Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
File: N97mrLx4K4x2lqQLKOgDOWGdDxs.mft (raw, json)
Hash identifier: GQb5puq3NX7CY2v692T8oSgjjebgL95nZnnB5DTv+qA=
Subject key identifier: 15:D3:92:02:0A:88:CB:E1:33:A7:32:7F:B5:BC:E0:5A:F7:CD:E5:46
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial: 019581DC255D724D6AC3C43C81F8723A5519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
Manifest number: 1494
Signing time: Mon 10 Mar 2025 21:00:42 +0000
Manifest this update: Mon 10 Mar 2025 21:00:42 +0000
Manifest next update: Tue 11 Mar 2025 21:00:42 +0000
Files and hashes: 1: MbrCU5EWrzqFZBAeUe4bUJd8wew.roa (hash: 5Pva3cv3+IYsnuZvSImhrKouYMj9MMRYEIbLj8Bzi98=)
2: N97mrLx4K4x2lqQLKOgDOWGdDxs.crl (hash: J3KCKw1y+qbdhjvxZ6YAyn692EX4R2+yi2SE+9G0ivU=)
3: zQEfbksVhhA2S7Y-4p6fScJooW4.roa (hash: wml6Lhyvjtk0nrkWUQQ2ofJbLrbKj1m4u8FJSWuGbD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:dc:25:5d:72:4d:6a:c3:c4:3c:81:f8:72:3a:55:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Validity
Not Before: Mar 10 21:00:42 2025 GMT
Not After : Mar 11 21:00:42 2025 GMT
Subject: CN=15d392020a88cbe133a7327fb5bce05af7cde546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:54:bd:e7:09:8e:6c:aa:e5:39:3e:6c:2d:
44:32:09:2f:a6:1f:9d:c0:84:44:e4:e9:12:c6:68:
8e:7c:9f:f6:b7:de:7f:bb:1c:ce:0d:07:df:45:19:
8d:c3:f6:d8:f1:5a:b9:37:50:7b:00:66:93:52:1e:
d5:cc:ea:d9:ab:3c:fa:eb:db:aa:f4:71:71:49:2e:
66:e4:60:25:d3:71:75:57:f7:29:27:0b:19:68:98:
32:16:17:64:8f:2e:30:34:47:93:15:6c:b4:08:2c:
51:cb:ac:7a:06:56:8b:6f:d4:20:31:2d:f8:7f:74:
79:7d:98:c6:4c:e0:ac:5c:56:2d:8e:1a:32:d5:8f:
66:54:49:64:bf:c9:e6:4e:1e:76:c4:28:03:99:9f:
20:42:c9:93:c3:88:bf:ae:4d:17:a2:1b:ea:3f:d7:
94:79:b5:58:97:2b:22:e4:8f:39:d8:a0:58:d7:00:
10:3e:7c:5e:e4:2c:60:33:f4:ff:34:20:26:f5:bf:
8f:21:89:84:aa:a6:4c:52:9d:39:96:3e:09:69:22:
f4:2b:a2:3d:89:50:2d:62:bc:5e:52:f5:cb:36:e7:
0a:05:34:c9:e4:b3:0e:6c:a2:bf:0d:01:3a:68:b7:
0b:16:98:93:75:05:9c:fa:cc:01:72:58:02:e4:9d:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D3:92:02:0A:88:CB:E1:33:A7:32:7F:B5:BC:E0:5A:F7:CD:E5:46
X509v3 Authority Key Identifier:
keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2f:cb:2b:e8:c7:a5:d6:7c:bc:8d:cc:12:c6:37:e9:c7:97:
db:56:2a:f8:ee:8e:a8:43:04:03:3d:c0:e7:21:a1:3d:8f:23:
cf:01:a9:60:fe:ab:4a:45:14:d8:ca:95:1d:53:c0:71:9a:13:
20:90:62:bb:dd:96:d2:07:9d:21:da:73:de:2b:ac:4c:77:5e:
0e:66:21:55:92:ca:c3:00:dc:16:e6:3d:0e:19:a7:a7:a5:f8:
63:79:09:ec:e7:68:43:18:45:76:a9:18:85:29:5a:ba:00:2d:
69:98:66:f6:70:c8:d9:0b:4d:52:6a:41:05:a9:74:23:fa:78:
aa:93:32:4a:b1:55:af:cc:26:c3:6a:c1:15:47:b5:63:a3:fd:
d5:b4:97:7b:4a:f4:d6:15:b3:04:c0:89:51:74:7e:3e:81:bf:
68:00:73:1d:50:47:8b:73:61:6b:2b:8b:54:ef:4f:31:2f:aa:
2d:2f:2e:55:70:81:9d:81:70:db:db:f4:0a:13:67:3e:d5:81:
75:e4:86:44:88:08:f3:35:28:09:b0:ab:9c:8b:f4:03:ee:dd:
18:90:c7:5d:74:fd:1d:2d:60:c6:52:f9:8f:2b:b8:dd:87:be:
56:73:74:cb:91:6c:64:f3:be:4a:dc:ae:3c:7c:89:19:44:a6:
e2:92:80:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:12:13 2025 by rpki-client