Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
File: N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft (raw, json)
Hash identifier: mF+V7UBuKjX5Inp9PP2cJPtkAhyEN4Nthgki7yj7c4M=
Subject key identifier: 1D:CA:2F:9F:93:80:17:54:55:2B:90:C5:88:5B:FA:DF:D4:DB:26:5B
Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
Certificate issuer: /CN=377c264d388333d342372931aa0d192b0fba62c1
Certificate serial: 01964A463FD208A8071275043E8D0EE3F836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
Manifest number: 14F6
Signing time: Fri 18 Apr 2025 19:00:39 +0000
Manifest this update: Fri 18 Apr 2025 19:00:39 +0000
Manifest next update: Sat 19 Apr 2025 19:00:39 +0000
Files and hashes: 1: N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl (hash: 4VpwGF0YcXRg0evZ5A8mtC9aQ7zzHeX3MHN6DG5eClY=)
2: kDvrCZDJUN6ltTbVicwTRbgkORo.roa (hash: ZU7fz2rjwPLJnVqFmW3M/TsgnCWukDOaodixRDMDm4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:3f:d2:08:a8:07:12:75:04:3e:8d:0e:e3:f8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1
Validity
Not Before: Apr 18 19:00:39 2025 GMT
Not After : Apr 19 19:00:39 2025 GMT
Subject: CN=1dca2f9f93801754552b90c5885bfadfd4db265b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:ce:f8:f7:2f:5f:16:c9:27:2e:37:15:14:
2d:53:d2:4b:47:55:54:a6:c1:0d:9a:e1:f9:52:36:
f8:27:13:20:aa:eb:2c:36:46:5b:8d:14:bf:fb:2f:
ee:a9:5a:a5:6c:c0:90:4d:13:e2:40:2c:86:e6:c0:
88:8b:6f:a8:a1:35:68:a9:56:c4:50:cf:f8:be:08:
00:bb:cf:b7:9e:3b:ba:fb:ec:33:71:2e:d2:6d:2a:
6f:4e:e0:54:d7:7c:65:8f:c5:a9:b7:2b:2c:7a:82:
d5:d7:b5:fc:82:8d:38:9b:4c:28:36:f9:0c:e1:c5:
53:3c:a9:6c:ea:15:d7:e1:67:de:9c:f2:36:72:b3:
83:07:c8:41:72:50:0f:77:6c:68:1d:b3:31:fe:9f:
5e:08:7d:c5:07:27:44:7f:4c:23:31:d4:28:e6:c3:
b2:8e:17:6f:61:e5:20:64:16:3e:81:fc:07:b9:dd:
3e:bd:29:7b:17:1f:02:b3:51:4a:bb:3c:1c:de:40:
89:05:1a:7b:61:bf:e1:40:05:0d:4d:9a:7e:3d:52:
f0:50:05:cd:60:04:e6:8e:61:a3:2f:6a:a6:6c:dd:
5b:6b:0b:f2:93:59:2a:37:6c:b5:1c:ee:b6:1d:89:
40:c4:1d:40:79:f9:b9:8e:80:cf:89:60:a2:9b:d2:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CA:2F:9F:93:80:17:54:55:2B:90:C5:88:5B:FA:DF:D4:DB:26:5B
X509v3 Authority Key Identifier:
keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:54:50:bf:26:13:57:7b:7c:41:81:bd:eb:7e:c5:df:e4:13:
03:3b:be:a8:5f:fd:a4:61:83:65:ad:9a:d4:78:b3:e2:de:37:
51:12:e5:79:39:ae:24:76:91:8c:c0:06:c3:5e:30:24:b1:aa:
a2:44:f3:6e:c4:97:d0:95:a7:51:36:80:b3:82:12:50:bc:42:
64:de:e9:4c:71:7f:ec:af:86:f2:ab:92:60:0b:01:2f:68:44:
5e:4b:e8:42:a1:3c:da:28:13:35:f1:c6:18:d8:5d:d7:6f:91:
92:d0:5f:a9:3b:7a:82:1e:80:e5:76:23:64:bf:0d:5d:b8:a8:
62:1f:db:d4:8b:ff:8d:ac:ea:c9:cb:a4:bc:27:0f:ee:cd:7f:
e1:ca:70:52:c2:f4:18:2b:4f:77:36:45:19:c5:f9:51:3f:ae:
b4:c1:e8:cf:3c:8a:79:be:44:d6:59:d3:6c:3c:cd:76:c9:b6:
36:d1:eb:5e:ae:07:45:65:eb:a3:0b:ce:3b:f5:e1:91:55:16:
e0:6f:86:d7:ef:80:ff:70:84:91:29:88:3d:ca:29:b6:84:c6:
5d:06:55:91:55:9f:ce:63:2c:e6:08:3b:17:e2:da:af:da:ae:
7f:4d:c4:13:ce:61:16:9f:1b:27:80:94:37:47:5d:5f:46:e0:
74:70:5c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:52:44 2025 by rpki-client