Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
File: ndrXzlnL6NGaA0EfocbJug1CAqI.mft (raw, json)
Hash identifier: F+E//uH+eiyxa1Ut+YA5vbUGXceYnMEYmRJCyEEZeHo=
Subject key identifier: 72:07:7F:2A:17:AF:30:E3:09:0A:BA:46:AE:8E:94:E1:A3:DA:8D:71
Authority key identifier: 9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2
Certificate issuer: /CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
Certificate serial: 0196515AC27D1A98EB080AACB7482A6B4CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
Manifest number: 086C
Signing time: Sun 20 Apr 2025 04:00:24 +0000
Manifest this update: Sun 20 Apr 2025 04:00:24 +0000
Manifest next update: Mon 21 Apr 2025 04:00:24 +0000
Files and hashes: 1: ndrXzlnL6NGaA0EfocbJug1CAqI.crl (hash: hGJFHlgjRHzSRMWnOlHGctwuBdADdXMg3CuJjSY18Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:c2:7d:1a:98:eb:08:0a:ac:b7:48:2a:6b:4c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
Validity
Not Before: Apr 20 04:00:24 2025 GMT
Not After : Apr 21 04:00:24 2025 GMT
Subject: CN=72077f2a17af30e3090aba46ae8e94e1a3da8d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:b9:2c:2e:83:f6:d4:40:b9:09:ad:32:b2:
83:2e:c9:dd:b2:90:a8:74:3f:aa:6e:92:9b:c2:12:
5a:ce:3c:df:3b:d6:2a:28:d8:60:be:eb:6b:54:0e:
2f:5f:aa:aa:97:e6:25:ce:58:60:ef:03:35:eb:ca:
91:75:dc:88:7a:d2:90:c5:36:c3:2e:af:d1:4e:65:
e6:4e:05:ac:c9:97:49:7e:ba:fb:ff:3a:96:17:91:
63:c7:c6:c4:04:87:4a:20:51:8e:62:37:76:ba:a7:
47:b3:5a:14:b2:b5:16:56:68:be:55:eb:38:2a:a2:
dc:b8:d3:e3:34:b4:70:7a:9c:90:2d:25:ae:aa:4c:
a7:01:90:93:f4:5a:17:d6:44:30:b3:94:a3:f9:b0:
84:b2:e3:ca:bd:55:cb:7f:96:03:86:39:ef:a1:cd:
8b:c3:c4:cd:73:ac:a0:cb:44:24:0c:c3:90:ba:64:
6e:95:bd:af:31:a0:dc:05:2c:8c:1d:92:34:68:86:
2e:98:c8:3e:7f:23:53:df:5d:68:ff:8f:8e:2d:88:
15:31:a4:f5:47:1d:4e:44:d7:b9:24:92:2b:43:12:
de:e6:9e:ba:09:c0:94:89:ef:7f:98:b9:b4:9c:55:
89:86:09:7f:1e:32:17:7b:90:16:b3:a1:bb:8c:1e:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:07:7F:2A:17:AF:30:E3:09:0A:BA:46:AE:8E:94:E1:A3:DA:8D:71
X509v3 Authority Key Identifier:
keyid:9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:40:b8:e2:91:ba:26:96:93:50:ab:e2:59:d7:dd:91:85:8b:
77:f7:81:08:b9:88:a0:e8:e1:fa:59:ca:49:71:25:63:d9:d1:
12:1a:11:d2:09:7c:6f:af:ce:93:ed:46:7d:2d:9c:d7:af:b4:
25:b6:82:2d:5b:90:f4:54:c9:06:24:a1:ae:f8:41:52:be:46:
21:7f:d7:94:9a:3c:2b:9a:88:3f:d4:84:e7:cb:5a:18:36:13:
38:fd:6c:0e:97:73:d4:92:2a:6e:4e:87:af:a8:fa:a9:34:04:
f6:aa:26:9b:c4:ed:0c:4f:20:7a:ae:0d:37:6b:da:20:2d:6e:
e7:9c:df:6c:ff:19:6d:9f:9b:fc:e6:fb:ad:ac:3b:3f:62:a7:
05:b2:b4:81:9e:48:0d:9a:06:41:30:d9:a1:e9:52:70:3f:d9:
27:8d:3e:4b:a6:36:aa:76:f1:6d:0f:81:18:98:51:7b:80:0c:
f6:77:3b:0d:65:60:c4:b0:79:ee:67:18:11:9b:7a:fd:87:2d:
18:69:7f:f4:e2:3f:21:49:f2:80:7c:42:e3:55:ca:e6:5a:e3:
f1:cc:72:b5:80:32:f7:fc:5f:a6:eb:23:37:15:9d:25:40:f8:
15:a4:ec:d3:20:36:a0:e4:e4:39:7c:c0:51:8b:f1:d4:eb:44:
37:1f:90:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:18 2025 by rpki-client