Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: gpRf2uezPrEPHe/y8ctOh1ORnCNRptppFfm3RCgdxLQ=
Subject key identifier: 3B:B3:BA:48:2B:F1:96:39:EE:B3:81:EB:DC:D7:50:B3:52:CA:69:77
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 0196428D30701BC36F3A49645AEE0E49BB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 0E43
Signing time: Thu 17 Apr 2025 07:01:11 +0000
Manifest this update: Thu 17 Apr 2025 07:01:11 +0000
Manifest next update: Fri 18 Apr 2025 07:01:11 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: P2vfwWC57eRN9kpeHD7UX+Vm4P42+TvoJ3sUW8hIJmM=)
2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:8d:30:70:1b:c3:6f:3a:49:64:5a:ee:0e:49:bb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Apr 17 07:01:11 2025 GMT
Not After : Apr 18 07:01:11 2025 GMT
Subject: CN=3bb3ba482bf19639eeb381ebdcd750b352ca6977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:ba:d9:6d:5d:b9:b0:5c:27:00:e3:61:95:
09:dd:7b:0d:4b:91:5f:38:27:a9:bc:06:56:7b:a3:
17:7c:c8:4f:e4:97:88:4e:ec:89:5d:85:56:22:ba:
0e:f9:f0:e9:dc:f7:c4:d7:41:ee:ce:ac:92:69:1c:
ff:eb:66:18:52:6d:b0:d0:b0:b2:a2:d9:00:7d:7b:
bc:ba:15:dd:82:bc:03:f4:98:1e:35:78:ec:1e:5f:
61:f7:2d:db:5e:b3:52:30:11:f5:26:ca:7d:c0:61:
37:f8:a1:32:b9:4b:a8:e3:75:4c:f3:ce:ed:fd:aa:
37:6f:51:2e:ba:e2:1c:59:82:ad:17:7e:42:14:91:
2c:f3:e1:ab:18:8f:5e:1b:99:f2:3b:1e:b5:9a:88:
98:fb:50:9d:ca:ec:93:45:81:aa:1f:bb:8e:26:f2:
dd:8f:6a:bb:1c:76:b0:42:fe:af:7c:44:4d:55:40:
07:04:e1:f0:e1:23:6f:eb:9e:7c:b2:83:a3:b1:18:
bd:4e:e2:32:e6:9c:9a:a4:49:7e:32:1d:de:8b:91:
13:47:01:59:af:6e:60:cc:08:0d:25:30:ae:00:41:
d7:55:1d:ec:37:8e:a8:14:1b:d3:ef:73:b7:aa:e3:
fb:48:c3:c0:33:0e:cb:a9:50:27:3a:e7:d8:a3:dd:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B3:BA:48:2B:F1:96:39:EE:B3:81:EB:DC:D7:50:B3:52:CA:69:77
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:20:e4:ad:74:fb:81:95:29:ed:72:9b:d8:77:b5:6f:34:52:
c2:69:1f:a0:42:85:be:6d:3a:d5:e1:a9:88:b2:27:0f:5b:09:
55:06:4e:3d:e0:70:65:d0:cd:51:3d:19:60:4b:0d:67:c1:ba:
f6:c5:6c:e6:08:4e:06:97:14:93:5a:91:d0:d8:a4:19:88:fa:
5e:e9:fa:bf:59:0b:3c:9e:4d:72:c0:70:0c:a5:50:0e:50:83:
57:4e:89:62:6c:d4:5c:bd:55:ae:77:d7:22:c6:8b:09:96:ee:
ed:f7:0e:84:ea:a2:5b:29:29:0d:6a:a8:fe:75:28:fe:13:59:
19:e6:5f:2b:39:69:8c:ee:c4:dd:54:f3:d4:94:af:20:2a:86:
70:01:ee:00:9f:62:d3:ab:7b:58:b9:4d:b1:06:4f:46:2f:5c:
ba:2f:5b:c6:f8:e7:d2:94:c4:dd:be:c7:24:f3:cf:dd:55:7a:
ee:5a:90:30:34:48:06:20:3d:21:95:fc:8f:6a:52:c3:f1:6e:
2c:76:b1:9e:7a:79:28:31:36:79:62:52:91:71:8a:8e:a2:ba:
35:59:08:99:28:8d:00:78:42:ce:1f:b4:bf:a3:9c:7f:21:28:
59:db:c4:56:d0:cc:00:61:3d:61:49:de:36:2b:be:38:b5:d6:
82:dc:0c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:21:35 2025 by rpki-client