Validity
Not Before: Apr 20 15:00:39 2025 GMT
Not After : Apr 21 15:00:39 2025 GMT
Subject: CN=82ba5162e981a02b9d2fc7b5a54dc28c028922e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:eb:93:32:ec:f2:73:d0:72:f5:f6:76:d5:
59:f3:ee:57:db:60:89:1f:f5:c5:e3:cf:e0:34:12:
5e:ed:63:0c:62:1e:8f:a4:ad:e3:8f:27:d2:19:03:
5d:e3:bb:54:f8:91:cf:ac:6e:cb:6c:2c:94:d6:6f:
46:73:ba:8d:31:30:0e:0d:8b:a2:c4:b0:aa:1c:87:
22:fe:3d:6f:ce:c3:b1:8f:13:35:81:ac:b9:f9:14:
5b:4b:55:de:d0:ac:31:c3:3c:65:a5:a3:5a:b2:61:
2e:e3:8c:44:3e:98:b0:c1:e7:c0:98:b0:72:eb:2b:
9d:19:db:9f:a7:4a:4f:87:cc:6d:a4:34:d3:60:4e:
cb:3d:0a:41:8d:06:95:e0:23:03:1d:00:45:f7:25:
16:f5:ff:47:60:50:a3:4b:3a:4c:c6:a3:d0:a8:13:
a7:04:73:13:aa:e4:76:9a:38:fb:af:9c:8c:6e:1e:
df:47:28:2f:7f:dd:51:c4:bc:cf:07:31:bb:d2:f3:
d0:59:f5:9d:67:c8:b4:b4:cd:e3:9c:39:61:20:b0:
d8:43:70:43:b1:27:e8:46:14:67:4f:4b:e3:35:3a:
5c:af:e0:6c:7b:80:fd:8e:e3:4c:41:6a:9a:53:dd:
a7:81:e4:66:51:6c:7b:f8:6d:ca:51:6c:4b:e0:7c:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BA:51:62:E9:81:A0:2B:9D:2F:C7:B5:A5:4D:C2:8C:02:89:22:E9
X509v3 Authority Key Identifier:
keyid:34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fe:00:89:4a:8c:a9:42:d6:3a:af:d7:b1:db:a0:6f:e0:be:
36:dc:8e:e3:d8:62:e5:06:7f:a8:4a:b4:8e:be:9d:24:4c:11:
e9:9f:04:89:4a:b2:a1:04:09:87:71:1c:8b:d0:f6:2f:fa:73:
12:c4:ca:4b:87:b7:7f:c8:bc:a4:54:de:5c:8f:85:ee:ed:0c:
b7:1b:2e:1b:db:96:34:1a:53:fd:eb:47:95:1a:25:54:b0:0b:
77:e1:0e:44:a6:ec:68:5f:35:b7:24:58:3e:b1:ba:9d:19:fe:
0d:1a:0c:32:1f:8e:fd:f6:1c:bb:46:45:0f:51:f6:00:b3:15:
12:11:e7:3a:6e:05:4e:f9:99:39:40:51:88:be:1a:c1:ff:da:
87:83:2c:76:e7:11:eb:eb:ea:d9:9c:f8:df:fe:8a:8c:c1:59:
dc:a6:8f:f1:6c:c8:3f:b9:88:f8:7f:f1:dd:15:9e:57:97:e3:
b4:00:78:65:c7:bc:38:b9:69:41:5e:5d:8f:8e:d9:83:b6:5f:
1e:89:f2:60:b5:b6:ad:f4:ef:4a:1f:e2:29:78:37:c6:8e:41:
eb:c2:d5:4a:a6:80:d0:8d:88:94:44:b8:10:ab:d4:7b:79:18:
d0:03:92:a8:f7:b5:84:af:0d:d4:4f:41:d2:01:3d:a3:04:33:
ce:83:21:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:06:19 2025 by rpki-client