Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: XCxssZnowhJOoVPVKZ9tbRBOShK7AAmi9UJPNRnBhBc=
Subject key identifier: 50:F6:F2:62:5D:E4:A7:90:D8:0F:BC:56:70:43:7B:D1:23:0A:04:25
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 019653B777C28C195894C16601156B0C71FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 092B
Signing time: Sun 20 Apr 2025 15:00:54 +0000
Manifest this update: Sun 20 Apr 2025 15:00:54 +0000
Manifest next update: Mon 21 Apr 2025 15:00:54 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: BglIk4CnM7GL6Z+rlBsAXJMib4EWXyNm/c2E+nlrbXY=)
2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:77:c2:8c:19:58:94:c1:66:01:15:6b:0c:71:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Apr 20 15:00:54 2025 GMT
Not After : Apr 21 15:00:54 2025 GMT
Subject: CN=50f6f2625de4a790d80fbc5670437bd1230a0425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:55:19:80:d4:aa:c2:3f:b3:a1:dd:68:c2:79:
06:94:e4:8b:fb:5a:40:4c:81:cc:98:94:d7:5a:d9:
f6:37:fa:77:c8:cc:ab:84:3c:98:20:f6:48:d2:1c:
62:8c:2e:9b:58:f8:72:74:6f:ae:3d:2f:78:82:19:
7c:cc:94:84:58:d6:1f:68:f4:ec:c1:49:0a:36:80:
bd:b7:ff:a7:70:6e:9e:12:aa:f2:22:9a:ff:6c:7f:
fe:60:07:0c:84:28:14:a0:62:0c:77:59:59:b3:bd:
8c:1a:4a:c0:87:00:ea:c2:d4:ad:41:8a:c9:42:f7:
c7:3e:ee:87:f4:00:95:23:0e:ac:5a:e8:c5:41:07:
cc:6f:68:c4:40:26:9e:21:d7:4f:b9:1a:bb:56:91:
3c:e9:ae:d0:01:37:34:07:91:85:9b:75:aa:41:61:
e2:7d:2a:d5:47:32:4d:d3:3e:bc:e4:53:53:f2:3e:
43:fa:5c:93:5b:d2:8f:5b:c9:8b:0f:e7:73:af:c2:
c5:b0:66:91:79:bb:75:f6:fa:93:99:47:a9:eb:c3:
42:fd:5b:9c:3b:9c:ed:c9:88:c5:80:a3:44:a8:f3:
58:d6:ac:40:5d:04:87:6c:e4:ba:b3:d8:43:6c:62:
ca:ec:d1:be:99:57:e6:a3:21:66:02:a2:99:be:b9:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F6:F2:62:5D:E4:A7:90:D8:0F:BC:56:70:43:7B:D1:23:0A:04:25
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:70:75:59:f2:e6:bc:05:a0:75:73:a3:58:6c:1e:ed:c0:44:
3d:e9:f1:50:76:9d:bb:35:e6:50:97:71:67:2d:a4:21:f5:53:
1e:c3:1c:41:29:33:ed:c7:44:2f:9f:cd:c1:8c:88:90:29:f0:
ee:89:f2:f9:ea:f1:72:3d:70:d9:cd:9e:bb:57:70:a4:30:e6:
16:e3:2e:95:3e:a1:24:c3:d7:98:7a:a4:d8:4d:5d:f8:07:0b:
37:4c:aa:ef:d7:2d:2e:aa:e6:a0:78:8a:92:43:50:c9:36:55:
9e:48:20:22:4d:2c:47:b9:5e:b1:23:7e:19:dc:c1:64:63:45:
50:ea:c7:7c:c5:b6:f2:c7:de:98:e9:25:e8:30:76:c3:e7:18:
66:16:83:48:f5:0d:d5:29:66:d7:7a:04:fe:3a:36:c6:e2:b2:
5c:54:d2:ac:98:29:16:f0:c9:b5:23:fb:3a:08:f2:cf:c2:ca:
01:64:e5:84:a0:ca:8d:34:47:3b:5f:d2:5a:c5:cc:2c:4d:1a:
33:2d:0a:a7:3c:5b:ab:2b:32:fe:2b:08:08:54:4d:5f:d5:48:
6e:0f:e6:69:8f:01:1d:bb:5f:d1:83:e8:f9:61:8d:ca:87:73:
5f:9d:17:46:03:40:50:93:be:fa:bd:e4:70:3b:32:4d:66:ed:
08:1f:73:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:07 2025 by rpki-client