Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: +8WdovumxN5BnRPukg+LMQYvKgEQvCGTSShPrLR6APk=
Subject key identifier: E0:34:29:5E:4E:6C:B8:AA:F2:A1:17:39:F9:4D:1F:35:18:3A:E4:B7
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 019630F542FF2B9D6E9F0BFF7F57734414D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 14EE
Signing time: Sun 13 Apr 2025 21:01:41 +0000
Manifest this update: Sun 13 Apr 2025 21:01:41 +0000
Manifest next update: Mon 14 Apr 2025 21:01:41 +0000
Files and hashes: 1: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: uwvwK83++YCyw/gPJt5y5KxDkfmBF3QXlDr+UthzDcQ=)
2: PSL2OSxsoutF8sVX_uvIaiWUApI.roa (hash: IoDHAxb+U2Gaz8HUwj/mdMtnodnlu8iYqMMfCwQw35I=)
3: t0FWDnJPs6XvZokHfTcCnjKRaeE.roa (hash: Aou1i/O3zguK2P9WdtUpbw8G9iRuYff1/7SNrw+Pohw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:f5:42:ff:2b:9d:6e:9f:0b:ff:7f:57:73:44:14:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Apr 13 21:01:41 2025 GMT
Not After : Apr 14 21:01:41 2025 GMT
Subject: CN=e034295e4e6cb8aaf2a11739f94d1f35183ae4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:20:d5:29:c1:08:75:13:28:fd:70:3a:24:
75:e9:91:1d:fb:7a:56:80:c9:42:67:3a:fc:31:36:
95:05:d6:74:c4:78:ef:ba:3b:08:d3:86:9f:eb:b2:
07:81:a0:65:8b:3c:33:7e:1f:c6:1b:b8:52:72:ba:
5b:bc:78:b0:bd:4b:99:ec:4c:97:ad:3d:2f:45:87:
a8:77:ad:6b:64:32:01:3c:c2:df:fc:63:b7:63:df:
df:a3:f2:c0:aa:5f:d0:ba:e1:93:cf:8a:a5:d1:3f:
89:0b:28:a0:ac:d9:bb:34:83:1a:d1:fd:27:c8:d0:
ad:ee:dd:81:86:e3:be:54:b5:88:7a:89:41:40:d3:
88:f2:34:0d:bf:b7:8e:a0:38:40:c8:8f:60:d6:0a:
5a:fb:d3:d8:8d:b9:3f:51:0a:bc:4a:70:24:72:c4:
01:2d:ad:43:e9:fd:26:59:f7:5b:5d:f4:ef:74:ea:
e1:c9:a9:86:b9:00:53:16:13:a1:5b:10:2d:6d:ed:
65:b6:40:3c:b4:0e:c7:db:c3:5b:b1:9d:57:22:b3:
0f:81:dc:b7:6b:b6:9e:29:6a:79:78:ea:b1:3b:2d:
4e:8b:f0:4a:8a:d4:6c:ff:41:2c:0f:d2:3b:b3:ea:
3d:c0:2a:3c:64:00:d6:cc:8c:52:b0:3b:56:99:22:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:34:29:5E:4E:6C:B8:AA:F2:A1:17:39:F9:4D:1F:35:18:3A:E4:B7
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c6:3a:64:7e:8c:4b:7e:bc:fb:cc:71:87:5a:7f:6a:b4:cf:
84:39:55:bf:7f:af:10:7f:e0:c7:fa:23:3e:a2:ff:5c:91:d9:
fa:63:dc:f0:8f:2e:74:3b:8d:cb:d2:da:6a:e6:e5:d0:81:6b:
85:33:9a:c6:d4:c7:18:31:ba:3b:03:fa:bc:f4:fa:46:e7:9d:
6c:65:17:d6:fa:9d:c9:b0:8f:4b:69:d7:2f:97:d7:d1:a3:b2:
1f:fb:4b:a2:26:e8:03:ad:55:69:aa:e8:e3:02:83:60:b1:fa:
d0:d7:e5:e9:e2:3e:ea:c9:a2:8a:75:23:1c:7a:90:02:1b:db:
a7:23:68:ef:48:f8:ae:69:b0:fd:ce:c1:bd:c8:b0:19:15:4b:
73:9d:88:21:45:a5:08:2d:06:19:34:ff:62:c7:b0:f0:a3:19:
8a:1f:47:38:89:2c:af:61:38:73:37:4d:28:1a:cf:3b:7d:de:
03:29:cf:fc:99:30:ac:ec:11:67:f4:f6:c3:8b:ba:59:a3:9d:
e6:11:db:b4:e8:45:9a:48:dd:ba:43:19:2f:64:b8:0f:6e:13:
0b:a0:52:10:2e:bd:2c:aa:b9:8e:88:85:a0:e8:c7:9c:18:73:
f1:d9:a0:fd:93:76:b8:4b:26:8e:a6:21:ba:40:ed:94:c6:e7:
85:36:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:46:49 2025 by rpki-client