Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File: Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier: nEUZFOuS63eOGJDl7VnazCzNSCk96Ibet8Zkjauhr1g=
Subject key identifier: 3B:18:0C:82:72:87:48:0A:04:81:1A:7F:5A:17:BB:5A:10:86:A6:30
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 01958BBB215BA0ABB2F81FAA9C75176C72A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 19:00:51 +0000
Manifest this update: Wed 12 Mar 2025 19:00:51 +0000
Manifest next update: Thu 13 Mar 2025 19:00:51 +0000
Files and hashes: 1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: k5CxqLsCa3pbjh8zS+35kqYm34rtmZsVpf7xuMHh450=)
2: SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa (hash: 790cASmrwFRWvIHgSFvW34RkdQVbe9565zpCVGOf6tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:21:5b:a0:ab:b2:f8:1f:aa:9c:75:17:6c:72:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: Mar 12 19:00:51 2025 GMT
Not After : Mar 13 19:00:51 2025 GMT
Subject: CN=3b180c827287480a04811a7f5a17bb5a1086a630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:bb:64:c8:6e:d8:5e:2c:b7:97:9d:91:35:
45:19:bd:c6:da:82:2d:75:a3:9e:92:61:24:28:8c:
55:f1:57:e5:73:46:36:b8:ef:f4:1e:08:d0:4e:a8:
41:9c:31:c4:ea:f3:fd:9e:64:0d:39:fb:82:f8:53:
e9:48:9e:d6:75:17:8c:1c:51:39:6e:01:ef:3e:c0:
04:d2:a6:bb:00:27:b0:f9:54:9a:97:23:1b:51:82:
bf:ce:8c:c6:a2:3d:63:11:db:af:59:79:85:68:dc:
e9:59:60:e5:09:d3:2b:66:1a:59:69:30:61:21:7f:
28:e0:63:5c:6a:01:9e:74:b6:5a:2a:65:80:31:e3:
58:71:89:ad:32:f1:84:16:ca:97:35:de:66:99:af:
ca:72:09:08:28:58:18:48:44:4b:34:4c:db:ea:56:
a6:61:18:bc:06:83:b2:e7:6c:e2:93:12:7e:27:72:
30:a4:d6:7e:08:6d:70:a8:05:0b:7d:b5:fd:85:c3:
2a:92:41:00:3a:87:3c:be:2c:5e:6a:1f:45:9f:b3:
ae:81:3d:b9:6e:fe:50:a1:19:19:9b:3b:4d:ae:48:
dc:5b:04:64:98:62:e1:1a:ae:5d:76:59:b6:75:a4:
79:24:d0:5a:5a:21:03:18:94:c3:47:fe:1a:98:08:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:18:0C:82:72:87:48:0A:04:81:1A:7F:5A:17:BB:5A:10:86:A6:30
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d7:85:27:dc:c2:17:eb:a2:1c:d1:58:84:bc:3f:e4:60:60:
ca:63:d1:b6:df:fc:1e:33:0f:89:33:b6:b9:83:fc:26:73:78:
48:7c:e3:40:de:4d:bb:fc:6b:d7:ae:e5:a0:a1:4e:a1:8e:58:
4d:3f:d8:4c:58:90:a6:3e:2a:d9:be:90:08:fb:78:03:2f:03:
bd:7d:11:54:df:cf:5b:34:d2:e5:ae:ac:37:4e:ff:e5:94:b7:
20:05:c5:7a:16:a5:48:a8:ec:c9:31:f9:21:06:47:f1:2a:50:
f8:71:d1:5e:65:c0:ba:d4:4f:39:81:cd:03:ff:fb:4a:40:93:
f7:95:f8:29:a0:3a:dc:f0:e7:49:f4:25:eb:e9:b3:c4:d4:47:
06:57:d9:2f:37:81:3c:4a:4f:61:ba:99:bc:4b:4c:8b:54:70:
f9:bf:95:ba:8d:f7:66:58:01:c9:c1:15:71:dd:04:23:98:1f:
5b:b5:c4:ff:29:75:ed:4a:b8:b7:8c:ea:27:24:bb:c2:0a:cc:
c5:ae:22:a9:19:a8:81:bc:dd:cd:d7:3d:fd:b8:36:39:24:81:
c5:c1:54:10:b4:a8:c8:fc:6b:34:74:2f:c1:4f:3c:20:2c:50:
a9:1d:55:ab:9f:62:72:16:65:90:0c:0a:df:71:0a:51:7f:f5:
ae:ae:4e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:02 2025 by rpki-client