Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
File: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft (raw, json)
Hash identifier: qCC1A3AC8sIuK9FnTEOk+FEpE1EuqcMYsd2lemPn3Z0=
Subject key identifier: F7:A3:C5:44:7C:93:41:55:CD:5E:DC:EC:56:6C:E6:85:CE:51:9F:F5
Authority key identifier: 9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA
Certificate issuer: /CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
Certificate serial: 019636F652D0359560976B1A8747CF83A715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
Manifest number: 037B
Signing time: Tue 15 Apr 2025 01:00:34 +0000
Manifest this update: Tue 15 Apr 2025 01:00:34 +0000
Manifest next update: Wed 16 Apr 2025 01:00:34 +0000
Files and hashes: 1: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl (hash: co6zIqeTLUMNbSFjtu4fZ5Qzh4X9Fa047mgEqJxDWiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:f6:52:d0:35:95:60:97:6b:1a:87:47:cf:83:a7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
Validity
Not Before: Apr 15 01:00:34 2025 GMT
Not After : Apr 16 01:00:34 2025 GMT
Subject: CN=f7a3c5447c934155cd5edcec566ce685ce519ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:67:b9:ad:ab:d2:03:d8:2e:a4:6c:5f:9c:
48:77:b9:bc:96:ce:0f:b5:e5:aa:62:5a:c7:30:a8:
c4:11:49:56:fa:8e:4e:13:dd:db:02:5b:23:ff:a7:
fd:e0:6b:b9:82:c0:4e:ad:df:68:b9:d9:2d:cb:e8:
7e:21:de:b2:16:6a:03:e5:a0:77:41:8e:86:51:19:
2f:a4:51:ca:44:01:3b:60:07:d8:3c:ab:2e:b2:b8:
ce:38:47:92:5d:ee:d0:cd:90:d7:73:6d:1b:62:32:
d5:0b:be:49:f3:2e:cb:37:9d:55:94:45:fe:f0:ee:
7e:24:7d:66:8f:14:bf:f1:30:9c:31:ad:1c:31:f3:
09:7c:f6:1d:83:8d:7a:f0:72:57:fa:f1:42:07:55:
94:1a:7d:a7:8e:00:3c:7d:57:b6:ea:93:3f:f5:47:
de:91:89:0f:8c:22:53:cc:91:32:d5:76:2d:81:5c:
92:cb:00:85:59:8e:70:2a:ad:fa:e0:19:8d:e2:7d:
2f:63:be:83:52:cb:ca:ba:1b:53:4e:0f:48:ea:43:
0d:ce:cf:e0:44:dc:4b:0e:e4:91:76:68:5b:fa:7f:
8d:dc:24:a4:ce:4e:15:c7:db:90:6c:32:44:7e:f8:
65:29:58:9c:e0:4a:3d:b8:1f:ce:2e:54:ec:5f:c3:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A3:C5:44:7C:93:41:55:CD:5E:DC:EC:56:6C:E6:85:CE:51:9F:F5
X509v3 Authority Key Identifier:
keyid:9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:96:6b:f1:c4:7a:c5:f7:e2:1d:6d:71:58:e9:b4:db:3f:16:
42:c8:40:83:7e:ca:28:71:b1:fa:2f:a3:ec:51:e5:a8:73:b6:
42:c4:10:90:9c:73:f0:4b:f5:b8:4b:3b:19:52:f0:7c:4a:88:
87:15:2b:15:27:41:af:66:cc:01:98:cd:17:6a:cc:3e:c9:4c:
fa:cd:0d:69:1e:fa:5d:7e:5b:9f:7b:f5:46:3e:a3:73:f0:f1:
db:d3:49:94:d1:f8:67:e9:ff:c4:ec:ba:e2:73:bb:16:b3:82:
fa:0c:31:b4:00:64:76:ce:20:13:c4:1b:b9:6a:66:af:07:ad:
1f:80:2d:79:73:35:dd:0a:53:be:e4:51:e0:6c:06:0e:fb:ec:
f9:ac:9d:97:39:e1:76:23:24:c4:14:8c:f0:bb:07:f0:e3:6a:
95:b4:ba:e4:79:a2:86:5e:9e:90:89:d9:71:32:92:15:26:c6:
77:73:e8:1a:80:8a:2a:38:b2:29:36:13:e6:f1:33:28:18:e1:
0e:fc:65:cc:11:df:27:1a:85:9f:e4:c0:c3:5a:14:d1:94:ac:
79:85:98:c0:4a:20:10:83:7b:67:86:27:98:14:b1:f2:a7:4c:
87:6e:ab:06:ae:bb:a0:69:96:03:16:21:b4:ab:2e:0d:0c:db:
46:19:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:58:24 2025 by rpki-client