Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
File: N69IEx7Nnco97yst54jxUGBid1U.mft (raw, json)
Hash identifier: Az9QaDtDtVf2ut/zddn4X8nTHh12S0IPTrcMzlDM4tE=
Subject key identifier: 44:60:44:E9:31:21:30:FD:0D:91:63:4E:2D:A9:01:39:CD:EB:2F:07
Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
Certificate issuer: /CN=37af48131ecd9dca3def2b2de788f15060627755
Certificate serial: 019652DB613543A93DA86F086A926EF4253E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 11:00:30 +0000
Manifest this update: Sun 20 Apr 2025 11:00:30 +0000
Manifest next update: Mon 21 Apr 2025 11:00:30 +0000
Files and hashes: 1: Lv93kZr3FrSvC5fAGNeod6j_6yM.roa (hash: 37H9uvEBQ9sb3AaWMyi05t5K1mxRb/qz/+D6tmcVRbg=)
2: N69IEx7Nnco97yst54jxUGBid1U.crl (hash: oDdUZa3sl8UTD/bgiJ91IAJOkJj9iz9m/CT6tFNAifs=)
3: nCYRFHxESiPTOP0DiwWAA3vf6pc.roa (hash: n1iHEUmqWKjUYGzT2fByz8YLuqOJY83LkJFmv6uksFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:61:35:43:a9:3d:a8:6f:08:6a:92:6e:f4:25:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755
Validity
Not Before: Apr 20 11:00:30 2025 GMT
Not After : Apr 21 11:00:30 2025 GMT
Subject: CN=446044e9312130fd0d91634e2da90139cdeb2f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:11:ed:53:31:3a:48:6e:0a:49:54:f2:52:
e8:cc:f4:fe:f3:d7:1c:0f:f7:43:03:07:bb:0f:98:
06:23:2e:1c:19:4a:1e:0d:46:8d:27:31:eb:fd:a3:
d8:c8:be:e9:d2:14:c8:2a:0d:07:d2:d4:2d:05:eb:
be:7b:7f:a6:3c:b0:86:50:64:c2:cc:75:ce:11:d6:
0a:30:3a:2e:5c:d6:27:9e:3b:ab:7e:41:e2:69:c4:
6c:57:8f:a5:4b:e1:d8:79:03:49:11:a9:ec:a9:4f:
36:ea:a0:a8:92:18:ac:fe:00:48:51:60:29:11:e2:
53:b5:34:a1:9e:4b:4e:ef:3a:64:9c:36:89:10:18:
c1:fc:e6:18:5f:19:1c:60:08:6b:db:6a:a9:78:fc:
7b:6f:c4:ad:3e:bc:3a:2f:d9:07:37:50:d1:c4:4d:
bb:79:9c:e0:31:42:60:9b:9b:87:38:29:70:d6:88:
a0:89:73:3c:9e:17:af:09:ee:0f:c3:71:d9:b6:fa:
1c:52:b4:11:23:1b:1f:f7:bd:c4:03:40:1a:12:ff:
5f:aa:ca:96:06:27:37:77:88:80:48:57:e4:b3:e9:
9e:b5:09:fb:45:a5:07:a9:51:26:42:37:5d:9b:06:
a2:6f:08:20:c7:dd:c1:d9:4b:4c:ef:0f:62:73:aa:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:60:44:E9:31:21:30:FD:0D:91:63:4E:2D:A9:01:39:CD:EB:2F:07
X509v3 Authority Key Identifier:
keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d8:fb:26:04:6a:02:2a:eb:0c:72:91:29:9c:5a:b1:da:32:
8a:5b:b6:8f:da:7f:91:59:ed:33:58:b0:fe:82:5a:08:c1:e4:
48:dc:a8:66:3f:62:42:56:00:7e:30:a1:34:f4:1d:57:3d:1f:
7d:af:a9:54:93:51:a3:6d:2a:bb:0a:ab:f7:86:96:71:b4:83:
39:02:f8:13:50:bb:a1:9a:2f:af:30:97:8b:70:5b:2f:8b:90:
27:66:8d:40:13:b4:04:a1:77:ec:45:0b:18:dd:a5:ae:21:1a:
ce:35:fc:63:13:bd:9e:01:93:a3:ca:b2:f8:34:af:9a:a0:ec:
87:1d:e1:40:e1:a1:be:34:a8:fa:04:43:4f:ef:97:12:42:7e:
12:a7:12:2e:44:d3:f6:9a:4b:f8:23:10:97:52:fc:3b:96:66:
d6:46:82:7f:fe:68:52:74:68:5f:1c:28:31:11:56:2a:0a:d8:
0b:24:15:e3:68:e9:ab:db:74:ad:b7:a0:84:78:ef:df:04:dc:
5e:87:d8:f2:15:39:ea:70:88:e5:4d:db:a4:61:e1:32:a4:9b:
dd:05:80:7c:5a:67:18:3d:b2:3d:d6:9f:cf:0f:db:d3:ac:7d:
5e:8c:d4:96:ad:96:63:92:9e:78:16:14:d0:86:c0:71:4b:96:
d0:52:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:33 2025 by rpki-client