Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
File: nPmIlqiK6PNUCut37KHxqUu9aXg.mft (raw, json)
Hash identifier: zYecl5wDwDo6Xyet9o7jJRb4iPomyZ2OgrBPYJk43+8=
Subject key identifier: 04:B3:84:7F:59:4C:5B:85:61:9B:AC:C9:84:5F:7A:DB:52:56:95:CC
Authority key identifier: 9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
Certificate issuer: /CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Certificate serial: 01963FF98677BCD808EDB40797A97EB37265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
Manifest number: 0689
Signing time: Wed 16 Apr 2025 19:00:39 +0000
Manifest this update: Wed 16 Apr 2025 19:00:39 +0000
Manifest next update: Thu 17 Apr 2025 19:00:39 +0000
Files and hashes: 1: nPmIlqiK6PNUCut37KHxqUu9aXg.crl (hash: jEhd7/2kuOMQJ32tx3uMZu0E79vaisZGg++hcuCiQXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:86:77:bc:d8:08:ed:b4:07:97:a9:7e:b3:72:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Validity
Not Before: Apr 16 19:00:39 2025 GMT
Not After : Apr 17 19:00:39 2025 GMT
Subject: CN=04b3847f594c5b85619bacc9845f7adb525695cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:85:64:99:c6:43:72:13:7d:53:8d:43:0a:
b9:9c:8d:19:26:4a:92:90:25:11:8e:97:9e:d9:0f:
8d:5f:5d:47:da:d7:a4:aa:e3:f2:30:7f:ea:f3:42:
fb:59:29:4c:d5:d9:bb:66:2b:e8:4f:c3:1b:62:fb:
86:ce:6a:de:ff:df:f4:b1:6c:57:c3:9b:91:14:dd:
6f:16:09:4f:e7:14:79:03:86:5c:fc:94:34:19:9d:
0e:e2:16:9d:35:5f:fa:df:d6:53:ea:7f:83:3e:eb:
ec:86:49:f3:45:da:e9:33:e7:18:e0:51:1f:37:59:
16:71:3c:f2:a7:29:01:7d:1b:73:b5:01:eb:ae:50:
03:b5:12:b6:24:77:8c:92:43:79:aa:ae:70:40:a0:
7d:f4:39:21:b3:77:27:75:48:70:98:22:9c:43:36:
28:c6:80:af:4e:dd:a7:9c:ee:16:54:69:3f:81:a3:
79:a1:7b:52:a1:2f:4c:13:43:b7:c9:49:61:28:72:
28:5c:ad:ce:a3:cf:1e:8b:75:20:40:f1:24:69:11:
54:9d:28:29:c2:72:ba:bc:ba:05:71:55:af:a0:6a:
59:d0:6a:5a:be:2f:de:50:1c:28:a2:ec:6d:d3:2f:
b8:40:86:86:98:08:72:bc:9c:7e:8e:ec:6e:2f:fc:
cc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B3:84:7F:59:4C:5B:85:61:9B:AC:C9:84:5F:7A:DB:52:56:95:CC
X509v3 Authority Key Identifier:
keyid:9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:df:12:bb:c0:b1:f7:42:bb:73:00:0c:47:69:e0:5b:30:55:
0f:ca:23:00:02:7a:cd:d2:62:02:35:19:e9:08:a6:33:99:ff:
36:fe:ec:34:fe:13:df:01:7d:df:1a:be:f4:29:78:c1:1a:6f:
d1:84:31:f7:3b:e0:76:1c:cf:e3:49:26:8e:eb:13:2a:64:b1:
cb:ed:97:95:02:86:4a:03:b2:5f:a1:21:41:ba:26:1f:e1:55:
09:a5:1a:b7:0e:a3:d6:c6:2c:23:76:11:20:e8:c1:89:98:03:
55:a8:b6:61:90:c5:65:61:94:0f:d1:f4:e0:cb:0e:2e:e4:f6:
e6:b0:d1:be:43:1a:49:66:e0:b9:f0:71:35:71:67:9c:34:9f:
a4:2d:d1:b5:24:dd:3e:32:24:00:d9:8b:39:0b:d9:eb:af:ce:
21:f6:45:b2:67:c4:6a:4f:52:99:de:2f:9e:6b:a2:fd:5e:da:
fa:10:d2:dc:1b:dc:2d:82:ad:bc:21:48:f5:fe:52:20:1b:e1:
27:18:7c:ed:3f:b2:8d:1d:20:22:53:6b:8a:4d:df:e1:0a:d4:
47:67:3d:4c:82:0e:1c:1b:14:db:74:21:c1:8e:3f:3a:64:3c:
2d:c5:94:2f:fd:b6:5d:92:70:80:01:fc:0c:2a:2b:4f:be:2f:
0c:1f:f4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:33:22 2025 by rpki-client