Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
File: ndVRnFTz4jtOEhKogIM58pXaSzQ.mft (raw, json)
Hash identifier: G1UDjN5z3wmxkD/htcnoK0DaFlp4QDwJgBKRBJI8a0A=
Subject key identifier: C9:8A:23:54:51:3A:5B:47:E1:6C:B3:EC:CE:DD:FE:54:66:CA:1E:65
Authority key identifier: 9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
Certificate issuer: /CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Certificate serial: 0196447B7B0C643DDDE19B7063B5F0C0B134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
Manifest number: 14F2
Signing time: Thu 17 Apr 2025 16:01:05 +0000
Manifest this update: Thu 17 Apr 2025 16:01:05 +0000
Manifest next update: Fri 18 Apr 2025 16:01:05 +0000
Files and hashes: 1: ndVRnFTz4jtOEhKogIM58pXaSzQ.crl (hash: tZ5xSn59Prij36Y5nJJXOBqDgoqz34ODINZMJfpMPO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:7b:0c:64:3d:dd:e1:9b:70:63:b5:f0:c0:b1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Validity
Not Before: Apr 17 16:01:05 2025 GMT
Not After : Apr 18 16:01:05 2025 GMT
Subject: CN=c98a2354513a5b47e16cb3ecceddfe5466ca1e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:be:56:c0:44:29:81:19:bf:49:ed:11:95:
a1:01:61:81:07:93:37:9b:a9:d8:e8:3f:4f:3b:c2:
5c:5c:0c:96:11:98:ad:7c:2a:39:82:68:13:bd:59:
b1:56:2c:93:f3:d9:2a:bf:59:67:5e:f8:be:f2:1b:
2e:63:1c:d1:a6:90:ba:12:09:d5:be:51:be:fd:2e:
f8:d5:dd:dd:30:a0:2f:bd:f4:e4:fa:22:9d:23:b5:
eb:6a:61:a9:33:b8:65:b5:0b:e5:c3:5b:36:7f:a0:
58:b9:e2:2d:9c:ec:e0:0e:9d:98:da:b2:23:ee:d4:
a7:86:f8:58:16:22:e4:30:63:3b:bc:77:4a:c3:cd:
12:8f:84:68:60:94:6a:31:fb:7f:44:fa:b6:53:5c:
89:be:30:37:b9:ea:68:55:0a:b2:d5:d9:98:86:f9:
ee:36:2a:11:0f:48:90:2e:41:9f:cf:6a:ac:87:3b:
b8:66:d4:53:9c:c5:d1:b1:2c:9d:46:d2:01:fb:af:
03:f3:a0:2b:f0:78:6f:b5:42:be:12:d7:2a:d9:2f:
02:ab:72:3a:f9:fc:c9:65:05:85:f3:51:e1:0f:d7:
26:e3:48:03:8c:72:2d:23:89:f3:fd:68:d3:a9:de:
19:59:fc:45:63:92:93:34:06:36:5c:3b:d1:88:aa:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8A:23:54:51:3A:5B:47:E1:6C:B3:EC:CE:DD:FE:54:66:CA:1E:65
X509v3 Authority Key Identifier:
keyid:9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a0:d1:80:35:2c:f1:b7:5f:ff:35:dc:14:12:da:ef:a0:77:
c6:61:0b:df:58:1c:3f:ef:6a:9b:5f:ae:5c:73:c4:3f:97:05:
4e:cc:96:f3:31:8c:7a:12:be:57:81:f1:ec:2c:38:af:2c:6b:
38:f1:f1:76:42:a7:32:e8:e3:ce:76:6c:53:8d:9f:b2:50:97:
f6:af:d5:93:75:92:71:f7:7a:51:cb:9c:81:73:2f:a1:89:de:
1a:5a:29:c5:37:23:38:e3:b0:76:e7:8c:da:78:43:25:cd:f5:
38:a3:7d:2b:02:5b:af:36:24:9a:74:73:b1:7c:5b:cd:a4:dc:
5c:47:91:d4:82:ef:46:e8:80:f9:55:c2:49:3b:c9:12:6b:b3:
9d:29:86:dd:25:8c:99:01:35:66:d8:ff:c7:9c:0d:89:22:61:
bd:fa:af:71:e1:c2:e6:49:ea:fb:55:13:95:16:54:9d:f6:9c:
2f:fe:a1:83:f8:32:7b:7b:8a:4a:09:12:7b:89:35:92:37:ce:
8c:e9:99:dd:5b:26:7a:c3:e9:c9:10:8f:2e:48:85:66:40:b8:
64:e4:9b:dd:66:d8:63:a4:1f:99:32:c0:56:fb:3a:0f:15:2c:
54:75:cd:65:dc:61:d0:64:33:c0:3a:fd:ea:7d:ab:25:5d:59:
3e:5c:40:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:15:48 2025 by rpki-client