Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: SmXomY6MS4nePhIOq9cTyGJbAuXnjejZo7iEH2IKI1Y=
Subject key identifier: 33:FD:04:4B:5F:07:47:BB:8B:3F:84:AD:E8:01:D5:1B:6A:64:ED:8B
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 019645FBAA67BE67AE3AD43CF7C423A0C8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 0220
Signing time: Thu 17 Apr 2025 23:00:43 +0000
Manifest this update: Thu 17 Apr 2025 23:00:43 +0000
Manifest next update: Fri 18 Apr 2025 23:00:43 +0000
Files and hashes: 1: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: loQXwkVLq/Z4qTEg+NyRtW79/scz6Gmk9ulnJh0qbUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:fb:aa:67:be:67:ae:3a:d4:3c:f7:c4:23:a0:c8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Apr 17 23:00:43 2025 GMT
Not After : Apr 18 23:00:43 2025 GMT
Subject: CN=33fd044b5f0747bb8b3f84ade801d51b6a64ed8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:5a:15:ee:3d:7c:37:ad:41:a4:77:ee:67:
12:91:4f:a9:e0:e5:c5:58:1d:56:d8:1b:93:c1:7c:
5f:cc:ac:7b:da:aa:63:4b:93:0e:48:1c:06:13:bc:
53:e4:e0:72:11:5c:2a:d5:9e:27:bd:72:26:60:bc:
86:19:63:c6:47:18:49:d6:f4:90:ec:b2:12:d4:01:
23:d1:f1:02:73:0a:cc:d6:83:b9:1f:04:6d:17:6f:
06:24:8b:f1:14:7e:a3:9c:74:83:35:6f:a9:d4:21:
e7:e9:6b:52:51:f5:88:65:9e:c4:03:17:c7:7e:c6:
7b:89:2c:2a:ce:62:84:70:82:42:b1:45:0c:5e:ea:
40:47:e2:8b:32:fc:43:3f:9e:13:d5:23:e0:64:bb:
8b:cd:6d:ac:8e:a8:3e:8a:e1:aa:92:71:cb:01:08:
73:36:2e:fc:37:37:8a:d7:3d:52:93:8f:67:cb:34:
f4:10:c4:f3:6d:c4:64:e0:7a:21:0a:a4:da:60:34:
76:04:2c:3c:1e:6c:cc:70:51:71:e7:e1:7a:6c:96:
d4:1b:6d:2b:6d:00:19:6c:36:25:f8:c4:b8:80:11:
2f:2c:7e:01:a8:55:67:1d:85:e4:b7:32:d9:e5:e1:
4f:af:8b:fe:78:0c:59:60:17:a9:4e:a9:00:02:e1:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FD:04:4B:5F:07:47:BB:8B:3F:84:AD:E8:01:D5:1B:6A:64:ED:8B
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:46:2f:46:be:1a:2a:27:55:98:a9:43:52:ac:e3:2a:d2:c1:
8c:d9:c2:c5:b8:87:23:65:d3:46:bf:89:90:84:db:d9:85:c2:
69:13:29:37:92:b2:0c:0a:7a:fb:55:9f:a1:2c:c7:3c:e5:17:
08:d2:a1:ac:f7:20:06:cf:41:75:99:7f:5c:c0:d8:75:c1:60:
72:7b:eb:7a:07:8c:90:54:73:62:a0:43:64:f1:2f:9b:26:96:
77:3c:ca:b7:49:85:d2:4e:7c:52:52:9a:ff:ec:cd:a1:d9:1a:
3e:d3:c2:01:87:95:fa:95:99:58:1a:e4:20:5e:f6:38:e6:2c:
e1:ff:8f:31:88:d9:73:6f:59:72:38:4a:11:23:6c:c8:55:ce:
ef:ef:75:38:0d:6a:ba:31:59:1e:4f:4f:15:95:1c:17:b3:8f:
5f:cc:7d:b3:8e:59:c3:95:f0:50:a3:e0:53:0b:fe:80:29:96:
c8:4c:21:9d:d3:8b:77:40:58:f2:96:5f:23:9a:a6:cc:04:bc:
80:a4:c3:da:6a:f3:c9:3c:88:65:79:f0:5e:57:5e:e0:cb:71:
27:ca:30:e0:86:18:d8:ea:22:ad:dc:05:d3:89:29:1c:e1:12:
3f:d7:7f:82:9d:66:3b:32:a2:c3:5f:77:38:03:b5:99:76:10:
01:45:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:27:39 2025 by rpki-client