Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: cWRUmIomyuKZQlnUiGR+c5LV59kuF5ShFayQG7jdmDU=
Subject key identifier: 36:9C:2C:C1:DE:00:13:58:8E:E9:22:7B:02:05:AA:F5:82:E7:D0:59
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 019611A12547C131B7199825AFC2B838537E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 0B0E
Signing time: Mon 07 Apr 2025 19:01:35 +0000
Manifest this update: Mon 07 Apr 2025 19:01:35 +0000
Manifest next update: Tue 08 Apr 2025 19:01:35 +0000
Files and hashes: 1: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: 2wN0cqJWtlMQb/Sm7w6OtVVFPRgg5o0lnwjQyurrBlI=)
2: R_dc828vlc27bxXSMzahF76dopg.roa (hash: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=)
3: yzgxHb39JlWgV-6OUyl9AE4hQAQ.roa (hash: pG2NZjpFYDlbN9iuGT1kUvmnDeM4noZC3E54rEDkwXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:25:47:c1:31:b7:19:98:25:af:c2:b8:38:53:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Apr 7 19:01:35 2025 GMT
Not After : Apr 8 19:01:35 2025 GMT
Subject: CN=369c2cc1de0013588ee9227b0205aaf582e7d059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f3:51:27:1d:81:f5:3e:6c:51:27:44:00:3a:
a3:0c:50:9e:59:ba:e6:b3:79:3d:7c:03:ad:89:cd:
f2:a0:9e:51:aa:b0:a1:7e:c1:17:d6:4b:b8:c0:2f:
b1:73:43:36:77:c6:95:44:30:13:78:e5:68:15:3a:
2b:d8:4f:57:26:38:47:fb:ce:65:a6:3b:24:fd:63:
04:c5:2b:d8:2f:ad:49:86:f5:7b:ab:e1:43:20:fa:
00:a7:db:2f:ab:60:3a:13:f7:e0:8a:b6:6e:e0:cd:
3c:4d:4d:dc:48:ed:47:80:3a:1f:46:8d:24:c5:a2:
f9:4e:60:0b:12:c6:b7:d2:db:e2:16:46:d9:3d:f8:
5d:31:19:f2:82:a6:09:53:91:63:62:23:9e:3e:98:
91:f6:4a:cb:e0:87:e3:31:d5:47:a4:4c:3c:3e:72:
ab:30:bc:f4:64:60:38:24:6a:de:df:2e:fd:c5:8d:
13:0e:d2:91:bc:bf:62:ff:80:cb:09:92:ba:75:12:
16:28:88:4f:07:82:32:a9:c0:6a:12:8f:12:b9:7a:
25:a6:cd:4d:c9:1d:47:a8:54:6c:24:92:0a:7e:01:
38:b8:0a:fe:0c:ea:46:d3:8c:62:ef:81:e6:dd:ae:
3e:d9:20:7c:7c:eb:cc:76:e1:84:b9:82:b7:c6:35:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9C:2C:C1:DE:00:13:58:8E:E9:22:7B:02:05:AA:F5:82:E7:D0:59
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0a:2c:9f:da:2a:d3:b8:ff:36:d5:5e:e8:2e:12:49:44:44:
6d:c8:80:85:b1:5a:b8:2e:53:97:dc:3f:22:39:38:27:6a:ed:
c9:c6:94:be:e2:87:f8:32:12:d1:9f:55:0b:38:a3:01:5d:6c:
61:de:77:67:7b:9b:ca:35:05:26:9f:5c:b9:fb:d5:b0:f6:7f:
2c:2a:23:cf:6f:d0:8f:6d:23:c1:18:36:ea:7b:a2:17:6d:45:
a8:f2:97:b6:c8:3d:0b:67:22:bd:fc:08:9a:80:f5:34:99:eb:
58:2b:51:dc:f7:b6:b9:3f:35:91:cd:37:ac:e5:d1:9c:3c:5f:
93:7d:cd:49:98:df:bb:ee:74:ce:ed:a5:57:4a:4d:b4:eb:46:
49:c1:8a:db:98:7a:d4:29:02:3f:75:9b:21:c8:b8:3a:1e:59:
f0:b4:15:98:e0:bf:47:11:32:fa:ad:4e:f4:7b:dc:a8:6e:e0:
75:09:a8:cb:29:5f:d3:2c:97:9a:ac:ee:fb:f6:d5:3a:86:ea:
50:51:97:73:0d:92:5e:b7:cb:51:65:8c:f5:d9:ef:1c:18:66:
c3:49:94:13:3d:56:c8:c7:88:0e:8f:04:55:8f:a2:6a:73:ec:
e0:9d:70:23:aa:4c:d5:17:60:01:d5:40:0b:a7:38:9a:a2:67:
ff:a8:d3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:25 2025 by rpki-client