Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json)
Hash identifier: dHJD/InrYcPR1XPf70J0xYAxbeC2WB6lbkt2pu4sU78=
Subject key identifier: E8:04:AA:0B:2F:C1:E0:02:FD:B2:A9:55:5F:BB:05:CF:48:3D:5A:3A
Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
Certificate issuer: /CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Certificate serial: 019652367C689EA37C104968BA7C3EDF971A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
Manifest number: 0F08
Signing time: Sun 20 Apr 2025 08:00:24 +0000
Manifest this update: Sun 20 Apr 2025 08:00:24 +0000
Manifest next update: Mon 21 Apr 2025 08:00:24 +0000
Files and hashes: 1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: jFZxKtOAl0dNDlBicJOrpKv4xrAY5lFWbVYy5L3CRiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:7c:68:9e:a3:7c:10:49:68:ba:7c:3e:df:97:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Validity
Not Before: Apr 20 08:00:24 2025 GMT
Not After : Apr 21 08:00:24 2025 GMT
Subject: CN=e804aa0b2fc1e002fdb2a9555fbb05cf483d5a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:7b:99:9e:21:ca:0f:1a:c0:34:58:ad:f7:
db:94:2a:0c:aa:c0:49:1d:c2:c4:d0:7e:b9:9a:8b:
ff:83:9e:0f:23:7e:91:47:bf:14:f8:c9:67:4f:a1:
43:92:11:56:da:51:3d:8d:91:d2:cc:66:29:2a:71:
fc:e9:a6:1a:f7:76:93:ca:03:9d:e8:eb:94:51:d6:
9d:d4:1f:65:e2:47:2d:58:b0:69:55:7a:95:2c:ae:
af:ec:05:bd:6a:85:a3:49:d2:cf:39:b2:cc:bb:80:
0f:d4:7b:03:34:b8:eb:17:d5:76:ec:6e:69:17:c6:
3b:03:43:18:ab:d6:a5:85:59:01:15:eb:6b:d0:1d:
ae:8e:e5:15:82:63:46:ba:60:10:07:b0:41:5a:b6:
fa:3f:08:d3:40:f9:36:5e:f1:fa:2c:e7:08:85:04:
11:99:c9:af:cf:fe:5b:14:8f:b8:45:fe:c5:92:86:
25:d6:26:be:9d:33:ac:b3:a6:54:de:92:8a:05:35:
0e:81:ed:37:59:0c:16:26:99:49:15:9f:91:07:fe:
84:e2:7b:ce:f8:7f:de:03:cb:b9:c3:0e:c1:87:56:
a3:ec:43:83:53:f3:54:11:04:d8:0d:f2:b0:31:17:
88:6d:bf:ec:87:b6:97:10:c0:3c:15:83:20:a7:2f:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:04:AA:0B:2F:C1:E0:02:FD:B2:A9:55:5F:BB:05:CF:48:3D:5A:3A
X509v3 Authority Key Identifier:
keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:77:db:9d:75:a7:60:a8:1c:ad:70:34:28:da:fd:67:48:b1:
b7:80:ed:c8:bd:6e:d0:5e:33:2d:bc:bd:41:fd:7c:6d:7c:01:
44:9d:f2:10:0a:b4:9b:00:ef:8b:86:5d:e6:68:8d:41:c9:6a:
4c:1e:5e:f9:a8:7c:30:ee:04:2e:98:3e:b9:ca:06:99:66:10:
99:ef:43:e2:12:d0:97:17:0c:3f:8c:2a:69:91:95:a1:be:c7:
30:be:d4:34:3f:01:ef:51:b1:ed:d7:13:11:ae:25:8d:79:2a:
ec:a1:21:68:c7:dd:bc:05:1d:43:e2:bf:7e:2e:e4:c5:63:d5:
8f:a8:2a:06:5f:f6:13:c2:53:b9:65:e4:82:34:d4:cd:0c:3a:
2e:ad:52:7f:17:54:9c:83:f8:53:8f:b8:c8:9a:ec:11:c0:f8:
43:29:3a:e3:fe:6c:f1:f7:b5:49:42:94:9c:f3:4e:52:ae:d8:
d2:47:51:3e:72:81:b3:ab:1c:9d:b5:10:f3:3e:c7:53:a9:e3:
98:92:9e:39:7a:21:b0:70:6e:95:d9:bc:4b:e2:81:7b:aa:0a:
7f:f5:d1:7b:91:3b:84:1e:60:d6:f9:e7:25:27:72:40:43:01:
10:98:ec:34:77:ee:ec:b9:1b:3b:d1:6d:5f:4b:58:e1:83:16:
5c:11:5a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:03:53 2025 by rpki-client