Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: o6YfDV06xeRsmZk3xBiw/tin+3Gg1UHgE0lxc+S5PJ0=
Subject key identifier: CB:C6:E0:6A:39:0C:64:63:B1:C1:D0:0B:9B:78:FA:A2:10:61:3C:19
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 01964EC7DAA612F3BF073945A077EEA4B68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 0F45
Signing time: Sat 19 Apr 2025 16:00:42 +0000
Manifest this update: Sat 19 Apr 2025 16:00:42 +0000
Manifest next update: Sun 20 Apr 2025 16:00:42 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: 9lxvPx/2YggQ1508NKxNqQ09r7G//emItje4a7onuYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:da:a6:12:f3:bf:07:39:45:a0:77:ee:a4:b6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: Apr 19 16:00:42 2025 GMT
Not After : Apr 20 16:00:42 2025 GMT
Subject: CN=cbc6e06a390c6463b1c1d00b9b78faa210613c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:a0:3a:48:82:aa:43:cd:49:49:b7:da:13:
9f:c6:f6:c9:1d:07:4a:72:ee:ba:fa:3f:85:b4:27:
9c:ba:63:35:31:e7:14:65:d5:36:bb:c1:5b:4a:ca:
04:73:10:82:aa:eb:8b:72:f2:22:37:0c:30:04:74:
c2:83:d8:28:ce:e7:e8:13:eb:46:89:40:0a:19:27:
0c:e8:85:2f:b6:e1:ce:00:5b:8b:bf:59:66:04:67:
a4:2f:7c:30:1a:16:5f:5b:02:96:06:ec:35:fd:f7:
0a:b8:7b:cb:66:cb:05:d1:e2:63:64:6f:fa:22:18:
8f:bf:da:e7:0c:06:5a:09:17:3b:91:8a:5b:2f:94:
13:70:46:9b:a4:31:23:74:a0:bc:68:eb:9c:98:7e:
1a:42:42:e2:f6:a2:c2:95:e4:7c:57:7e:f9:58:c4:
de:2e:3d:9b:0a:22:df:7b:96:88:c0:47:68:62:c7:
f0:0b:4a:49:2a:d6:90:ef:18:82:53:e1:7f:eb:71:
59:f4:7c:72:d6:89:36:df:9f:80:6b:a8:12:fb:67:
67:27:c3:e8:67:31:4c:19:55:88:e9:21:f3:11:26:
2c:ff:24:85:0b:3f:29:1f:06:55:83:3e:a6:4d:c6:
c1:91:8b:80:c4:1d:f9:bb:23:4d:89:0b:93:42:d2:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C6:E0:6A:39:0C:64:63:B1:C1:D0:0B:9B:78:FA:A2:10:61:3C:19
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3b:df:6c:0f:45:26:79:6e:cd:bb:48:dc:64:d5:2c:db:05:
7d:ec:45:20:57:65:7b:9a:49:ed:70:b1:a9:d4:5b:0f:1b:27:
03:90:27:e6:42:40:01:23:f9:32:65:c2:74:f8:a1:5f:c2:77:
56:7c:f9:a2:1d:af:a4:23:36:bd:a4:85:02:d1:5d:97:2f:a8:
de:e0:43:1e:1f:42:fc:7c:3a:6c:fd:1a:02:09:4c:09:7a:bc:
95:d7:43:89:5d:1d:34:a9:9f:e2:82:a6:5c:c8:21:fc:54:80:
19:9a:ab:84:be:01:81:8c:6b:f0:28:5f:40:ec:7c:d1:1e:21:
c0:62:a2:1f:0f:54:75:62:be:96:90:92:18:e4:d7:74:35:a1:
8c:ce:f8:87:bd:8a:08:8b:d1:4c:e7:e0:bd:c9:71:7a:c0:30:
c9:ed:90:8c:d6:62:6a:92:2b:40:cd:e9:cc:7c:c0:50:c6:97:
98:32:56:05:04:0e:7e:db:1e:43:29:2e:99:f4:82:21:64:d7:
ce:88:11:f6:d8:07:61:4d:cd:2f:e8:30:16:d8:71:7c:61:21:
2f:54:b0:f9:45:fb:cb:2d:58:e0:02:0c:41:49:dd:3c:9c:b8:
4f:b7:6e:c4:1e:da:8b:f6:cf:5d:cc:13:66:5d:c6:ce:c0:99:
d9:04:9a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:54:50 2025 by rpki-client