Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File: N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier: SgERYTv9iLeuxaDBtp3x/h6tVVmPp4oUUdZNc6ix5Rw=
Subject key identifier: 8F:DC:68:17:54:8B:52:78:9C:42:39:1F:58:9B:90:9E:4F:1E:72:1D
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial: 0196816B763372C2F0BE9B90BE1ED6F30E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number: 04D5
Signing time: Tue 29 Apr 2025 12:00:25 +0000
Manifest this update: Tue 29 Apr 2025 12:00:25 +0000
Manifest next update: Wed 30 Apr 2025 12:00:25 +0000
Files and hashes: 1: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: oKtuMQXzY39TAJoo1xMMsnO7VIX4Kd9ff4BwtHkVLoA=)
2: vhowbyAk5Rh70uoSE00L17bmBWw.roa (hash: BWCvKLZnXJi7kB8pBa3EtqBdHPmAZ8d1B0Q3jz/KOuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:76:33:72:c2:f0:be:9b:90:be:1e:d6:f3:0e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Validity
Not Before: Apr 29 12:00:25 2025 GMT
Not After : Apr 30 12:00:25 2025 GMT
Subject: CN=8fdc6817548b52789c42391f589b909e4f1e721d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:ec:e0:be:c0:0d:12:3f:1e:a2:13:11:81:
46:19:c2:fe:53:84:ab:6b:7a:67:31:fe:c2:cb:02:
2b:4c:cf:e1:88:69:4d:5f:41:65:ce:71:b0:d3:54:
29:2d:43:f3:75:da:18:8d:28:25:f1:bb:e7:19:17:
60:5f:89:8c:15:a0:8c:e2:22:0d:f8:da:3b:5d:c7:
50:1e:c3:11:56:5b:d4:41:f7:8d:5f:f2:c6:b7:29:
4d:12:ff:06:5b:38:43:07:bd:38:af:86:9b:80:72:
98:c5:bd:bd:9a:3e:c4:2e:d9:f3:fd:93:e1:9d:1a:
9d:43:c7:f3:05:b2:c5:c8:0b:da:3e:24:30:d0:7c:
be:d2:92:04:8c:9e:42:8f:cb:27:19:04:2e:59:dc:
96:b8:8a:15:ab:b7:1c:0d:8f:6d:20:ef:1c:d3:d0:
ba:74:5b:08:dd:c6:2b:59:2f:04:6f:fa:57:80:a3:
ac:c4:0f:a0:2c:cb:8a:1f:34:e1:0a:33:58:d7:0a:
77:8b:20:99:90:02:2d:48:82:ba:63:17:bf:4f:91:
9a:0b:0f:5b:02:75:7e:2b:59:6d:b9:83:4c:cc:58:
42:30:a3:41:30:cf:c5:df:31:77:2b:6f:17:40:d5:
7c:ac:e6:8c:de:73:46:3e:2c:b0:7f:43:a9:89:d3:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DC:68:17:54:8B:52:78:9C:42:39:1F:58:9B:90:9E:4F:1E:72:1D
X509v3 Authority Key Identifier:
keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:fe:cf:07:54:6f:d2:70:03:d3:b1:1e:91:17:70:6b:0e:84:
9c:42:30:85:5e:9e:a6:1f:e4:c1:da:b7:09:89:59:ad:f0:40:
17:3d:83:67:67:e9:29:cd:98:7a:85:55:24:02:d9:c0:bd:b4:
70:8e:ac:53:68:d5:e8:52:c3:c0:ea:75:11:aa:90:54:f3:59:
75:e9:2d:3d:b3:75:3b:18:47:2a:e5:ec:15:b1:7d:09:d2:05:
47:b9:c4:39:46:50:16:cc:6b:58:28:9e:38:98:d3:17:c8:8a:
37:81:94:4c:66:24:92:66:07:56:05:a1:c6:03:17:87:f7:f8:
4d:8f:b5:43:e3:08:17:0b:a9:70:55:27:17:fd:f9:a4:39:52:
04:06:e2:28:20:28:7c:62:4f:2e:3c:69:a3:80:dc:7f:6e:a0:
00:51:e6:6b:c9:37:d7:6e:57:e8:7b:37:1c:51:bf:e7:8a:4b:
cb:c8:8e:9e:29:21:19:b9:72:4e:f0:11:9a:25:d6:44:82:ec:
40:7a:1f:5b:77:b3:92:50:d5:ba:07:40:bd:33:3f:2c:1b:9b:
36:ab:14:1d:e8:54:a5:4e:1d:5d:5c:e2:53:b8:42:58:24:e1:
66:f9:cf:13:e6:48:0f:cf:8c:3f:e0:4e:d6:c2:fd:00:df:bc:
f3:b9:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:15:45 2025 by rpki-client