Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: hqjKEsMY2Qc9AVfpbTFFSKQa5AO5QVyNGk2nG+osgqw=
Subject key identifier: 8D:96:57:01:41:AD:1D:33:5A:F6:60:53:A1:DE:3B:60:F2:30:B0:75
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 01964669F66E008C9D1430EA8DF3A87C4411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 55
Signing time: Fri 18 Apr 2025 01:01:11 +0000
Manifest this update: Fri 18 Apr 2025 01:01:11 +0000
Manifest next update: Sat 19 Apr 2025 01:01:11 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: FHgJ/BsJ1ippcVF7D1e3jBLY5/6bhX95D1RSSg34eIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:f6:6e:00:8c:9d:14:30:ea:8d:f3:a8:7c:44:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Apr 18 01:01:11 2025 GMT
Not After : Apr 19 01:01:11 2025 GMT
Subject: CN=8d96570141ad1d335af66053a1de3b60f230b075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:a9:ea:bb:d5:bf:f6:02:dd:60:17:6d:d4:
70:2e:29:27:89:3d:a0:31:1d:2b:1e:09:b7:20:91:
6e:e0:cb:7d:90:4a:45:dd:38:3c:7e:a7:7a:63:0c:
34:ee:00:a0:b1:a7:3c:df:de:35:a5:0b:18:8b:3c:
4e:1e:7a:29:d0:e7:b0:1e:73:2a:52:d3:c4:7a:d8:
1a:54:0a:fa:53:f9:be:2f:f6:c4:37:57:87:05:a8:
62:21:30:13:11:c5:4d:fb:8d:5b:be:2c:33:e9:da:
8a:49:da:e8:27:8e:e9:2c:83:fb:21:ce:05:43:bd:
70:72:ac:c9:02:99:35:0c:fe:c7:e3:b2:74:ab:da:
8c:36:25:51:96:d4:70:ac:1b:78:7f:b1:f9:d8:7c:
cc:0f:8b:6f:42:d7:81:80:42:35:1e:f0:d0:68:be:
e3:d2:69:db:16:bf:71:e6:8e:e2:aa:83:86:01:98:
84:c3:3f:c7:2b:40:ee:f7:ad:96:d6:dc:16:6b:33:
5c:f1:67:d5:d8:bf:9b:be:66:d9:9c:88:30:e4:f7:
cc:06:31:a5:e6:6c:92:9e:3a:58:a5:57:e2:61:33:
40:f1:a0:04:3e:b7:56:ce:98:9c:9b:3a:4d:db:cf:
94:69:91:54:5b:76:a9:2b:5e:14:32:1e:31:a1:96:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:96:57:01:41:AD:1D:33:5A:F6:60:53:A1:DE:3B:60:F2:30:B0:75
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:87:c6:d3:cd:42:9a:13:28:7e:ca:13:64:93:87:94:b3:36:
65:84:5d:03:de:fd:6f:ca:ce:43:0e:0e:ce:69:a3:55:fc:79:
e4:ab:c8:92:44:1a:a5:49:d6:4d:59:68:dd:d1:9e:49:b6:2a:
f9:5f:a0:ac:1d:db:93:78:ea:98:3a:1a:06:a5:5d:08:5c:9a:
aa:c3:45:09:30:c9:ff:67:ff:52:ab:22:83:b9:23:aa:18:31:
07:0f:ef:eb:2c:84:9d:a3:3e:55:3e:f0:16:0a:83:9d:65:7f:
05:ec:a1:96:21:50:75:fb:b8:38:a2:d7:53:a2:21:07:ab:07:
9b:33:12:5b:bf:ac:d0:25:d3:53:9d:78:22:63:b8:28:db:9f:
58:99:c4:ea:90:31:0c:57:96:9c:2f:1d:20:2a:ee:25:1c:4f:
32:b7:de:79:90:2d:c7:c8:d5:a3:fc:24:cd:64:59:49:4a:56:
79:b1:84:24:db:99:95:93:d7:c3:be:44:aa:4e:75:2a:df:a2:
2c:26:6f:9d:cf:8f:16:bd:b0:6e:64:28:97:6f:9b:22:91:39:
12:06:42:bd:f9:fc:5f:79:e4:1d:e1:f9:0f:0c:b7:a4:18:44:
8e:9a:6a:0d:fd:67:7d:39:25:4e:9e:54:79:09:08:6c:91:88:
9b:d4:86:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:04:35 2025 by rpki-client