Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier: +wNLDCqqW0U1TF1r7RQXpSxlzYSoyuUH0jcFV8bvAbI=
Subject key identifier: 73:D9:2F:79:F8:E3:7B:45:68:B1:67:E9:C6:B0:0F:EB:86:A4:56:BD
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial: 01964443CFE699C35670DDCF693A66F23375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number: 14F0
Signing time: Thu 17 Apr 2025 15:00:16 +0000
Manifest this update: Thu 17 Apr 2025 15:00:16 +0000
Manifest next update: Fri 18 Apr 2025 15:00:16 +0000
Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: gKlIXhnkFDOJnU9C+CSE986r8RKuXLYQED76awZt+ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:43:cf:e6:99:c3:56:70:dd:cf:69:3a:66:f2:33:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Validity
Not Before: Apr 17 15:00:16 2025 GMT
Not After : Apr 18 15:00:16 2025 GMT
Subject: CN=73d92f79f8e37b4568b167e9c6b00feb86a456bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:be:1f:79:23:28:c4:ce:bc:46:46:eb:e9:
00:ad:df:7a:f6:b8:a5:a9:a1:3d:ae:f6:eb:54:7b:
5b:54:ea:cd:22:9e:2f:82:b4:93:7c:a0:fd:86:66:
a9:cd:e6:bf:08:f8:be:67:ed:2a:18:93:5d:06:66:
62:74:14:4d:84:dd:71:7b:6b:07:87:d1:ef:69:c6:
85:16:46:17:01:06:ed:20:02:02:87:74:6e:a2:0e:
b8:af:f3:20:66:67:b1:61:62:de:4c:6d:a3:76:95:
5a:45:59:78:81:92:9d:6e:8b:57:8e:18:ed:3d:96:
f7:24:95:ac:ee:02:da:d8:5c:22:c2:2c:2e:f0:7d:
31:d4:9f:57:9b:9d:34:fe:7b:0d:fd:ef:7e:7c:93:
31:16:a1:32:61:b9:03:55:a9:c1:87:d1:11:23:aa:
52:e0:9e:4e:86:3b:83:f6:3b:ce:31:08:e0:7b:46:
b3:b8:dd:76:75:4a:65:ac:24:7c:bb:ff:23:c8:33:
d6:bc:1e:68:4e:27:eb:36:92:5f:5a:c6:3a:05:f5:
e7:dd:8c:1a:1d:6e:65:48:10:02:89:bc:17:2e:5c:
86:7b:f8:d1:85:16:86:02:98:e4:7b:9c:8d:24:ec:
ec:b7:7b:25:14:c4:f4:a9:13:e4:30:4c:6d:15:3e:
21:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D9:2F:79:F8:E3:7B:45:68:B1:67:E9:C6:B0:0F:EB:86:A4:56:BD
X509v3 Authority Key Identifier:
keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4e:92:82:ce:c5:01:cc:9b:7b:1a:b2:59:ee:3e:3e:b1:ab:
4c:9a:d2:32:fe:37:60:65:a1:92:fb:a5:b3:9f:56:c7:57:b7:
4a:5b:12:6e:64:45:34:69:96:3e:76:e9:44:34:f4:f2:71:87:
64:bd:a3:b5:66:a1:a8:63:ec:bc:a7:c8:09:be:bd:9b:0a:f0:
d9:36:9e:1e:35:d4:b6:3b:52:bd:9a:59:15:f4:ab:f0:36:d6:
a9:c4:8d:87:b0:be:96:be:60:1e:3e:1e:dd:c4:df:8f:fa:5f:
23:8c:57:33:b0:1d:3b:09:7f:ca:e1:92:8d:70:e7:28:7d:ba:
27:dc:f3:bd:60:ba:e7:6e:3c:4a:f8:89:d5:9b:80:9b:3f:67:
01:cc:69:50:c1:95:ee:73:3e:44:6e:35:cd:4b:fb:50:49:41:
56:72:4e:0e:c3:b6:ce:42:65:0b:19:fd:d6:66:b8:dd:68:cf:
30:26:e8:47:84:d2:32:49:60:97:bc:8e:a6:f0:62:f8:ac:83:
6b:13:33:49:37:f0:9a:e2:bc:47:4c:90:ee:20:40:2f:38:01:
fc:d3:91:4f:8f:8c:fd:3a:32:f9:4d:ba:17:d9:93:e6:6f:c3:
52:34:c8:67:4b:5d:9a:ed:71:df:32:83:c6:c4:ed:04:1a:63:
04:e8:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:28 2025 by rpki-client