Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
File: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json)
Hash identifier: 4xCt0NfiXB6KUFk3kJqiMc4QXqkBkZ4WRzeb0DcHMpQ=
Subject key identifier: 38:A7:41:F8:24:00:B8:43:D0:1F:37:48:F4:37:30:D5:33:CF:EC:17
Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
Certificate issuer: /CN=363bd1b29c89edb944e28710d193874c94323eaa
Certificate serial: 01964F355CE01767E8535A859FA22982FE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
Manifest number: 01DE
Signing time: Sat 19 Apr 2025 18:00:19 +0000
Manifest this update: Sat 19 Apr 2025 18:00:19 +0000
Manifest next update: Sun 20 Apr 2025 18:00:19 +0000
Files and hashes: 1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: 4y9DkX0BCNSleJpfb5xBMv9UzsIAlPb9kdmxbV7dHC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:5c:e0:17:67:e8:53:5a:85:9f:a2:29:82:fe:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa
Validity
Not Before: Apr 19 18:00:19 2025 GMT
Not After : Apr 20 18:00:19 2025 GMT
Subject: CN=38a741f82400b843d01f3748f43730d533cfec17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:ee:d6:cf:09:b9:3a:5a:b3:97:63:f7:9b:
de:76:b1:86:cb:8f:46:fd:a9:64:2b:a2:2d:ca:77:
39:cc:fd:9a:c8:71:bd:b0:4b:11:19:b9:86:23:57:
28:d2:5e:60:75:5d:ac:45:60:7f:ef:53:a1:f2:b9:
f1:53:24:82:45:cd:fd:ce:28:e1:5c:68:b8:32:87:
9a:a2:5b:70:66:e1:b1:3a:cf:f0:6b:b2:7d:1f:17:
c3:0d:fc:0e:32:96:58:b3:82:db:46:d2:5b:ef:1c:
9b:7e:19:62:c3:e0:1f:73:8e:b9:f3:94:0e:c9:23:
51:41:f5:46:94:67:1d:4d:8f:03:b2:f8:1c:50:cb:
a2:2f:67:1f:a4:76:a5:97:ec:84:31:b6:3e:fb:88:
09:1b:7f:0d:a6:11:20:0a:a5:5e:73:3e:f8:63:88:
22:0f:e3:53:55:70:4a:1b:a7:04:13:be:8a:44:18:
5d:8a:cf:7b:62:9b:0d:e0:67:20:2e:e6:b2:13:ce:
bc:c0:e1:80:3a:83:61:ea:cb:ed:9c:fe:2a:51:7c:
19:e5:84:7a:ec:c6:88:4a:10:06:7b:00:17:d1:6d:
9c:30:da:e8:0b:06:04:d9:1f:f3:1f:64:46:44:48:
b7:bd:f2:12:b7:cd:9b:85:61:b3:b4:9c:f2:b6:56:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A7:41:F8:24:00:B8:43:D0:1F:37:48:F4:37:30:D5:33:CF:EC:17
X509v3 Authority Key Identifier:
keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:74:3c:c8:46:1b:86:b6:9e:c5:a9:34:b2:14:57:7e:4d:52:
cd:58:19:b8:54:38:18:31:36:ac:93:43:2f:3c:8c:28:6e:06:
ff:82:25:60:5f:66:d6:e0:79:b9:67:aa:80:9a:f1:77:65:39:
c2:b1:5a:71:6b:70:b3:e6:71:79:1a:b6:eb:d7:25:bc:d7:55:
1f:88:72:14:d0:98:b6:7c:7a:54:03:0a:96:8f:c3:d2:90:d9:
b7:6f:b1:67:a8:eb:b4:5e:4a:85:9c:58:21:a3:14:91:0e:6a:
34:bf:54:ae:1c:0c:bc:bb:63:ea:54:6c:9d:4b:46:98:11:b2:
d0:d6:3b:1a:bf:a8:74:fc:bd:92:20:84:15:ee:8e:4f:55:ca:
28:ed:87:81:40:43:3e:5f:00:9d:e1:e2:2a:d6:5f:f6:9c:e0:
93:b5:46:e3:2a:02:8e:05:44:93:35:37:b5:1a:45:8e:b7:df:
c7:4a:3e:02:4d:82:b3:f2:7a:83:4b:89:cd:ec:67:56:4e:72:
ee:c5:10:a6:9a:65:a9:b0:91:64:f3:17:4c:32:54:44:eb:b9:
13:88:98:1e:43:dc:af:b7:a0:f0:8c:1b:1b:40:3d:c0:36:f3:
47:55:c6:ed:f1:21:ef:e9:b0:61:a6:5b:77:44:85:2c:f7:1c:
b8:cf:08:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:22 2025 by rpki-client