Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier: 2HngUT4ujj27ycoj8KWEiJjcxP32U9f2BI5fWwVg9Yw=
Subject key identifier: 7F:2F:E6:95:47:DF:24:CD:27:EC:57:1C:18:10:1A:1A:64:9F:7A:48
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 01964FA3AA16ABE70C75402500573440DC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 20:00:47 +0000
Manifest this update: Sat 19 Apr 2025 20:00:47 +0000
Manifest next update: Sun 20 Apr 2025 20:00:47 +0000
Files and hashes: 1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: gz+PHTKo2ypcQ5O83vhKkK30cdvfIs9LUeCSpaknHbU=)
2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:aa:16:ab:e7:0c:75:40:25:00:57:34:40:dc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Apr 19 20:00:47 2025 GMT
Not After : Apr 20 20:00:47 2025 GMT
Subject: CN=7f2fe69547df24cd27ec571c18101a1a649f7a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:7f:8f:54:3f:2e:3d:c0:6d:a0:cd:70:03:
c0:f2:1f:b4:e0:e4:05:fd:2f:50:b4:fc:6c:ab:bf:
ee:24:c2:5a:d7:cb:83:c4:f4:97:86:76:0a:9c:87:
00:6a:f4:01:de:79:92:98:70:37:ef:a7:9e:00:73:
e6:aa:58:ee:71:4e:73:43:63:90:3d:a0:26:ae:10:
20:2d:be:c6:d1:7b:d7:b2:94:66:1d:6b:8e:15:fb:
3f:51:c4:b7:fa:f8:c0:a3:a6:03:15:97:69:4a:a8:
dd:b6:46:5a:aa:fa:f7:dd:1c:d4:0f:4a:40:9b:3e:
6e:87:c2:50:ff:04:22:96:fd:b6:62:13:8a:60:79:
3e:dc:64:3a:5f:e9:9c:92:fa:d2:9d:e4:57:d9:49:
4e:23:b2:c6:45:e7:61:4c:41:17:e9:6f:fe:f2:72:
7f:9c:7b:e6:47:02:66:73:25:7b:74:30:70:eb:97:
b3:52:dc:c1:c9:3d:7a:9e:8e:56:26:45:91:ed:00:
36:1f:82:b8:23:eb:72:c2:18:ad:bb:f8:d4:ae:f2:
62:ba:2c:19:a4:a1:ac:6f:4b:4b:f4:d9:da:cd:b8:
09:ea:b7:6e:2e:cd:7d:4c:cc:44:23:b3:38:fc:05:
8e:e4:55:5b:b5:ff:d0:0d:fb:fd:23:d0:2c:fc:f2:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2F:E6:95:47:DF:24:CD:27:EC:57:1C:18:10:1A:1A:64:9F:7A:48
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:18:43:0c:51:06:89:4a:db:e8:c1:b7:9c:a2:0a:69:e9:17:
a3:6d:70:24:ed:2b:43:33:84:d7:05:78:a0:44:49:76:8d:60:
02:84:33:94:86:a4:28:51:8b:4c:f8:78:1c:cd:9c:c8:6d:d6:
11:4c:2e:ed:ee:1e:90:a2:2a:02:28:e3:e9:6b:b7:de:1c:4b:
ba:93:eb:aa:4c:c7:fd:2d:c2:b3:53:8d:a9:1d:e9:a1:0d:4b:
d9:f7:11:0d:c7:85:31:1f:df:2e:f9:52:91:62:b0:03:1f:32:
ed:0e:24:4a:25:c6:4a:37:cd:35:ad:ba:29:59:f8:40:6f:94:
06:2b:13:c4:6e:91:07:d9:32:d3:a3:fe:56:80:48:fd:84:ff:
94:07:29:1d:c4:44:3d:c2:ea:c2:fb:b3:d0:1c:a2:f9:34:f7:
b7:12:a2:fd:4e:b9:59:ae:e5:5f:17:1f:c7:f8:24:ea:7a:07:
c3:0b:5f:c2:87:ed:66:15:74:51:51:96:04:dc:76:98:57:77:
4e:6b:0c:ee:d0:16:50:53:35:2d:13:60:3c:56:7c:76:a6:8a:
9e:e5:66:f7:53:b6:d9:bc:2e:b7:e4:96:72:18:5d:0b:34:9f:
6e:24:a9:1e:e6:90:58:ee:1b:aa:21:1c:4e:8c:08:bb:37:38:
0a:27:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:30:26 2025 by rpki-client