Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
File: NxYpWi0WQ853rHom4CJke8R5Awc.mft (raw, json)
Hash identifier: X00Oi9FQ8F9On9DQ1/u79OjOWzM+5oRe3Gu3++RO+Og=
Subject key identifier: 63:19:C7:E9:E9:6E:88:71:86:F1:BB:60:84:4F:A1:1E:E0:E0:D3:BB
Authority key identifier: 37:16:29:5A:2D:16:43:CE:77:AC:7A:26:E0:22:64:7B:C4:79:03:07
Certificate issuer: /CN=3716295a2d1643ce77ac7a26e022647bc4790307
Certificate serial: 019643D5E23C50C00429B3166FE544E5C869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxYpWi0WQ853rHom4CJke8R5Awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
Manifest number: 086F
Signing time: Thu 17 Apr 2025 13:00:12 +0000
Manifest this update: Thu 17 Apr 2025 13:00:12 +0000
Manifest next update: Fri 18 Apr 2025 13:00:12 +0000
Files and hashes: 1: NxYpWi0WQ853rHom4CJke8R5Awc.crl (hash: wV6kWBQhfNUo5Zo04Xo0IVyRa5m9WcFVGWALGkNDN4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NxYpWi0WQ853rHom4CJke8R5Awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d5:e2:3c:50:c0:04:29:b3:16:6f:e5:44:e5:c8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3716295a2d1643ce77ac7a26e022647bc4790307
Validity
Not Before: Apr 17 13:00:12 2025 GMT
Not After : Apr 18 13:00:12 2025 GMT
Subject: CN=6319c7e9e96e887186f1bb60844fa11ee0e0d3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:3b:8e:45:95:91:b0:80:c2:51:d4:90:df:
9d:78:66:ee:4b:26:9e:9c:ca:54:68:66:65:7d:9b:
9d:4b:e9:3c:22:24:ce:66:18:44:12:bb:bc:9a:fb:
fb:62:5c:72:3e:8d:78:9a:de:3b:6e:6d:8f:35:cf:
86:28:5d:f2:fa:f5:e5:6e:b3:8a:34:eb:84:ba:27:
f1:46:0e:15:83:ca:bc:10:79:c3:ae:5f:20:db:c4:
eb:41:6b:82:6e:92:94:85:6e:75:e7:ef:0a:23:20:
8f:27:5c:91:f0:26:6e:b2:a5:ed:ad:0e:78:61:7a:
1c:a1:71:30:d6:75:bd:ac:59:fd:8f:be:a3:77:86:
e1:78:d0:68:a4:13:20:aa:d1:76:48:4f:4f:96:33:
73:6e:4c:42:53:d1:cb:9d:b1:ff:e7:79:62:6d:77:
05:ba:15:45:8c:8a:17:50:8c:2f:f0:c3:64:f8:91:
35:96:c4:4b:d6:00:eb:10:08:78:e3:0f:83:e6:ad:
55:88:de:79:75:8d:a6:6b:d6:a7:ce:af:36:a2:9b:
4d:70:b3:d0:c6:73:2b:1f:f0:d1:e8:b3:05:97:6a:
5f:1e:95:ed:08:1a:18:45:a0:c4:7b:e5:2c:52:c6:
4e:65:c2:57:2e:ae:b4:d5:4c:c3:e1:ac:36:2c:a0:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:19:C7:E9:E9:6E:88:71:86:F1:BB:60:84:4F:A1:1E:E0:E0:D3:BB
X509v3 Authority Key Identifier:
keyid:37:16:29:5A:2D:16:43:CE:77:AC:7A:26:E0:22:64:7B:C4:79:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxYpWi0WQ853rHom4CJke8R5Awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6c:4a:f1:70:16:31:1d:69:72:af:21:d6:62:11:fa:de:a5:
a8:6c:cc:d8:b7:b4:1b:6f:c5:f7:71:70:8e:85:d5:00:d1:72:
58:a3:99:27:96:91:02:ef:d6:69:2c:c7:cc:26:22:27:28:95:
b0:4e:6b:ce:97:80:38:99:d2:0d:2f:d1:c3:da:67:a8:6d:2a:
47:00:25:20:df:2e:9f:ca:d3:95:61:f3:aa:a3:ac:e9:21:46:
3c:91:a9:41:98:df:c2:5a:4d:c4:fb:0b:10:5b:a0:dd:fe:3b:
c2:31:29:78:ad:18:c9:ea:fb:e2:3a:20:3b:5b:b2:dd:8a:a5:
a7:35:02:6a:1d:3d:9b:91:15:1b:f2:fc:ad:8b:8b:3f:55:38:
e5:5b:26:d8:f2:58:5f:2d:9a:1e:de:69:6b:5a:a3:1c:51:c4:
96:19:d0:7c:6b:02:fe:2c:95:cf:4b:72:82:93:6e:c2:eb:8c:
f3:31:a7:32:d9:12:83:2a:f4:fe:b5:98:63:36:30:16:68:c2:
76:9a:9b:5a:f3:69:b1:94:a1:a8:31:4c:4a:de:7c:a1:73:4b:
5b:75:6e:c0:4c:3f:5e:e2:aa:70:61:cd:15:7c:21:c6:ab:bf:
11:61:ae:9b:32:53:4b:41:bb:2a:f9:81:71:75:69:b7:e7:d3:
8f:27:1d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:24 2025 by rpki-client