Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier: Mtl5W2kEZN52OdFz+qwekpPUlPM2ZekAUdRWq8SVFzY=
Subject key identifier: 5A:FC:A1:5B:F2:46:69:10:22:AB:A0:15:32:11:91:EC:F4:43:41:27
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 019655010322B29C065FDE8915E4503F7968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number: 0EF7
Signing time: Sun 20 Apr 2025 21:00:51 +0000
Manifest this update: Sun 20 Apr 2025 21:00:51 +0000
Manifest next update: Mon 21 Apr 2025 21:00:51 +0000
Files and hashes: 1: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: cp18rDnzL7vxU/FWP9MtHJBox4+mXnWOleFDueRrabE=)
2: cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa (hash: VnVBSnuyvJSL8u2y/xmozn76q7jfteZhwwoJt7Qqpuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:01:03:22:b2:9c:06:5f:de:89:15:e4:50:3f:79:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Apr 20 21:00:51 2025 GMT
Not After : Apr 21 21:00:51 2025 GMT
Subject: CN=5afca15bf246691022aba015321191ecf4434127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:7e:32:a9:f4:ae:c7:6b:0e:06:40:7d:c0:
b8:f0:8a:4e:82:2c:3e:75:1d:b1:93:5f:73:a6:d3:
d3:26:d6:ea:53:93:43:43:81:5e:ba:05:e8:97:fe:
80:5e:23:4c:ff:c3:25:a4:a7:5d:ca:61:b8:e5:1b:
a4:0b:91:72:f8:67:7f:1d:0a:e6:b8:f2:7e:33:39:
c4:8a:2b:69:1d:f1:6b:86:6f:aa:23:8e:ff:ab:9a:
5e:58:71:e7:18:d2:a3:98:83:ee:13:2d:ba:ad:3f:
e7:9f:1d:69:50:ea:39:82:31:4e:ef:3e:ac:09:53:
ad:b3:45:33:9c:5e:79:07:1b:27:98:f2:cb:82:bf:
6f:ed:53:50:73:ff:40:2c:69:ca:91:a9:3e:0c:fb:
9b:e9:97:05:e0:da:3d:37:2a:57:72:47:fb:e2:09:
9a:1b:8c:64:99:5a:61:c6:9f:a4:d8:2b:ad:6b:e9:
4f:44:1f:35:dc:31:78:09:4e:07:85:06:08:70:13:
77:78:ae:8d:f9:d9:90:aa:be:5b:c4:1b:20:90:25:
42:1d:36:ee:dd:1c:aa:ff:30:d4:7d:59:62:24:0b:
d6:fc:d9:c5:db:6a:54:ad:2f:4d:ed:e6:27:91:80:
2f:aa:45:83:9f:b9:0f:2c:ea:45:d3:0b:76:8e:49:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FC:A1:5B:F2:46:69:10:22:AB:A0:15:32:11:91:EC:F4:43:41:27
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:65:64:55:c0:dc:a8:98:bf:e6:17:9b:e6:16:03:bc:07:92:
39:ee:e2:82:79:48:e3:dd:0f:72:76:66:1d:d4:56:1a:27:d3:
18:95:03:10:23:0f:0e:f4:f0:14:68:3a:b9:42:fb:18:90:bd:
21:bc:68:c6:80:df:0a:42:7c:6e:a7:82:7c:d7:ca:09:a2:e5:
b3:f0:7f:00:ef:ff:45:41:20:b8:27:8a:7e:47:f6:ed:af:61:
4a:d9:f9:f1:31:96:fc:87:cf:24:8d:2d:77:2d:39:42:39:28:
af:d6:6d:1c:e9:31:34:9e:4c:d0:5c:5e:ca:ec:6d:7c:b3:47:
64:85:22:56:4d:8f:e0:d8:b9:cd:67:84:c8:af:f7:8e:53:86:
39:7a:5f:6a:ff:51:2c:b5:98:d4:12:15:0f:29:7b:c8:3c:a6:
6a:07:71:dd:28:21:8e:c1:e7:9f:6b:85:b4:15:ce:55:a1:40:
69:ee:31:46:3e:0f:3a:b0:d2:0a:61:9c:0c:ca:9b:c1:96:78:
83:19:4f:d2:ec:35:2b:98:3e:00:28:b7:13:5b:c8:f7:43:2a:
31:36:40:ba:9d:ab:3a:41:2c:34:50:ab:f2:7f:03:d7:8b:57:
f0:b2:11:4a:93:5a:e2:53:00:0e:71:83:0f:fe:66:c4:ae:7d:
b0:77:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:34:10 2025 by rpki-client