Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
File: NHi9VqAesq4wdvaW0B1P_NFAGp8.mft (raw, json)
Hash identifier: G0o/uFmfIM9ukoUC3seIlUA86Z5XoKM86TkJoP6poWE=
Subject key identifier: F7:2D:C6:1F:9F:04:0B:60:CF:6F:85:63:56:1E:9D:71:E8:D2:C3:9A
Authority key identifier: 34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
Certificate issuer: /CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Certificate serial: 01965915277B04D759F923D372279279A96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 16:01:20 +0000
Manifest this update: Mon 21 Apr 2025 16:01:20 +0000
Manifest next update: Tue 22 Apr 2025 16:01:20 +0000
Files and hashes: 1: NHi9VqAesq4wdvaW0B1P_NFAGp8.crl (hash: bIsL/nvofjki+LEL4tHdL/Y2T2lXFmxzYdWoQVVErmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:27:7b:04:d7:59:f9:23:d3:72:27:92:79:a9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Validity
Not Before: Apr 21 16:01:20 2025 GMT
Not After : Apr 22 16:01:20 2025 GMT
Subject: CN=f72dc61f9f040b60cf6f8563561e9d71e8d2c39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:3f:02:ca:5e:08:23:f7:c6:77:9c:cf:09:
d7:eb:6b:1f:79:ca:1f:6d:94:8e:b0:92:af:1e:97:
35:f5:0b:47:c2:e2:47:e2:4d:29:d2:2e:55:e3:ee:
84:7d:af:9c:05:1e:22:19:b0:9e:eb:74:a2:49:1c:
28:ac:d5:03:f8:85:82:d5:f1:c1:c3:13:cc:31:be:
01:1f:0e:d1:61:f1:a4:b4:c5:b9:75:26:0c:0d:cd:
1c:d1:09:87:52:e1:9c:41:0a:3b:f5:44:3a:dd:05:
9e:f8:52:a4:13:51:48:98:ad:f7:15:7a:86:fd:91:
eb:a6:8b:c4:ef:94:0c:ce:70:27:19:61:1e:0a:62:
cb:f8:e5:7e:27:74:be:65:76:3a:a3:23:0e:bc:2b:
3a:94:45:c4:a2:05:46:66:a5:61:d8:e4:e3:99:84:
78:0d:a3:fa:6b:9b:0e:a9:25:df:eb:06:54:73:1a:
e2:98:12:da:9c:b0:c4:8d:0c:b7:ba:ed:47:9a:1c:
ea:c0:6d:4b:d6:ee:05:ba:5c:dc:80:df:66:b5:1b:
c7:b1:03:88:65:2d:45:45:24:2a:98:b4:ed:75:e6:
ed:ee:19:4b:af:8e:7a:fb:b0:b3:c4:4a:2a:ec:3a:
25:7c:5d:d5:e3:4e:dc:6d:97:8c:e8:fb:e9:0e:71:
55:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2D:C6:1F:9F:04:0B:60:CF:6F:85:63:56:1E:9D:71:E8:D2:C3:9A
X509v3 Authority Key Identifier:
keyid:34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d6:b1:07:96:0f:4b:95:92:31:e6:a8:09:3d:78:5b:48:a0:
b5:0b:e6:16:f9:7c:01:49:5e:2e:ab:a4:54:e8:6d:23:c7:3f:
a3:a2:2c:a9:c0:da:cf:d5:e5:fe:03:9c:3a:33:bf:c0:15:f8:
7e:9e:e9:e0:ad:6a:57:05:8a:a3:6b:89:0e:d7:be:41:27:51:
fb:57:65:f9:02:85:ef:69:89:a0:4e:a9:32:db:e0:b4:03:b6:
4b:5f:ca:9c:f6:76:60:3a:a4:90:5a:30:1e:ed:ad:91:88:86:
fc:dd:4e:79:70:35:cd:b6:e5:22:46:f2:28:80:09:4a:57:66:
db:62:b2:a3:02:de:6c:38:71:c6:30:35:53:63:1b:b8:ef:42:
62:1a:ff:f5:c5:0c:69:3e:ce:2a:fa:33:73:af:a3:1a:f3:28:
1c:c2:63:40:04:03:88:32:3a:48:ed:5a:96:0d:5a:cd:eb:0e:
4e:39:e9:97:fe:e9:36:a7:5f:34:8c:3a:b2:17:13:3d:2f:d3:
15:23:79:9e:46:ae:95:fe:93:90:1c:ea:65:70:e9:7d:b8:74:
84:12:57:00:df:5b:89:9c:57:84:ec:72:20:36:a4:aa:dc:91:
54:39:52:92:d9:8d:87:c2:0b:04:25:46:e9:40:c6:59:aa:de:
13:35:ab:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:33 2025 by rpki-client