Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
File: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft (raw, json)
Hash identifier: QqB/clb2YpjvZwfGZAw8W0oYYEzUQvUQLrrSiRYVwJo=
Subject key identifier: 54:1A:0C:53:7C:BB:8A:EC:1A:23:5C:53:79:B7:8A:17:A9:F2:FC:C4
Authority key identifier: 34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
Certificate issuer: /CN=34b960f6f19255ea39666f833ebe271761994b15
Certificate serial: 019682106B9E75F72A5283F2C672D4FF1712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
Manifest number: 06AE
Signing time: Tue 29 Apr 2025 15:00:36 +0000
Manifest this update: Tue 29 Apr 2025 15:00:36 +0000
Manifest next update: Wed 30 Apr 2025 15:00:36 +0000
Files and hashes: 1: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl (hash: u7WZOsCnDGlTcEyEWTf+2vcV+nNUvpGEJR4MX1x/5rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:6b:9e:75:f7:2a:52:83:f2:c6:72:d4:ff:17:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b960f6f19255ea39666f833ebe271761994b15
Validity
Not Before: Apr 29 15:00:36 2025 GMT
Not After : Apr 30 15:00:36 2025 GMT
Subject: CN=541a0c537cbb8aec1a235c5379b78a17a9f2fcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:63:a0:a7:27:a6:62:5c:c6:13:06:81:f2:
65:3f:f9:8a:40:a7:95:a5:2b:60:d0:2c:e4:4f:59:
df:a1:1b:95:29:54:17:cb:85:83:8d:c5:b8:a8:93:
65:e1:45:31:86:0f:af:56:8e:5f:a0:3f:06:59:73:
ef:e0:1b:5b:a1:14:47:c0:96:f7:b7:69:db:23:04:
80:db:27:10:92:a0:c6:4d:40:a4:6e:3e:3a:f4:03:
82:23:42:9a:ed:ab:99:20:be:43:68:c2:51:f1:ce:
ef:d2:f0:55:f7:1e:89:ce:f3:83:18:4b:3b:ab:f9:
38:9f:3d:91:ba:42:a4:11:0e:c9:9f:2e:7c:2a:22:
52:b3:16:f2:60:f4:d4:5b:e8:9b:7b:61:b0:b9:74:
c3:e6:87:b7:ae:1c:0f:c9:47:1f:68:f1:24:1a:88:
c5:c3:cb:c1:64:6c:9e:64:90:64:a3:76:bb:c2:4a:
bb:21:4e:ff:5b:69:7a:da:e8:af:1b:5a:d1:54:21:
ee:92:60:29:99:fc:f9:ca:45:86:35:5d:66:b1:ac:
c6:43:39:94:54:e9:73:d4:bf:da:19:58:b3:66:90:
82:5d:69:63:3e:5c:27:17:f7:3b:7a:61:45:c7:3a:
72:52:49:c2:23:e3:6b:23:52:18:f8:ee:17:7f:e9:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1A:0C:53:7C:BB:8A:EC:1A:23:5C:53:79:B7:8A:17:A9:F2:FC:C4
X509v3 Authority Key Identifier:
keyid:34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:21:bf:d6:ee:06:9b:79:1a:1d:92:90:d1:19:e1:0a:06:4e:
0f:0e:51:1a:2a:59:cf:f7:69:dd:33:d6:c3:f6:30:72:86:3c:
5e:8c:1f:63:06:84:9d:d7:e4:48:a5:9d:36:07:e1:8c:ab:d1:
1f:c9:92:71:75:32:1a:a8:dc:21:34:b4:2d:20:88:16:fb:9f:
e1:16:2d:bb:57:8b:9f:76:ff:e9:74:19:5d:c1:fc:de:12:b8:
4c:8c:34:e5:b5:77:85:de:14:e2:67:46:2d:3b:27:1c:60:05:
b9:92:27:62:de:6d:94:aa:37:00:cd:90:29:71:06:79:8b:95:
55:1f:cf:89:b1:35:fc:82:86:73:8f:ad:62:d0:e5:1d:3f:61:
50:c5:74:1c:33:99:74:bd:85:5f:06:a5:0f:75:4b:88:f1:c9:
09:25:f6:de:c0:32:f6:8d:07:6e:a7:6a:8f:85:f3:4c:b9:56:
22:f3:11:85:fb:3c:f9:d5:7f:35:84:70:95:64:61:71:68:77:
4f:e6:c4:2c:11:56:a4:b7:b8:dd:fe:3d:d8:70:e6:bb:89:f7:
57:46:5d:57:e6:94:99:7f:9e:d5:44:1b:36:c3:47:92:06:7c:
34:f8:65:9e:1d:a0:71:38:d4:45:a9:36:a3:9f:51:46:9f:3e:
ef:c8:73:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:53:57 2025 by rpki-client