Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
File: n98bEcryuCRFMXghJa6TOudpn3Y.mft (raw, json)
Hash identifier: q5z2vC2US9e1/XXa53e8X/Fnxf9mm7X81voAWCZpCh0=
Subject key identifier: 0D:95:3C:42:43:4A:EC:AB:3A:DC:F5:CB:8A:CE:03:04:07:64:AF:B4
Authority key identifier: 9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
Certificate issuer: /CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Certificate serial: 0196391B820AD8EC7C98C40037D18013EA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
Manifest number: 14BD
Signing time: Tue 15 Apr 2025 11:00:26 +0000
Manifest this update: Tue 15 Apr 2025 11:00:26 +0000
Manifest next update: Wed 16 Apr 2025 11:00:26 +0000
Files and hashes: 1: n98bEcryuCRFMXghJa6TOudpn3Y.crl (hash: eiZfj2Wp6eujSznZmZXuoQ2TG/UdAFVHP7rZuIWRO9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:1b:82:0a:d8:ec:7c:98:c4:00:37:d1:80:13:ea:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Validity
Not Before: Apr 15 11:00:26 2025 GMT
Not After : Apr 16 11:00:26 2025 GMT
Subject: CN=0d953c42434aecab3adcf5cb8ace03040764afb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:44:06:2b:33:74:f5:e0:18:ac:9e:b9:34:
1a:5e:4a:cf:b4:34:98:3d:a9:f8:8c:97:4f:da:25:
1c:86:96:3a:41:4a:00:9a:3c:ba:bc:0d:e5:f7:e3:
d6:e8:d2:77:e2:f2:71:e1:82:2c:ea:5e:3b:58:5a:
47:12:d9:fa:08:93:12:34:25:c0:6d:3a:e2:ea:00:
16:b5:81:7f:2b:18:b5:46:2b:23:eb:58:4c:98:7f:
d5:6a:64:8b:bb:4b:c1:cf:20:13:95:9c:5f:bb:29:
37:4c:0f:cf:14:3a:8b:2a:2f:a7:c5:3b:ae:ff:79:
09:0e:e3:4a:3d:f2:31:ae:20:d4:07:5d:28:9d:1a:
8b:b7:16:62:e0:57:fb:f7:29:54:69:97:80:18:f0:
d7:6c:b7:8c:32:63:47:b4:aa:63:94:10:cb:f4:dc:
10:66:78:31:dc:19:90:ee:8b:69:fa:63:e7:2c:46:
30:2a:fa:57:69:68:2e:cc:42:1a:0a:89:5a:5a:fa:
3c:9f:fe:2c:bd:a5:81:24:6f:5e:54:f8:ac:48:15:
f4:b7:c6:7d:4c:30:86:7d:ea:3b:ec:5a:55:0b:a9:
59:ce:2a:52:07:93:36:72:7e:a7:12:52:56:01:bf:
86:f2:9a:5f:f2:00:02:3c:1f:14:5b:8b:e8:6e:aa:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:95:3C:42:43:4A:EC:AB:3A:DC:F5:CB:8A:CE:03:04:07:64:AF:B4
X509v3 Authority Key Identifier:
keyid:9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:80:84:47:8d:1b:2d:61:f6:f3:9f:a4:7a:5a:9d:b6:31:60:
b9:e1:aa:bd:46:f1:92:1e:57:f9:2e:fe:5f:94:18:03:82:96:
77:99:ea:6b:28:21:31:a0:c7:50:f6:10:21:88:75:76:0a:27:
cb:dc:4f:8b:88:9b:73:d3:33:98:5f:92:5b:7e:3e:13:e0:3b:
d3:11:78:be:63:4f:8a:23:ce:19:c5:0a:e3:f9:63:8a:a7:58:
bf:f8:f7:6c:53:80:4f:b4:b7:b0:cb:c1:ce:2b:8f:e7:68:63:
b8:b2:32:ff:20:3b:31:69:16:5f:4e:50:f5:b7:1c:bc:6b:7f:
87:1e:6b:95:4d:0e:05:4d:e8:7d:8c:11:11:dc:9a:c9:c5:25:
e2:24:68:bc:22:49:d2:81:a1:ab:f2:0f:90:6e:59:f2:33:ef:
79:f2:53:fd:7b:3f:87:e8:34:3a:32:2e:c8:c9:5d:a9:1c:4c:
d6:50:e3:24:8a:6c:80:7e:0d:70:f6:9a:13:ae:31:a5:d1:f5:
c9:37:b5:b3:a5:57:29:3e:f8:5f:f7:d4:96:8d:06:74:54:b4:
41:be:39:d5:9d:b6:3c:ff:5b:1d:99:cd:6d:39:07:6d:67:a8:
26:d0:a1:93:ed:eb:9b:b8:49:59:2c:61:d9:a1:ea:8b:c5:b2:
d7:0c:70:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:57:32 2025 by rpki-client