Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
File: N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json)
Hash identifier: EGC87DfueTZkz0xJohO4yDvvG7HFUjB67NczqhcOB44=
Subject key identifier: C8:90:7C:FC:18:6B:8E:25:AB:AE:74:3E:97:4C:F1:A0:3C:5D:26:F6
Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
Certificate issuer: /CN=374083af0fff1768a07c655f1fe386009c522ccf
Certificate serial: 01964E22EC7F8D3AFEF0EBFF2DFFD4CB7527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
Manifest number: 10DE
Signing time: Sat 19 Apr 2025 13:00:33 +0000
Manifest this update: Sat 19 Apr 2025 13:00:33 +0000
Manifest next update: Sun 20 Apr 2025 13:00:33 +0000
Files and hashes: 1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: HmNhsjeJF19GAKPqTTVUvPdC6Iyb8xT14YfPMfTsZ70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:22:ec:7f:8d:3a:fe:f0:eb:ff:2d:ff:d4:cb:75:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf
Validity
Not Before: Apr 19 13:00:33 2025 GMT
Not After : Apr 20 13:00:33 2025 GMT
Subject: CN=c8907cfc186b8e25abae743e974cf1a03c5d26f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:f8:4e:45:80:a6:69:63:8f:ac:47:a2:18:
7d:79:05:16:3c:bc:66:ed:3a:0b:ee:31:fb:e2:57:
62:30:4b:36:d6:2b:3b:f8:bf:b6:2d:cf:71:1f:4f:
b3:cc:40:01:ab:7c:a5:4b:79:71:a5:9d:48:68:3b:
be:be:15:88:9d:21:57:6c:b3:d8:7b:70:e9:e8:da:
46:37:79:83:23:99:2f:99:9d:a9:fb:e3:a1:9c:6e:
05:30:d1:62:6f:a8:65:70:54:0f:40:a8:4e:b5:1f:
db:57:17:35:4a:0a:dd:b4:e0:d3:af:03:22:54:e1:
4e:85:38:5f:8f:27:75:4b:a4:a8:35:8c:71:ef:d1:
ea:4f:60:a1:09:f3:8b:54:77:9f:1c:b8:38:08:e6:
77:30:93:fe:d4:0a:cf:1c:cb:0c:e0:d3:c4:b2:46:
ac:72:d2:4f:c4:cc:a9:63:51:ef:28:7a:5c:0c:75:
57:95:22:a1:f5:bb:10:10:6b:f4:48:b9:75:91:0b:
35:1b:63:12:11:27:59:32:77:19:00:1f:37:26:36:
92:f7:67:75:be:c2:3b:5f:c1:12:91:d2:17:8f:ea:
26:6b:9b:50:e4:a8:83:22:fb:a1:7b:52:b6:45:19:
60:58:f7:cb:67:ae:e2:76:d7:2b:99:17:b6:99:5b:
d7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:90:7C:FC:18:6B:8E:25:AB:AE:74:3E:97:4C:F1:A0:3C:5D:26:F6
X509v3 Authority Key Identifier:
keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2e:f8:2c:f7:b4:1e:01:f6:8a:90:72:fe:fa:93:c1:7f:69:
56:c6:e0:4f:41:15:7c:0e:9e:26:9c:92:18:26:99:3f:30:4e:
8a:56:bb:04:76:41:8e:00:63:09:db:b4:b2:3a:94:fd:16:29:
db:29:df:26:0f:78:39:5e:79:1e:1a:38:3d:1b:09:5b:c8:ff:
3f:93:43:a4:1c:78:67:fd:74:57:58:ba:e9:94:17:91:4d:68:
d6:82:b5:f5:7e:41:12:c8:db:23:23:a8:87:71:c2:c6:0d:6d:
00:30:64:00:c6:7c:2c:3c:4f:b7:54:e8:86:9b:d0:d2:e0:67:
1e:52:f3:9d:48:56:ba:17:cf:ee:26:c8:9c:90:f6:97:b0:68:
c0:7b:e5:38:85:69:5a:5a:10:86:b8:7c:d2:bd:bf:5d:a0:fd:
9f:e7:cb:9d:2f:8d:1a:1a:a7:ef:ec:ce:f4:c7:24:85:16:fd:
68:99:cd:9f:90:60:f7:b3:66:e8:71:00:64:c3:f2:87:c5:a3:
f7:01:fb:35:a1:27:fa:3c:80:92:7c:7c:72:a7:38:f6:05:d3:
31:1b:34:9a:0e:f5:e6:d3:68:ed:ed:e1:28:77:c9:ea:cf:0d:
47:40:52:53:05:57:65:eb:53:26:6b:24:b8:8b:77:69:b1:de:
c7:17:b2:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOIux/jTr+8Ov/Lf/Uy3UnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NDA4M2FmMGZmZjE3NjhhMDdjNjU1ZjFmZTM4NjAwOWM1
MjJjY2YwHhcNMjUwNDE5MTMwMDMzWhcNMjUwNDIwMTMwMDMzWjAzMTEwLwYDVQQD
EyhjODkwN2NmYzE4NmI4ZTI1YWJhZTc0M2U5NzRjZjFhMDNjNWQyNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYb4TkWApmljj6xHohh9eQUWPLxm
7ToL7jH74ldiMEs21is7+L+2Lc9xH0+zzEABq3ylS3lxpZ1IaDu+vhWInSFXbLPY
e3Dp6NpGN3mDI5kvmZ2p++OhnG4FMNFib6hlcFQPQKhOtR/bVxc1SgrdtODTrwMi
VOFOhThfjyd1S6SoNYxx79HqT2ChCfOLVHefHLg4COZ3MJP+1ArPHMsM4NPEskas
ctJPxMypY1HvKHpcDHVXlSKh9bsQEGv0SLl1kQs1G2MSESdZMncZAB83JjaS92d1
vsI7X8ESkdIXj+oma5tQ5KiDIvuhe1K2RRlgWPfLZ67idtcrmRe2mVvX5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiQfPwYa44lq650PpdM8aA8XSb2MB8GA1UdIwQY
MBaAFDdAg68P/xdooHxlXx/jhgCcUizPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84M2FhNDctYzdmYi00ZTA1LTlmYWMt
ZTRjYTZiNzNhYzc2LzEvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84M2FhNDctYzdmYi00ZTA1LTlmYWMtZTRjYTZiNzNhYzc2
LzEvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeS74LPe0
HgH2ipBy/vqTwX9pVsbgT0EVfA6eJpySGCaZPzBOila7BHZBjgBjCdu0sjqU/RYp
2ynfJg94OV55Hho4PRsJW8j/P5NDpBx4Z/10V1i66ZQXkU1o1oK19X5BEsjbIyOo
h3HCxg1tADBkAMZ8LDxPt1TohpvQ0uBnHlLznUhWuhfP7ibInJD2l7BowHvlOIVp
WloQhrh80r2/XaD9n+fLnS+NGhqn7+zO9MckhRb9aJnNn5Bg97Nm6HEAZMPyh8Wj
9wH7NaEn+jyAknx8cqc49gXTMRs0mg715tNo7e3hKHfJ6s8NR0BSUwVXZetTJmsk
uIt3abHexxeyiA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:53 2025 by rpki-client