Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
File: N-1J76yXlZh3cazcd6DiKJBCd60.mft (raw, json)
Hash identifier: +oqTC+bFYCOIcAijYEkdJ3QE7Tjqszo3DrP8f5GBKIw=
Subject key identifier: 9D:E5:DA:C3:8B:91:12:6F:29:13:CA:94:47:D0:49:C8:27:16:C3:69
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 01961C24369F410F3D256C59C18D78B4CC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
Manifest number: 0CDC
Signing time: Wed 09 Apr 2025 20:00:57 +0000
Manifest this update: Wed 09 Apr 2025 20:00:57 +0000
Manifest next update: Thu 10 Apr 2025 20:00:57 +0000
Files and hashes: 1: 3R2oLYAWIxvU3vOCY9T-jGflBdY.roa (hash: 2FML5v0SfL1lum2iuE3qWeIT2u7iaV71VaL91S9NgIQ=)
2: CYs8Y4QkC6pLrRdUhQ8lF-crHv0.roa (hash: 2fQ0fJbFJmLOokw4tzaSLmT6+UmzzfHaw4FKPEJcqOo=)
3: N-1J76yXlZh3cazcd6DiKJBCd60.crl (hash: bejUoTxtFYVRpLM/wYzwzSTfiMrSHTffXHcA9vpjb7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1c:24:36:9f:41:0f:3d:25:6c:59:c1:8d:78:b4:cc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Apr 9 20:00:57 2025 GMT
Not After : Apr 10 20:00:57 2025 GMT
Subject: CN=9de5dac38b91126f2913ca9447d049c82716c369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:31:b4:1d:44:38:45:14:a9:ef:59:4d:c3:
8a:14:e6:87:fe:9e:87:b1:7f:c9:05:06:13:ea:cc:
f5:fc:fd:15:8f:6f:0e:4f:aa:93:2d:75:db:b4:5f:
03:8a:73:a1:b0:d4:dc:f0:40:4c:cc:58:8e:fe:46:
88:91:e3:96:b7:43:36:1f:22:cb:1c:83:73:8d:4d:
e6:0f:d6:d3:4c:65:84:7e:ea:69:2f:54:8c:14:39:
f0:7d:80:77:8a:8e:48:cb:6a:ee:0c:91:bf:c4:07:
eb:05:44:c4:cf:e2:a8:fd:d0:fa:8e:87:24:19:da:
f2:40:6b:18:a8:9f:97:08:c9:2e:87:9d:46:90:b7:
64:30:6f:b1:83:95:35:14:06:aa:3c:93:7b:df:06:
f2:68:30:6d:c5:8b:57:3a:50:c3:e7:83:2f:6f:4b:
b0:70:7c:8f:12:24:91:d6:5e:c8:d4:6d:a4:05:99:
7a:0c:90:b9:0f:fe:78:0e:f6:d9:ce:f0:f6:c9:b9:
a5:e5:10:80:5b:9b:51:dc:93:cd:c3:9f:b7:ec:ff:
cf:03:49:e3:51:c3:f2:96:4f:45:8c:6d:93:fe:19:
8d:07:ae:80:1e:45:3a:54:92:fe:36:67:09:b2:4b:
ac:7a:5a:de:58:17:20:c4:be:0a:2d:68:65:d1:37:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E5:DA:C3:8B:91:12:6F:29:13:CA:94:47:D0:49:C8:27:16:C3:69
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1d:d4:fb:32:3e:df:e6:d0:99:6d:1f:d1:6e:27:b5:b4:a8:
d1:13:bd:8e:60:f2:bf:e5:cc:32:17:f3:30:ff:3b:0a:eb:f7:
d9:a4:a8:94:f1:fd:c1:73:ca:aa:e7:52:27:e1:57:fc:d0:6c:
e0:64:0a:9b:fa:f0:87:e2:bd:8a:44:16:0c:a8:d7:91:70:ee:
f2:85:6c:cc:37:ae:84:30:5a:26:22:ab:8b:40:31:0b:82:72:
9a:a2:34:99:8b:4a:02:ea:33:67:d2:ea:94:74:46:95:2d:66:
0f:55:c3:e0:dd:2c:d3:75:0b:88:0c:e6:23:1e:3f:f1:e2:34:
64:93:eb:eb:2a:8d:8e:54:0d:a8:5c:a6:7f:c1:06:c3:6f:fc:
08:51:77:5a:1c:ad:5a:63:d0:0a:7e:89:aa:b0:0e:9e:31:6a:
fc:73:21:6d:9f:fc:ae:ca:3c:83:24:9b:a6:ca:0e:15:04:d6:
c7:c7:85:ee:43:67:54:2f:3d:c3:0c:6b:d8:02:78:0f:11:16:
ed:f3:28:e1:9e:28:de:cb:87:83:54:f5:bf:6a:e2:7c:83:55:
13:5f:62:1b:47:54:df:e3:92:9b:b5:92:cb:de:d9:a5:1f:49:
ce:7c:84:6b:4a:6f:68:99:7e:0c:46:f2:78:ec:f3:bc:81:6d:
61:1c:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:38:28 2025 by rpki-client