
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
File: N6TS5C8jYsLm71K4Lxn35WN1fgw.mft (raw, json)
Hash identifier: FjtehMEg91CdkWk0r9ZYLFJrzx15M7KjWovm0DsU1m4=
Subject key identifier: 3D:80:AC:DA:6E:2B:A1:F9:F0:A3:DA:18:A1:5D:B3:09:0E:CC:A6:1B
Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
Certificate issuer: /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Certificate serial: 01964F35552B008EBF56A248C81C8A6442CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
Manifest number: 0226
Signing time: Sat 19 Apr 2025 18:00:17 +0000
Manifest this update: Sat 19 Apr 2025 18:00:17 +0000
Manifest next update: Sun 20 Apr 2025 18:00:17 +0000
Files and hashes: 1: 3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa (hash: eRzqoJ+wnFE50kPBIiEdOOr71bv/+CxmFvCCuPDTNi4=)
2: N6TS5C8jYsLm71K4Lxn35WN1fgw.crl (hash: 7qZ4OJOAIGky+ws1RlykqHDu5GHS1urk77Oc00mCw68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:55:2b:00:8e:bf:56:a2:48:c8:1c:8a:64:42:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Validity
Not Before: Apr 19 18:00:17 2025 GMT
Not After : Apr 20 18:00:17 2025 GMT
Subject: CN=3d80acda6e2ba1f9f0a3da18a15db3090ecca61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:93:ec:f1:02:43:a4:98:87:43:ac:31:28:
5d:5f:85:11:ab:e8:fc:e3:40:6a:b4:84:36:a9:37:
e0:32:66:25:be:16:0f:85:20:97:c2:7c:de:38:d3:
1c:d9:ad:b1:3f:45:92:0b:ff:94:76:e3:5c:45:15:
d4:3d:dd:06:c0:1b:4a:9e:04:5e:b2:f4:4a:6b:71:
3d:06:67:a7:a3:12:c0:e3:0c:36:3a:82:d5:01:0b:
c6:4d:8c:df:73:9b:a2:9a:a4:3d:2c:64:b7:c5:62:
73:ef:88:2c:fe:c3:20:52:a9:14:6d:dd:d9:f4:82:
c1:f1:47:e4:cc:77:ee:7c:b3:ce:35:db:25:f6:38:
47:72:7d:c9:89:04:ed:cd:0e:cc:28:ef:28:81:8a:
2f:e7:3e:bf:f9:cf:cf:a3:c1:be:94:e2:ed:93:f4:
07:2f:4c:5e:17:06:1d:f3:fe:ae:c4:ea:fe:3d:1c:
b0:6e:04:33:7d:c3:0d:43:b5:f0:d6:3e:4a:c9:66:
d5:23:30:3e:4a:fc:29:ea:00:4e:a7:a2:db:94:76:
f5:7b:a0:87:f1:44:07:9f:41:d3:c8:c3:91:1f:c0:
43:6a:d1:c5:fd:cf:e8:60:01:2b:66:81:ec:03:91:
ca:c5:95:21:52:75:3d:e5:15:4a:4d:59:dd:b8:4e:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:80:AC:DA:6E:2B:A1:F9:F0:A3:DA:18:A1:5D:B3:09:0E:CC:A6:1B
X509v3 Authority Key Identifier:
keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:99:d1:d1:07:a4:5c:98:9d:70:80:fc:0a:25:c4:17:b1:e6:
95:35:80:d2:b5:77:7a:46:8e:da:87:51:32:89:f1:be:35:79:
ba:e1:2c:de:69:90:8d:ea:87:c8:59:93:32:b3:36:3e:09:91:
2a:8c:43:e6:ce:ba:6b:93:5b:91:2c:f6:9c:0a:17:a2:5f:68:
3c:0e:98:c0:a8:c1:57:37:c0:6a:a2:7b:ea:bf:ff:b7:3a:54:
35:ed:d1:b9:be:79:5f:23:38:56:ea:e6:03:2c:f7:97:2c:c0:
b8:dd:68:d1:1a:c1:7e:27:ba:25:00:04:61:c3:d5:bc:5e:cd:
49:69:5b:c0:a8:da:a4:f7:14:c2:4f:53:0b:75:f8:46:43:24:
20:8a:91:13:b3:c8:5b:95:4c:f8:db:bc:e7:25:8a:3f:00:dd:
d4:fa:40:ad:2e:6a:c6:b8:e5:1c:51:9a:cd:71:35:fd:cb:c2:
33:99:49:a7:fd:11:1a:0a:27:9d:2a:fe:f8:7b:62:ac:fc:a0:
60:26:1b:d0:23:93:0c:74:f7:81:6f:72:ac:f0:a6:71:c2:e3:
58:6c:e6:52:e7:85:c7:2b:ca:6a:7c:a3:44:fb:d6:ac:f6:c8:
87:70:1a:7c:95:19:a3:04:ce:d1:9b:29:08:6f:a3:f2:22:86:
ca:2e:dc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:08 2025 by rpki-client