Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: FhuFk2wE1ElWwXDgWZCR4qe0ZhXWGFKEVPX+filHk1c=
Subject key identifier: D4:31:A7:F0:98:A1:6E:A0:0E:39:D5:20:E8:40:41:C5:EE:4B:31:B1
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 019659826A7422F1E960022099ED0F521C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 1055
Signing time: Mon 21 Apr 2025 18:00:41 +0000
Manifest this update: Mon 21 Apr 2025 18:00:41 +0000
Manifest next update: Tue 22 Apr 2025 18:00:41 +0000
Files and hashes: 1: JqPeTKIiSqFLnMuoE0z5MMpECyE.roa (hash: Sm0VFijktfATyc4h+uw4DoW/FSQrn3UdeoSnPalbaPo=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: hBkJhsKYJEquU6jjga5XI5u9oqa6G3DQnXYSMliMS7g=)
3: VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa (hash: 53UxHJyDkYLtFVil6COplJSwSFn/MNxw2tMZPgc57WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:6a:74:22:f1:e9:60:02:20:99:ed:0f:52:1c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Apr 21 18:00:41 2025 GMT
Not After : Apr 22 18:00:41 2025 GMT
Subject: CN=d431a7f098a16ea00e39d520e84041c5ee4b31b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:83:d4:09:39:3e:4a:63:9e:e7:f1:32:2e:
28:5d:f6:88:d7:94:2f:8c:74:3d:46:e9:fa:80:49:
bb:ee:b2:f8:a9:bf:fa:6d:f1:3d:af:de:df:bb:13:
df:21:5f:01:8c:02:c2:4b:bc:6c:20:64:aa:82:be:
bf:ec:bc:35:b6:8b:9f:6c:07:56:0c:23:67:79:ae:
c0:5f:c7:e0:ad:4f:76:6b:36:e7:f1:d3:ec:69:1d:
b0:98:85:e9:de:45:ba:49:f2:fb:4a:fa:1c:03:c9:
49:bb:b0:55:3d:53:a5:43:41:9d:81:f9:33:5c:e2:
74:54:24:be:19:c4:2f:1c:b3:ea:a6:f4:5b:02:d8:
61:00:31:c5:08:bc:07:17:4a:c8:74:17:a6:08:ce:
fd:d0:21:4d:dd:ae:26:7d:e1:09:ac:82:36:a2:99:
55:7c:8a:f3:e4:6f:04:fe:26:4b:b6:6c:14:00:1f:
bb:3f:b8:1c:82:c3:f2:ce:97:39:75:3b:97:2d:b7:
4c:c6:b6:1b:6a:d6:b9:89:5e:43:2c:59:68:dc:1a:
c6:99:6e:8a:11:f8:ba:8c:fc:be:68:e0:f3:83:6f:
ab:e4:87:4e:86:62:ef:45:50:ba:75:9b:e7:f2:58:
16:d9:65:13:c2:e4:a1:c7:7f:75:98:d2:9c:96:e5:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:A7:F0:98:A1:6E:A0:0E:39:D5:20:E8:40:41:C5:EE:4B:31:B1
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a0:a0:b8:cc:56:84:fb:72:1b:54:ea:2d:36:70:66:de:70:
62:57:08:6a:16:c2:78:97:88:a3:35:da:79:f1:41:50:b6:57:
0d:a5:7e:5b:a2:8f:d2:ff:1b:2a:30:8a:28:25:1a:bc:e1:61:
a9:a9:ae:53:9e:0e:bf:35:99:72:53:75:1e:9a:c9:bf:ed:11:
c8:77:02:af:4d:ad:7c:07:f2:58:f2:24:93:4a:e8:b3:4f:f9:
72:14:80:c8:ba:56:c9:1e:48:52:bc:ae:c2:35:fb:04:97:5b:
95:bc:4f:cc:04:fd:35:47:bd:1b:23:ef:c7:4c:b0:07:32:d4:
77:8b:3f:c5:90:10:7d:62:63:ff:fc:8f:e5:0a:fc:e2:46:6b:
41:e1:1b:6f:b3:70:c7:45:79:7a:ab:4b:f1:c7:7f:e3:a9:85:
a7:04:70:4b:e4:6d:db:1d:ce:d6:59:94:c8:ea:99:92:49:03:
5f:a2:cd:3e:8f:a6:df:9b:e5:41:e0:74:8e:0e:b5:50:e2:bb:
09:4c:dd:ce:5a:73:4a:ed:12:15:97:ad:8a:b3:1e:fe:4a:56:
0a:03:be:a7:81:78:bc:f7:6a:70:6b:93:68:31:29:3f:8d:34:
c9:5c:ea:bc:7c:a8:93:7b:ca:6f:85:fc:01:1d:be:90:b8:52:
ca:db:6e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:18:29 2025 by rpki-client