Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
File: Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft (raw, json)
Hash identifier: T6UFJ37sf6rA6Vm7Lb29gtmygzaJ12Mev6TJ3sf8Imk=
Subject key identifier: 94:6E:B6:B6:5A:49:92:4A:01:43:90:FC:0F:5B:EE:65:1C:A4:59:FE
Authority key identifier: 36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29
Certificate issuer: /CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
Certificate serial: 01965538047E71E14768F56781F095DFB772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
Manifest number: 0B91
Signing time: Sun 20 Apr 2025 22:00:56 +0000
Manifest this update: Sun 20 Apr 2025 22:00:56 +0000
Manifest next update: Mon 21 Apr 2025 22:00:56 +0000
Files and hashes: 1: Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl (hash: 1WBa+wfQEFOG3e2OMZyfKd0LM7jB2YY4v/0Xcc7oXko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:04:7e:71:e1:47:68:f5:67:81:f0:95:df:b7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
Validity
Not Before: Apr 20 22:00:56 2025 GMT
Not After : Apr 21 22:00:56 2025 GMT
Subject: CN=946eb6b65a49924a014390fc0f5bee651ca459fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0e:bf:05:e0:6c:6c:da:a2:fc:fd:0d:4f:89:
4d:6c:fa:2d:83:fd:fc:fc:a3:20:a1:c1:93:0d:76:
93:bd:3e:7d:fc:d1:b1:48:c2:bc:0c:c7:03:c7:99:
ab:a4:25:16:cf:03:b5:0e:ef:09:39:fa:13:84:c2:
c6:f9:a9:8d:2a:de:2b:af:73:26:5a:7d:98:5c:89:
cb:87:50:93:c1:ba:8c:75:65:b0:9d:3a:9f:28:71:
f6:7e:5d:be:3c:79:9a:f4:05:75:93:3b:bb:77:52:
89:43:e2:d5:21:bf:f9:20:3e:02:e1:03:3f:8c:fd:
86:ea:aa:a7:c0:13:e9:53:3b:aa:c1:5c:99:ec:0d:
b5:b4:5a:d4:f2:ae:38:bb:ea:0b:7c:59:91:7a:12:
6b:79:6e:dd:57:98:b6:95:7c:78:e9:ad:aa:60:b0:
a8:dd:89:bc:63:89:b8:43:62:82:8d:fa:80:d1:f7:
8f:20:a1:7a:a8:0e:bc:de:f7:2c:a0:85:9b:e8:0e:
9e:5c:88:04:23:59:41:b1:12:5d:f7:f2:91:50:96:
9c:5f:28:84:0d:be:8c:ca:60:26:f0:45:8c:14:7d:
fd:53:13:91:86:97:c0:0d:6f:c8:8d:8b:50:a6:3f:
03:21:77:b9:30:5e:6f:f8:66:d8:8f:f6:0e:d8:b3:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6E:B6:B6:5A:49:92:4A:01:43:90:FC:0F:5B:EE:65:1C:A4:59:FE
X509v3 Authority Key Identifier:
keyid:36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ed:12:b1:7f:cf:5a:c7:2e:bf:66:4f:3b:74:9f:61:17:5d:
f1:f8:94:ef:ea:8e:12:e9:f4:28:9b:b4:31:f9:eb:d9:cf:82:
8c:61:60:0c:c9:0b:81:6c:ec:cb:b5:5e:47:95:3c:8e:b8:84:
0d:1f:1b:24:91:dc:98:e3:0e:d9:19:8c:4f:1f:15:42:d8:d5:
48:25:8c:67:f8:84:52:9d:2e:4a:a8:a9:b1:96:ca:7c:bf:78:
8e:fe:a0:52:a5:48:14:af:2c:c6:44:50:6b:3b:e3:cd:12:2e:
46:3f:74:54:68:81:ac:4f:b9:f7:87:44:fd:a4:58:e4:2a:17:
35:14:09:65:cb:b4:bc:4a:ec:49:32:29:90:c2:95:a2:af:e7:
ff:bd:3e:02:1a:82:2f:66:15:97:dd:3f:a9:fd:40:61:59:5e:
7c:44:56:3d:77:ce:db:ab:2c:79:77:e7:95:69:bc:bd:52:2d:
6e:5b:1d:17:6c:18:86:ec:7b:5d:4c:ef:18:f5:04:72:c1:7e:
72:e1:cb:9a:71:c6:a0:5f:6f:a9:fa:4d:ca:89:65:d9:ea:c1:
a7:d9:c6:64:08:56:4b:31:65:c9:cf:b3:9f:bb:98:0f:5b:2a:
d9:69:38:91:36:2c:7d:d7:2b:a5:1b:14:80:3c:4e:8d:1b:8c:
5a:f6:d0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:20 2025 by rpki-client