Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: Ha81r1xEBrtBl0OcriCG29bkrSYAr7VH2JgYq/OClmA=
Subject key identifier: 72:D3:89:3C:DE:A4:25:F5:A5:DB:FD:A1:23:EA:B9:56:0B:89:70:CC
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 01958C96F88B80281EC9D3CBEBA6B8EF3601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 01C0
Signing time: Wed 12 Mar 2025 23:00:59 +0000
Manifest this update: Wed 12 Mar 2025 23:00:59 +0000
Manifest next update: Thu 13 Mar 2025 23:00:59 +0000
Files and hashes: 1: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: JvXreayRSGSTwxDAMNcFLQV95tNx29AedHR0Cm2lxUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:96:f8:8b:80:28:1e:c9:d3:cb:eb:a6:b8:ef:36:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Mar 12 23:00:59 2025 GMT
Not After : Mar 13 23:00:59 2025 GMT
Subject: CN=72d3893cdea425f5a5dbfda123eab9560b8970cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:00:3c:fb:c7:54:99:cf:95:62:43:29:b3:
74:b1:71:5c:c8:7e:35:12:a8:94:e5:9a:98:9e:31:
c8:10:99:ed:10:ed:6d:06:c6:fa:64:48:0c:e3:b5:
9a:8a:48:29:14:13:8d:d2:d2:0d:83:1b:d3:e3:f0:
a1:2b:85:cb:d9:96:f8:9e:76:b9:9b:7f:c9:cd:a8:
cb:fb:34:be:e4:c3:1a:16:b3:90:ac:7a:b2:61:ca:
85:71:62:7e:c7:8f:98:14:1a:79:2b:d0:72:c1:9a:
0a:df:43:7c:a9:74:c8:f9:5a:14:e8:63:81:ce:31:
0b:f3:31:54:62:07:fc:2f:ea:dc:3b:98:d8:3a:7a:
76:57:f8:61:57:0a:47:18:7a:40:f1:89:6e:86:c1:
af:15:c7:c5:de:d7:1f:71:71:35:09:bf:aa:f4:c9:
6f:2a:a4:90:80:cb:9c:7a:ed:9c:3e:6b:ae:64:2c:
7b:7a:5e:58:f5:4a:6b:d6:44:c4:47:15:24:d4:c8:
8d:37:c5:1d:24:df:b2:4f:be:c5:5b:40:94:59:19:
1c:eb:dd:17:2f:f7:ac:92:07:ad:d2:37:6d:2e:e1:
49:77:28:ac:1d:1d:ed:9d:0d:67:fd:a1:c0:73:55:
c6:ac:60:14:2f:11:ec:1e:c6:a8:42:c8:aa:6f:c5:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D3:89:3C:DE:A4:25:F5:A5:DB:FD:A1:23:EA:B9:56:0B:89:70:CC
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f3:eb:2d:e1:40:69:9b:53:b1:d1:1d:7a:bd:08:fe:5e:85:
19:43:27:12:95:48:9b:60:df:1c:9b:34:6f:5b:9f:b6:5f:20:
00:8c:f7:f1:31:d5:30:4b:9d:d3:fd:e0:10:ed:53:fa:79:54:
3e:a5:f2:ed:9c:92:7d:70:b3:e4:a7:24:c7:2a:9c:63:c2:8d:
3e:a9:22:65:a7:73:a2:ae:9f:87:47:d4:d0:d0:07:db:b8:7c:
0e:27:62:b0:24:4f:fc:17:10:0a:1a:65:05:2a:0c:c9:9e:64:
b3:1d:93:ce:66:fe:41:49:60:f8:d5:84:76:11:b1:ce:dd:f9:
08:1d:d8:cd:8d:d4:6e:01:b2:dd:c6:2e:7f:d4:46:47:b6:43:
27:7d:a1:b8:e0:08:de:e6:58:4d:fb:e8:95:e8:a2:a8:fe:32:
20:2a:2b:07:58:0a:ea:13:a7:9b:e5:70:3b:68:25:e7:d3:6b:
4a:47:2c:8e:95:d9:59:0e:66:c1:b5:25:61:b7:8c:db:8f:35:
53:31:22:46:d5:71:40:60:8f:47:30:30:41:6e:25:27:e1:e3:
20:68:6d:a1:11:22:31:f1:7d:c4:1f:5f:ad:84:b1:45:68:24:
66:99:ca:86:0a:9d:be:8b:f1:78:cf:b9:32:02:77:b6:59:31:
89:d5:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:39 2025 by rpki-client