Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
File: NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json)
Hash identifier: llEfO/HXmT5SeGnhQJJHEADDcY0ozdQw/rbR5N+99Y0=
Subject key identifier: C0:5B:F7:75:1E:D2:B3:D5:AD:C6:C4:5E:EF:20:DE:C0:51:45:C9:C5
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Certificate issuer: /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial: 0196545C0A6D4345E03FA6FF67ED2B4DFC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
Manifest number: 0537
Signing time: Sun 20 Apr 2025 18:00:40 +0000
Manifest this update: Sun 20 Apr 2025 18:00:40 +0000
Manifest next update: Mon 21 Apr 2025 18:00:40 +0000
Files and hashes: 1: 8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa (hash: mtFporZGWALvI1bFzQb9Xpsj858BjBk/glbS/pmBQi4=)
2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: KZ0dtwCd0jx2vchLj1mvHovF9gRppd8AnOtxTjhtLqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:0a:6d:43:45:e0:3f:a6:ff:67:ed:2b:4d:fc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Validity
Not Before: Apr 20 18:00:40 2025 GMT
Not After : Apr 21 18:00:40 2025 GMT
Subject: CN=c05bf7751ed2b3d5adc6c45eef20dec05145c9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:fc:52:34:93:58:9b:7a:ec:3c:0d:b5:0d:
a1:2e:e6:f2:f6:69:df:42:6c:9c:9b:10:67:fd:ae:
25:4f:fd:40:52:48:7f:14:12:ee:df:f6:d4:4d:14:
8b:ed:fc:8e:2a:ff:aa:fb:e4:23:64:ef:72:6d:c9:
a1:43:9d:19:21:bf:cf:20:cb:ab:a5:09:20:c1:49:
f0:bd:20:87:25:47:a2:1b:49:40:87:97:bc:14:5d:
41:bb:63:41:13:32:8e:b8:3b:0f:25:95:f4:a0:b6:
48:aa:a6:3c:61:cb:c7:3c:06:b2:2f:a8:38:4e:37:
92:9f:7e:aa:c8:ff:49:58:66:09:d2:9f:ba:8e:c9:
28:f1:2d:38:8c:95:76:35:0e:43:4c:6d:ef:e7:30:
a3:04:0b:38:ef:d4:21:de:dd:6e:1c:ee:a6:eb:ff:
b4:1f:d5:08:0f:19:e5:24:6a:3d:0c:43:38:f5:48:
f9:23:1b:45:a4:d1:ac:0c:14:f2:1d:be:1c:eb:ed:
5f:69:3a:7a:b0:a5:7a:66:48:3a:17:89:5c:dc:4e:
d4:10:1f:20:eb:b1:53:e9:ec:f1:8d:45:c0:65:1e:
55:c6:fb:78:3e:40:88:fd:77:0c:7e:4b:49:74:72:
49:99:ed:7e:34:d5:f5:7e:83:7a:29:c7:fb:5c:79:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5B:F7:75:1E:D2:B3:D5:AD:C6:C4:5E:EF:20:DE:C0:51:45:C9:C5
X509v3 Authority Key Identifier:
keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e0:26:59:5f:f3:61:23:d2:bc:5c:3f:31:81:a1:6c:0f:cb:
42:63:32:87:0f:8a:71:ac:20:de:71:6b:70:48:b9:ac:47:ba:
fc:95:aa:cc:8d:69:96:f3:22:9d:ac:7c:5d:20:68:0b:68:47:
38:e1:a8:18:fb:d5:20:33:c8:4e:2f:c3:4d:44:2f:3d:67:3c:
15:c7:a4:40:c1:57:98:4c:75:20:e0:1a:c4:74:61:33:77:f1:
95:1e:6e:6a:c4:9d:d6:13:00:ec:fe:80:16:99:e1:bc:44:38:
60:d9:7e:31:31:bc:23:1e:54:e4:a4:f6:27:e4:9b:00:88:a1:
6c:11:d9:47:e4:e2:0d:40:3b:a2:22:d2:53:95:51:21:0b:34:
ae:e8:36:af:56:05:43:92:be:de:77:c8:9a:c1:59:a6:73:bc:
c9:17:cb:52:c3:82:1d:ae:e0:cd:31:b0:a1:7e:20:a5:1c:0b:
02:77:60:aa:92:84:a1:2a:36:a3:5c:5a:9b:76:09:53:7e:39:
77:93:45:38:aa:f3:a1:41:62:71:19:9d:f2:ca:20:64:0c:16:
92:eb:8e:2b:90:94:4b:8c:b9:19:05:e5:e3:7e:fa:be:7a:15:
cc:6a:70:5a:d6:82:9f:cb:f4:27:c3:8d:81:6f:84:e3:9f:f0:
95:f3:cb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:48 2025 by rpki-client