Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: 5T0iNLGyGiRH/EY+sEYJpOR+sUeNFqNzda+AZ2IEr28=
Subject key identifier: B8:DE:0F:57:8C:41:66:69:E3:23:84:59:E9:E0:B3:70:24:7F:3F:07
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 01963EE70CA002C7BFB0F7CF034E5A225ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 14:00:51 +0000
Manifest this update: Wed 16 Apr 2025 14:00:51 +0000
Manifest next update: Thu 17 Apr 2025 14:00:51 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: Y2NdAvD0RxofIbxQuXLObDf51QqTNmJRapIOW5pnkKo=)
2: mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa (hash: 4mDmX111g5PLlffQE3BOZIPTW2uYVk7yBC9oTl48FX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e7:0c:a0:02:c7:bf:b0:f7:cf:03:4e:5a:22:5a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Apr 16 14:00:51 2025 GMT
Not After : Apr 17 14:00:51 2025 GMT
Subject: CN=b8de0f578c416669e3238459e9e0b370247f3f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:16:16:ff:2b:90:8d:44:c5:94:f7:0a:29:
2b:c3:56:47:45:82:af:fc:1d:42:7e:70:46:c6:2c:
f1:82:03:72:2d:22:e0:d4:91:c8:d6:45:7a:2c:6e:
31:cb:47:32:c9:7b:74:5f:52:ab:34:a5:88:cb:02:
d0:dd:c8:b6:c3:08:5b:d1:b5:8b:5f:7a:f7:c7:4d:
59:27:73:04:f6:76:50:8f:9d:7b:76:82:6c:2e:02:
3e:24:b9:2b:6a:74:8a:fc:f7:7e:4e:e2:0f:9f:10:
77:d0:30:cb:49:af:1e:56:54:c9:d6:91:5e:a2:69:
4f:f8:8b:1a:bb:31:f1:fb:71:48:8f:59:75:8b:bd:
22:e1:5d:6c:98:ae:5e:8f:47:89:3e:cd:9b:83:42:
9f:35:ac:d9:08:24:9d:b5:91:9c:03:6f:9d:aa:9b:
0e:16:f6:eb:22:4f:53:b2:85:84:d5:00:d9:41:01:
f9:41:c1:91:d4:ea:c7:d4:1e:77:c8:ce:bf:4e:9c:
b7:a9:36:18:d1:66:86:4f:8e:78:ac:af:49:89:b1:
3c:48:6b:64:14:55:8a:a9:62:a3:dd:e4:aa:a7:8d:
80:6a:ff:b5:bf:43:d9:95:f7:db:cd:cb:64:91:ad:
b2:b5:bb:fc:e3:a8:7e:6d:08:aa:b2:fc:4b:1a:f6:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DE:0F:57:8C:41:66:69:E3:23:84:59:E9:E0:B3:70:24:7F:3F:07
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:40:d8:27:4a:cb:23:9f:57:5b:27:83:b5:b3:87:f8:b4:9f:
88:0c:90:ef:03:87:b6:ee:e8:4a:29:1c:ae:27:4e:7c:74:f8:
d3:f9:dd:19:20:0c:4e:1e:df:b6:3a:db:05:1c:6d:5a:57:66:
03:da:da:0d:25:b1:d9:c1:34:1b:58:f4:e8:a3:d9:55:ae:d7:
28:3e:f8:75:25:57:ca:a8:47:a6:7e:f8:cc:34:3d:56:cc:3b:
15:eb:15:2d:fb:c4:7c:53:dc:d9:85:61:4b:81:55:d5:4a:67:
c5:81:19:d0:ce:37:31:5d:d3:77:20:de:88:b8:d6:f7:2a:8f:
45:dc:8e:6b:56:c0:75:37:06:d0:60:a2:3e:39:32:3e:b0:a2:
99:21:12:62:2e:30:33:5a:c2:91:16:47:09:82:57:16:a9:09:
8f:31:97:61:bd:aa:16:8e:4b:d5:b3:42:f8:36:13:18:50:3a:
e7:e3:b5:03:0f:2f:73:b6:6d:37:bb:5a:61:09:33:3d:2b:86:
4b:e1:a2:e6:13:8c:7c:29:18:1d:49:d9:b6:8f:33:ea:80:b5:
81:1e:22:ef:a6:73:15:39:cd:2a:45:e9:09:e5:75:0e:fb:2f:
78:4c:ee:9b:d1:4a:ae:9c:ec:3e:ab:39:57:93:df:5d:42:26:
c2:8d:90:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:31:00 2025 by rpki-client