Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier: 2GT63tMwAHYGOL7FhCGTeYGeC3LMGQsTOsL6mekIoIg=
Subject key identifier: 40:4F:37:11:2C:5D:54:4F:1A:10:B4:F0:AD:19:DB:EE:5C:E8:23:1E
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial: 019683FF8D5ABA14B7946A13C60DB83ED7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number: 0204
Signing time: Wed 30 Apr 2025 00:01:25 +0000
Manifest this update: Wed 30 Apr 2025 00:01:25 +0000
Manifest next update: Thu 01 May 2025 00:01:25 +0000
Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: 0l94RtcO9FWjeRmpvh09n07BmzJ3kLF/oLn4JplWFvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:8d:5a:ba:14:b7:94:6a:13:c6:0d:b8:3e:d7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Validity
Not Before: Apr 30 00:01:25 2025 GMT
Not After : May 1 00:01:25 2025 GMT
Subject: CN=404f37112c5d544f1a10b4f0ad19dbee5ce8231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8f:bd:09:18:93:bd:c0:75:3b:49:3b:6c:5a:
57:a3:1a:88:e0:06:a3:a3:24:d8:94:6a:18:72:4a:
63:ee:aa:84:c8:25:25:79:f6:c8:01:e0:f9:29:11:
a7:1f:eb:e6:b5:bd:f7:14:9c:eb:0c:c0:2c:77:99:
fe:35:24:af:6e:81:67:b9:0b:6d:23:af:d3:1e:f4:
1b:96:92:7a:37:cc:3d:d1:a6:3d:92:9b:e0:4c:03:
37:89:d2:c8:69:d9:06:c2:af:de:b5:e4:70:69:83:
19:ec:de:52:b3:03:b9:45:27:17:9c:04:36:ee:88:
e3:1d:72:b9:5b:12:8a:40:7a:8f:4f:b6:48:51:3b:
4a:e0:b0:12:05:e8:98:e0:c6:1d:a3:4d:7e:ca:56:
1e:e8:d7:1d:45:da:16:c3:4a:49:6a:8e:3e:54:da:
79:11:9e:7e:23:39:53:e1:4d:2b:08:75:b0:81:a9:
8b:dd:60:fc:2d:22:95:23:a1:2a:f3:58:6d:dd:f8:
c1:c8:7b:fc:a4:4e:45:79:bb:ac:72:71:02:26:66:
51:4d:5f:49:86:91:e9:51:05:4d:25:49:00:d8:03:
77:79:45:4f:71:6a:63:8d:c9:93:f2:40:ec:d2:b5:
5c:8c:c9:83:1f:1d:af:3e:e5:d6:2b:c8:ce:da:19:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4F:37:11:2C:5D:54:4F:1A:10:B4:F0:AD:19:DB:EE:5C:E8:23:1E
X509v3 Authority Key Identifier:
keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1b:74:a3:90:0c:9c:93:55:8f:56:4a:dd:70:ec:97:01:d6:
83:7b:07:92:d9:bd:38:5d:84:3e:14:92:f2:33:cc:c7:bc:82:
07:4a:01:6a:be:d4:c3:49:5f:3c:ce:2c:1a:99:97:5a:45:9d:
b3:e5:bd:e7:70:21:f6:79:66:e8:44:b4:eb:50:cc:23:4b:0e:
e8:67:b8:c4:66:10:55:74:88:21:71:75:6a:53:8a:29:22:a1:
b7:14:14:6d:5b:6b:57:46:2a:8e:0e:02:a9:c5:2c:cb:28:2a:
8a:1b:6b:10:83:de:d5:20:43:44:5a:bc:f1:ed:3e:ad:ec:d5:
e7:29:e8:58:1f:47:aa:6c:28:19:c3:31:69:07:26:0a:26:bf:
66:d8:94:13:fd:de:80:5e:c2:5a:9b:83:2f:61:f2:c9:d4:20:
fc:e1:f7:f3:b8:2b:04:71:71:d5:34:ff:c3:cd:91:d7:74:59:
04:3d:5d:af:f2:46:96:72:1b:d6:ad:79:e0:65:17:ff:15:63:
1b:d8:f2:a7:eb:ae:2a:41:12:04:fd:2c:02:8c:4b:4f:66:91:
b6:be:13:4f:c0:a3:b3:6b:0d:a1:e3:9d:ad:3d:8f:67:01:9a:
d0:ea:f1:bf:ed:71:b4:df:39:71:0b:7d:87:4f:fb:08:bb:e4:
81:bb:01:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:34:19 2025 by rpki-client