Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
File: ngV1AShe0hwz2zraRFXEykfdTpA.mft (raw, json)
Hash identifier: lQmMRCc6E2r3wCWA5anTlFta1VzCVZaxeOEpXZC5cww=
Subject key identifier: E2:0A:E9:6C:BC:AC:41:0D:52:18:01:C7:4D:5E:83:3F:83:BA:E3:F6
Authority key identifier: 9E:05:75:01:28:5E:D2:1C:33:DB:3A:DA:44:55:C4:CA:47:DD:4E:90
Certificate issuer: /CN=9e057501285ed21c33db3ada4455c4ca47dd4e90
Certificate serial: 0195903D4BF8F2B5A63043B08C950F9BE78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngV1AShe0hwz2zraRFXEykfdTpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
Manifest number: 0506
Signing time: Thu 13 Mar 2025 16:01:30 +0000
Manifest this update: Thu 13 Mar 2025 16:01:30 +0000
Manifest next update: Fri 14 Mar 2025 16:01:30 +0000
Files and hashes: 1: ngV1AShe0hwz2zraRFXEykfdTpA.crl (hash: nfpygT/EQYrU1JmnTwHMD+7ld0Ba7+A26E9UHKdQuQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngV1AShe0hwz2zraRFXEykfdTpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:4b:f8:f2:b5:a6:30:43:b0:8c:95:0f:9b:e7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e057501285ed21c33db3ada4455c4ca47dd4e90
Validity
Not Before: Mar 13 16:01:30 2025 GMT
Not After : Mar 14 16:01:30 2025 GMT
Subject: CN=e20ae96cbcac410d521801c74d5e833f83bae3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:95:a8:93:a1:1c:7b:e3:1b:b1:74:71:c3:1e:
4e:a4:d9:98:6b:be:63:d2:ce:63:61:e5:36:65:ac:
4b:da:9f:84:3c:f5:97:a2:f1:35:27:15:46:c5:8d:
7f:2f:5d:55:cf:59:97:4e:1f:76:9c:ed:b5:29:0e:
24:4e:73:38:81:20:b2:79:aa:4e:95:04:04:a5:86:
e5:1a:90:b5:d3:e0:b4:b7:c0:75:3f:2e:d3:a9:f0:
12:f1:1f:3b:de:9a:60:bd:a4:75:49:fe:53:1b:53:
42:5c:70:6b:24:57:28:5c:f6:fb:3b:c5:60:86:fc:
99:2b:0d:bd:9f:30:14:64:87:fd:42:cb:4a:1d:4e:
53:72:75:0d:3a:0b:2f:f9:6d:bb:d2:9f:c0:53:14:
e5:3c:89:15:39:78:7a:94:36:0e:41:83:5b:cb:a3:
7b:fc:12:41:6c:57:3e:aa:e8:0a:14:cc:0e:17:d7:
8d:89:a3:dc:d0:dd:51:68:c0:06:46:0f:b5:01:8e:
7e:a2:3f:ff:58:e2:22:2e:1e:7f:7a:2e:3a:d4:34:
67:57:0d:9c:4c:6b:60:34:d8:4e:b0:af:58:e2:d6:
69:4e:a1:92:4d:3c:c5:08:11:ee:62:10:e4:3e:d6:
40:45:f4:36:0f:c0:c5:3d:1d:ff:74:e3:f8:4b:d8:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0A:E9:6C:BC:AC:41:0D:52:18:01:C7:4D:5E:83:3F:83:BA:E3:F6
X509v3 Authority Key Identifier:
keyid:9E:05:75:01:28:5E:D2:1C:33:DB:3A:DA:44:55:C4:CA:47:DD:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngV1AShe0hwz2zraRFXEykfdTpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:53:65:8a:b7:33:3f:02:a8:c7:70:a1:33:5f:cf:82:f9:75:
29:69:17:87:38:3b:bb:5a:8f:91:24:92:7c:06:e3:0f:71:fd:
16:2c:1b:9a:c2:2a:a0:58:d5:89:6b:57:7e:54:99:fa:31:01:
99:ba:eb:d7:a5:81:53:dc:38:b3:8f:a8:6b:88:d4:51:92:d0:
62:37:02:58:c4:77:6e:40:cf:e8:d1:3a:7b:04:c2:66:c7:9f:
60:27:52:5a:57:37:24:ad:1e:c3:8c:af:4d:e9:32:62:93:72:
d2:54:a5:3b:89:4e:1d:96:e4:50:fb:e8:59:2f:c6:7b:b6:15:
03:ce:a0:22:bd:03:59:67:ba:ed:71:cf:ec:25:75:65:9c:ba:
84:49:0a:68:ef:72:80:69:13:f3:2c:31:99:f2:6b:a3:21:b0:
50:3b:50:16:dd:a1:84:bf:b1:7d:68:0a:db:00:98:ab:d9:28:
11:80:87:5a:67:17:70:fe:fa:62:e4:4a:dd:58:be:74:d1:ef:
f3:dc:eb:4c:7c:1b:aa:23:86:ac:5a:45:2d:b1:3f:ac:7e:f4:
ac:05:dc:7b:7a:e1:e4:0d:c1:e4:fa:a9:18:f0:b8:18:7b:7a:
3b:31:c4:a3:2e:fd:30:f5:26:10:60:83:fe:3b:11:48:05:50:
21:99:75:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:12 2025 by rpki-client