Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
File: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft (raw, json)
Hash identifier: F68HlO1MuwvMkLTYkjQllotMS83fA/wQG/F/ePDtJ3E=
Subject key identifier: AC:F0:B8:53:60:C2:DF:9E:1B:34:B6:77:FE:DA:4F:F6:6D:85:F5:D4
Authority key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
Certificate issuer: /CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Certificate serial: 019645C4499BD2502F2A1D22F9B6B3E59286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
Manifest number: 0A3A
Signing time: Thu 17 Apr 2025 22:00:13 +0000
Manifest this update: Thu 17 Apr 2025 22:00:13 +0000
Manifest next update: Fri 18 Apr 2025 22:00:13 +0000
Files and hashes: 1: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl (hash: JQuAr15brgqXm8i52momgSk80Zjz8CUQ6RSv28srWcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:49:9b:d2:50:2f:2a:1d:22:f9:b6:b3:e5:92:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Validity
Not Before: Apr 17 22:00:13 2025 GMT
Not After : Apr 18 22:00:13 2025 GMT
Subject: CN=acf0b85360c2df9e1b34b677feda4ff66d85f5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:e5:44:dd:9b:56:4e:77:d6:d1:99:7d:b0:
e3:33:ea:36:61:14:42:c0:28:23:21:f6:b6:da:46:
8e:4a:43:f7:52:ac:04:4f:7c:a5:6c:4f:7f:6c:c7:
58:09:8e:de:b5:1d:bc:19:dc:96:b3:81:06:00:fe:
7d:1e:a0:9c:86:bc:93:3f:c4:2c:a9:a4:36:d5:67:
17:6b:b9:6d:fe:18:e7:ee:6e:3f:2d:1f:ec:a9:a9:
16:0b:3f:3d:7f:d6:bd:d8:82:61:83:29:fa:e2:00:
83:7a:b3:d4:15:30:ee:9f:07:4e:94:b6:65:9c:5d:
81:e1:31:b6:87:f2:e4:40:8b:21:a7:4a:1e:e4:4c:
97:08:5a:87:8d:f8:07:1d:2e:6d:dc:fd:6a:c5:16:
c7:7a:32:11:4d:95:d1:c3:a4:eb:e1:2b:0c:23:da:
63:f0:de:2c:c7:9e:56:0f:a9:e7:6a:20:ef:d5:1e:
bc:f6:23:af:f1:3b:4d:ef:cf:89:e0:d6:48:da:18:
76:9d:f3:64:97:35:23:44:02:d7:17:fa:80:1c:d1:
b7:21:a3:3f:c8:8f:3e:a4:a4:f5:cc:58:63:e4:9a:
43:aa:95:c9:9e:70:6d:68:0a:f5:42:18:35:74:6c:
a0:25:14:7d:e4:30:24:2b:40:3b:32:57:47:06:40:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F0:B8:53:60:C2:DF:9E:1B:34:B6:77:FE:DA:4F:F6:6D:85:F5:D4
X509v3 Authority Key Identifier:
keyid:9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4c:e9:96:1b:a2:49:62:0c:c4:6d:cb:3a:56:aa:c1:3d:22:
fd:02:66:82:0f:ea:43:e7:53:37:31:92:66:6c:ab:27:94:be:
52:5b:63:64:0d:b3:f2:3d:1d:eb:bd:95:ee:a7:72:b8:9a:f9:
21:b4:9d:fc:3a:ee:41:4f:30:ed:d5:e3:bd:40:2e:2b:36:3a:
ef:3e:09:a1:5d:d7:5e:97:e2:94:30:01:95:ac:4d:60:e8:80:
81:c0:ca:52:2f:cd:98:51:e2:e8:d4:f7:47:12:08:d6:fb:44:
5e:f5:4e:a1:2c:d0:2f:8a:a5:51:12:f2:26:61:6e:7a:da:f8:
2b:7b:7e:f4:89:07:64:02:51:40:8c:88:01:ae:29:70:f0:b6:
b7:74:8b:51:89:88:40:6b:cc:cf:2f:ed:2b:fe:54:0f:51:ae:
06:99:6f:86:8c:e8:a2:5b:9d:e4:dc:35:e1:bc:d7:ba:72:1c:
1f:f4:1c:f7:33:1c:3e:3a:a6:d4:ef:fb:cc:0e:48:26:f0:8e:
a6:86:b9:85:a2:43:35:2d:33:00:cb:58:a5:38:e5:45:62:b7:
67:30:3e:b6:37:94:2c:56:c9:74:a6:e0:6c:1a:0b:d2:86:52:
be:14:59:e6:9f:92:db:a1:4f:16:1f:ee:b8:1b:62:a4:04:51:
4b:1c:c7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:30 2025 by rpki-client