Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier: 84W+TaJsiJbsarbfV51GJ0OiQ3CVY5d9gm1EhbhXW98=
Subject key identifier: 68:5F:E5:90:1B:8A:44:97:5F:3A:7F:16:E4:98:98:AE:84:C3:23:CF
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial: 01964255C4B258CD12AB4019E95ABC44D62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number: 14F0
Signing time: Thu 17 Apr 2025 06:00:39 +0000
Manifest this update: Thu 17 Apr 2025 06:00:39 +0000
Manifest next update: Fri 18 Apr 2025 06:00:39 +0000
Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: zlpPyHKliPzSfZ2I5jcrWTe0QXbqmTeQPtne9B04dZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:55:c4:b2:58:cd:12:ab:40:19:e9:5a:bc:44:d6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Validity
Not Before: Apr 17 06:00:39 2025 GMT
Not After : Apr 18 06:00:39 2025 GMT
Subject: CN=685fe5901b8a44975f3a7f16e49898ae84c323cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:65:19:48:89:f1:c3:e4:59:1e:e1:7e:ad:
76:b2:5e:e9:4d:fc:77:4f:5b:3c:17:11:36:c7:7e:
e0:67:be:36:26:21:28:13:f2:cb:41:f4:d5:20:22:
4c:2f:09:7e:5e:c8:ff:bd:cc:81:a8:ed:d8:5e:59:
c2:f9:8c:7c:5d:cf:04:63:ad:d0:83:0a:f3:36:f4:
5a:f3:df:20:f7:b9:18:a8:d9:16:ef:c0:1b:7e:50:
5a:c2:1a:36:28:3b:66:69:e9:fd:45:95:88:8b:bb:
33:54:4c:b8:1b:12:4f:dc:d6:a0:ce:ed:7f:4a:37:
8e:1f:e0:24:5a:3f:a1:5d:56:4e:28:48:b8:9b:51:
07:0e:e8:46:03:0e:15:7b:99:39:75:33:10:c3:40:
7a:44:af:fd:6b:c3:3f:5d:ec:03:e5:47:ed:88:57:
02:4c:7e:7e:bf:b5:a0:b9:94:60:ea:85:70:af:80:
ed:7d:06:70:64:4a:63:93:31:6e:4a:38:2c:e6:e3:
cc:01:6c:41:f4:fb:40:11:8c:03:a8:4f:78:4f:9f:
b1:41:98:8c:d9:8c:c4:15:4f:75:15:f1:5e:72:ff:
a5:5a:05:a4:de:d4:e3:04:02:33:1c:43:ef:d3:71:
b9:aa:2e:3e:a8:42:fe:34:33:4f:97:6a:3b:cc:34:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5F:E5:90:1B:8A:44:97:5F:3A:7F:16:E4:98:98:AE:84:C3:23:CF
X509v3 Authority Key Identifier:
keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:60:28:c4:cd:55:50:ce:0b:40:a0:9d:d4:d4:79:b1:e8:e7:
e0:44:54:d1:bb:f8:13:db:7c:87:ee:c2:c1:ed:b4:ae:bc:3c:
f0:0d:6f:e9:ee:e9:0e:50:fe:b2:9d:aa:06:dd:69:31:67:f1:
b0:06:5e:af:3f:20:60:7f:28:ba:5d:da:3a:05:3a:a0:6c:68:
c7:d5:f8:af:9e:00:1e:b3:73:14:d6:59:8b:94:46:df:fa:63:
bc:10:5c:23:1c:b1:a1:43:f5:f7:f3:bf:4b:05:84:b0:cd:45:
70:b2:81:2f:d0:cf:64:6f:ab:d1:1b:84:0c:f7:79:81:c2:25:
1e:e7:26:93:e5:f6:b2:a2:f2:1c:b0:1b:0b:d6:73:4a:3a:68:
32:bb:d6:ec:65:49:c4:d6:bf:bd:cc:d9:e4:8a:c0:42:a3:d6:
21:a4:3d:38:ad:ec:95:78:19:22:fe:04:e6:d5:25:48:d6:f8:
f0:52:b1:89:c1:eb:7c:a6:0b:21:69:e1:8e:09:02:d2:5f:8a:
46:55:9b:25:78:05:48:2d:d2:75:8c:dc:a9:06:c1:88:12:42:
76:f5:25:64:11:88:be:80:ed:6b:fe:48:85:24:dc:28:db:60:
9f:5d:1c:33:dc:16:77:a3:15:3e:4e:b9:ed:d7:12:cb:c0:40:
39:af:00:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:46 2025 by rpki-client