Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
File: niAdSREFvoeXxfKjhatFb18K8Fs.mft (raw, json)
Hash identifier: UH0AnqTqiUmctW0Q0z1ytXX1ztQQ+zqIYrxuEdtoW+Y=
Subject key identifier: 79:C7:09:7E:DB:0E:C7:F0:38:0B:45:E9:5D:DD:A9:07:78:F4:D7:50
Authority key identifier: 9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
Certificate issuer: /CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Certificate serial: 01958F985552C01C1357B6C72665F1DA009B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
Manifest number: 056C
Signing time: Thu 13 Mar 2025 13:01:19 +0000
Manifest this update: Thu 13 Mar 2025 13:01:19 +0000
Manifest next update: Fri 14 Mar 2025 13:01:19 +0000
Files and hashes: 1: niAdSREFvoeXxfKjhatFb18K8Fs.crl (hash: l6iAWAtx2r+ZVfHRbUrlWmSma5TmDPhC6kafC1pJLFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:55:52:c0:1c:13:57:b6:c7:26:65:f1:da:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Validity
Not Before: Mar 13 13:01:19 2025 GMT
Not After : Mar 14 13:01:19 2025 GMT
Subject: CN=79c7097edb0ec7f0380b45e95ddda90778f4d750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:cc:b5:10:42:1e:60:f3:ba:f2:e6:2e:a5:
29:29:1d:32:6d:37:87:17:dd:58:3c:d1:da:cc:a1:
67:85:bf:a6:ec:ca:b9:9d:39:fd:4c:a4:99:03:55:
06:dd:9d:3f:e7:30:88:39:96:a5:09:0b:33:90:84:
4c:0e:78:e8:dc:24:9c:ab:b4:c5:6b:fa:b6:bf:a7:
5b:e5:09:7a:c0:a9:80:1b:ec:37:52:e2:4b:45:c8:
1e:00:4d:5c:3b:f2:3b:ef:72:0a:e1:17:28:b7:4f:
5b:45:7e:e0:86:0a:73:1b:be:f4:cf:de:c8:1f:47:
24:30:c1:4c:95:aa:88:21:9a:95:f0:d3:a1:43:42:
18:32:ea:09:3d:86:a8:1b:49:b0:88:4b:ed:36:2f:
a0:60:6c:9f:60:61:d5:44:0c:5b:63:6e:4d:bd:f1:
43:68:4d:eb:07:57:23:0c:b7:bb:8a:2b:85:36:ee:
25:42:6b:bb:07:86:b5:7e:0d:9b:1a:44:b3:ac:28:
7f:4f:5a:df:ab:b8:01:92:98:41:fd:d5:9b:d0:36:
8d:a9:3f:4a:d4:ea:df:63:53:30:17:47:3f:d1:cc:
c8:4f:d1:b0:a6:d4:9e:d3:7a:bc:8e:7b:cf:ec:d2:
c5:20:80:fb:2e:29:5e:45:3e:15:ff:a2:83:cc:ad:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C7:09:7E:DB:0E:C7:F0:38:0B:45:E9:5D:DD:A9:07:78:F4:D7:50
X509v3 Authority Key Identifier:
keyid:9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:73:1b:27:df:13:ce:9c:ac:29:e6:b1:8a:34:17:cb:cc:c6:
93:25:89:52:80:34:dc:c4:62:d2:68:df:53:b6:6e:4e:9e:cc:
26:63:d1:0f:20:89:41:2d:06:16:ba:83:ed:66:00:2b:40:8c:
b4:57:db:b3:f8:1d:56:a5:0b:d0:24:c3:eb:ec:e9:e1:37:71:
a9:52:93:a2:92:9f:34:a7:4e:20:aa:19:bd:3f:69:fc:94:61:
8e:e5:38:ee:9d:78:c5:bf:af:6d:be:26:14:0e:42:73:a0:ed:
1c:5d:bf:98:7c:4f:70:1c:4d:03:85:6e:d6:65:37:ec:ab:f1:
c4:3c:65:23:ba:b2:36:32:1a:1d:df:dc:18:e8:64:f3:c9:9a:
a3:77:dd:f5:a9:e2:96:2e:d1:df:98:60:4d:f5:2d:a6:e9:65:
e7:7d:f4:b3:74:14:f4:15:5f:95:56:61:8c:3f:2c:1e:8c:33:
fd:4d:04:3e:71:1b:53:00:40:e4:45:f9:0b:0d:60:b1:89:8e:
17:67:88:03:5c:58:17:38:7c:64:1d:07:c1:2e:24:16:80:3e:
55:e2:57:71:3f:a7:b1:93:b9:bb:0e:4e:cc:b9:5d:f2:45:26:
9d:99:0f:f8:de:c8:92:c6:f5:75:da:4e:8a:cc:4c:88:28:ec:
58:4a:d3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:39 2025 by rpki-client