Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: nPM3cY0q+HqnJw76XXvD+2hLLwx3mL5ydaOBJXhZjxE=
Subject key identifier: 07:F4:1F:64:31:43:AA:9C:9D:B0:B7:78:E5:2C:15:5B:6F:09:A2:68
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019652001997D92B14350AD47E3D63F82459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 1457
Signing time: Sun 20 Apr 2025 07:01:00 +0000
Manifest this update: Sun 20 Apr 2025 07:01:00 +0000
Manifest next update: Mon 21 Apr 2025 07:01:00 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: twLEX1OhwoOt2ED6tf9Ch8mckucMO1O3eRbs0dMnvTw=)
2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=)
3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:19:97:d9:2b:14:35:0a:d4:7e:3d:63:f8:24:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Apr 20 07:01:00 2025 GMT
Not After : Apr 21 07:01:00 2025 GMT
Subject: CN=07f41f643143aa9c9db0b778e52c155b6f09a268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:05:25:36:48:a5:3b:80:f5:55:cd:dc:9d:60:
c6:13:1e:bc:02:e3:fa:40:cc:44:bc:87:4e:20:ce:
43:a0:23:5e:98:2e:fb:d9:c6:ac:d6:62:a8:0b:02:
c4:73:a5:dd:68:94:94:0e:39:36:df:94:d7:37:30:
62:d5:a2:e2:d7:a7:da:53:c6:a1:af:17:2b:ac:b8:
3a:6d:0e:16:ad:58:40:de:3d:dd:ae:4d:58:8b:a8:
50:0e:d4:df:bd:77:65:93:1c:35:d7:8d:75:79:98:
9f:06:1a:7f:d5:bb:e3:4f:3d:a1:c0:c7:1b:fa:49:
82:a7:91:f3:89:1d:ab:9a:c5:26:9f:09:fe:eb:46:
ba:e2:e9:0a:d1:fd:83:75:66:ef:89:b9:b0:18:fc:
7a:0f:b0:a0:4f:6a:08:58:a4:41:9b:6c:d0:2b:3c:
43:b0:46:d8:12:48:2a:12:fe:a3:69:99:b2:9b:2a:
a0:62:6a:4a:0f:f4:e6:1b:9d:d1:01:1a:0c:ba:ef:
2c:07:0f:5f:0a:e2:bb:38:4f:c7:e2:53:67:5f:17:
14:f8:f5:d7:9e:62:8e:24:c1:3a:47:dc:a8:bc:cd:
ed:dd:19:5d:e6:1a:29:97:0b:88:1f:7f:fc:a5:b5:
20:70:79:61:52:9d:33:16:40:bb:f9:d5:7c:1a:cb:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F4:1F:64:31:43:AA:9C:9D:B0:B7:78:E5:2C:15:5B:6F:09:A2:68
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:eb:49:e1:8c:f3:02:97:78:6e:cf:fd:3f:48:00:90:b2:e4:
c2:77:84:39:d3:86:91:08:96:d5:38:2e:41:87:ef:8c:52:97:
60:93:b0:67:b9:d7:0d:60:de:bc:e2:b7:83:ed:45:85:2b:0d:
cc:87:09:6e:80:0b:0b:ce:9b:33:41:93:be:05:6b:34:35:96:
3b:4c:3f:9e:4f:eb:c7:50:e0:7c:50:50:c3:43:6b:1b:5a:6c:
c0:3f:72:dc:94:23:0d:58:c1:71:91:03:6e:32:fc:50:94:b4:
66:bf:30:c2:5e:c4:a5:5d:29:c2:26:f3:7e:c0:66:eb:94:52:
9a:f7:54:b3:02:b6:5c:d8:ec:91:18:03:6f:34:eb:01:35:27:
b9:40:7c:d2:50:c3:7f:cf:e6:c8:ee:62:75:73:e9:e6:e9:5e:
64:93:b8:4a:c8:7f:7d:6f:2d:ce:3e:29:8a:12:fc:db:63:a8:
f3:3d:fc:83:1d:2c:81:1c:44:16:51:e2:64:e7:4d:c8:d4:40:
a8:4f:d4:f1:b7:69:22:ce:8c:54:88:55:6b:61:86:01:9e:31:
c4:9f:41:78:31:64:98:c5:ec:70:02:c1:15:e9:d7:ef:5c:db:
8a:a7:9a:5f:17:41:fb:7f:17:00:b9:e7:25:16:b0:70:3e:e8:
11:29:8c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:53 2025 by rpki-client