Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: tiaR5Ltj6yWxGvY/NEj54G9DYVkA1pzJW4md0fks8pw=
Subject key identifier: 1F:73:4F:E5:11:2E:85:D8:0F:62:49:62:21:46:7B:B2:A7:46:5A:87
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 01958F97F5D225503ACAE9F5ABB7EDBABC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 0EE2
Signing time: Thu 13 Mar 2025 13:00:55 +0000
Manifest this update: Thu 13 Mar 2025 13:00:55 +0000
Manifest next update: Fri 14 Mar 2025 13:00:55 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: y26AaHgvMHvXb2IninZfUZjnS324ME3SZ9SwpmqG2KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:97:f5:d2:25:50:3a:ca:e9:f5:ab:b7:ed:ba:bc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: Mar 13 13:00:55 2025 GMT
Not After : Mar 14 13:00:55 2025 GMT
Subject: CN=1f734fe5112e85d80f62496221467bb2a7465a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:ad:fa:09:8c:f6:0c:b9:81:41:64:2e:7f:
34:92:ec:97:c1:32:8e:d5:f5:5e:d9:eb:70:76:41:
d4:52:d2:06:9a:a0:3e:18:5e:ec:06:00:58:f6:14:
3f:e5:7b:95:06:cc:1e:af:ba:02:96:62:61:11:1d:
00:b9:06:97:c2:2d:2e:ed:ad:dc:3a:33:41:0d:75:
61:44:b9:08:44:8a:a0:a3:42:67:74:ca:e5:05:3f:
22:73:88:3c:17:ce:08:49:ec:1d:0d:d5:d6:3e:8f:
4e:07:19:a0:5f:29:9c:57:d2:9a:49:f0:e3:1a:d4:
14:47:22:71:50:cd:4d:c5:3f:a1:f6:33:07:b7:1f:
8b:d0:f4:93:53:2e:27:ce:ff:fa:72:d2:0e:78:bb:
72:b8:1c:c2:b3:f6:9b:49:a6:77:89:35:95:bc:73:
7e:c2:1f:9e:f4:1c:32:93:44:e9:41:9f:ad:ce:ed:
2f:52:7d:e5:ae:48:5f:d7:66:97:93:e0:8a:a0:43:
1d:9b:eb:13:04:51:8a:60:e4:2b:eb:9d:66:ac:e1:
fd:d0:df:f9:c3:c1:a2:13:c0:08:6e:e1:eb:43:17:
50:63:f3:e2:ff:a6:1e:84:27:36:30:ff:73:00:07:
1d:90:ed:44:7a:6e:f4:eb:fe:48:53:46:ff:b1:19:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:73:4F:E5:11:2E:85:D8:0F:62:49:62:21:46:7B:B2:A7:46:5A:87
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9f:10:67:50:40:45:13:f1:c7:71:e0:54:ea:f1:94:ab:95:
a8:c4:0a:cc:c6:4c:67:1b:d6:77:d5:ad:20:bb:d0:ed:50:cd:
61:76:cb:11:77:50:04:84:ab:77:82:c5:25:22:9b:6c:39:6d:
cb:d3:1b:08:4c:b7:b0:88:9a:de:66:9a:72:42:c3:eb:0d:ec:
93:b9:8c:db:02:6e:4e:79:29:08:5e:bc:c5:f8:5e:f3:2b:85:
55:f6:80:eb:4b:e5:90:77:32:3c:9f:65:05:89:98:fd:f8:69:
93:1d:40:99:f5:eb:b4:c8:5a:5d:27:93:aa:32:c5:16:c7:87:
6b:2a:18:8f:00:b3:1f:11:9e:76:1a:95:1f:dc:15:40:a7:8f:
19:0f:5d:af:a3:d6:a7:7a:3b:f1:6b:bf:5b:bc:46:6b:0d:43:
b0:39:18:78:f3:dc:58:03:6f:3a:9c:53:44:eb:16:e3:4f:c1:
e3:14:d8:7e:f8:19:a0:1c:ac:a6:8f:49:5b:86:6c:37:93:f6:
8e:e7:3c:42:d1:09:73:14:36:7e:37:98:f5:72:9c:49:89:de:
95:63:7a:ef:24:33:1d:eb:4a:51:dc:f0:75:fe:cd:77:d9:f5:
8e:f2:41:3b:97:5e:a7:08:12:45:e7:47:9d:18:31:03:66:76:
18:cd:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:23 2025 by rpki-client