Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File: N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier: 4EcsrznqyGlG/WPRg4fcjbwMGLyyIN9bFpdmCAjDih8=
Subject key identifier: 8E:95:22:F5:2A:8C:44:6C:09:8C:44:24:3A:3F:AD:BC:3E:F2:CD:DA
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer: /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial: 0196760C63D87734879B909D218E9B8F8A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number: 0A19
Signing time: Sun 27 Apr 2025 07:00:45 +0000
Manifest this update: Sun 27 Apr 2025 07:00:45 +0000
Manifest next update: Mon 28 Apr 2025 07:00:45 +0000
Files and hashes: 1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: 1PZiUzLpp5PTL+z1zwT6EULb50gbTGOF8B8A6+GhSdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:63:d8:77:34:87:9b:90:9d:21:8e:9b:8f:8a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Validity
Not Before: Apr 27 07:00:45 2025 GMT
Not After : Apr 28 07:00:45 2025 GMT
Subject: CN=8e9522f52a8c446c098c44243a3fadbc3ef2cdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:37:17:b4:69:e0:bb:63:f3:55:0a:73:de:
36:41:94:c5:4f:10:29:f1:56:ff:00:36:a5:26:a8:
67:6a:26:06:6c:15:f6:8d:ce:d7:9c:4d:0c:75:91:
00:4b:d6:61:b4:03:a7:1d:18:06:e7:dc:ab:b9:03:
7b:b6:7e:68:91:60:45:b6:ad:7e:22:1e:06:a0:33:
e8:5f:9a:bc:a3:f7:4c:ba:52:6c:7b:4f:9c:60:da:
47:ee:47:2a:25:6d:65:50:10:db:6b:c3:fe:a6:d4:
da:cf:3f:98:51:94:b8:3e:77:10:b4:9a:48:47:83:
f3:37:1d:ac:bf:70:1c:44:b3:c9:b7:1a:d0:87:0c:
41:1b:55:c0:ce:7b:ae:1a:24:f3:00:54:d4:0d:a7:
93:8f:10:f4:2f:ca:86:30:51:53:cb:f2:6c:cf:f7:
ff:5f:54:96:7d:20:96:0d:0f:35:11:df:fb:00:9e:
32:c1:74:40:67:0a:cd:3b:fd:6f:f6:32:88:54:ff:
d9:ba:e2:59:da:09:f0:3b:0f:c8:e0:84:b5:49:b9:
9f:5f:8b:3f:39:ff:af:8f:13:3c:e8:2a:0a:8e:66:
cc:ad:c8:fc:be:9e:1c:76:47:9e:91:03:cd:f1:ed:
ff:06:7f:b3:a0:ce:a1:f7:2f:f9:41:f6:5a:57:11:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:95:22:F5:2A:8C:44:6C:09:8C:44:24:3A:3F:AD:BC:3E:F2:CD:DA
X509v3 Authority Key Identifier:
keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:69:73:30:e0:51:ca:96:ed:0f:68:9b:c8:89:36:23:a5:bb:
2d:20:6b:cc:29:21:7e:69:67:f7:97:10:5c:6e:85:cf:59:75:
7c:12:77:55:18:ac:9a:18:74:b0:56:f8:e1:bf:5b:b5:15:19:
ec:8a:65:ae:52:ae:9c:c1:a9:17:c4:6f:bb:87:e6:cb:a9:83:
80:62:0f:78:cb:b1:7d:c3:de:ad:8b:28:11:36:69:ae:79:89:
00:f6:15:1c:60:50:ac:90:7c:45:7e:e1:aa:98:68:f4:ca:04:
e2:83:48:0b:d7:d3:d3:e0:f7:e9:90:15:69:8b:f3:35:1c:a7:
0e:93:d9:42:bc:8f:98:f7:10:79:89:09:1f:f7:03:80:06:43:
c5:8c:94:ab:f3:3f:f7:8c:2c:8e:d9:3c:a7:5b:06:2d:5b:45:
0b:a8:9e:7f:41:1d:8b:0d:67:7c:e3:77:6f:3c:53:31:87:b7:
3a:79:65:2b:f5:3d:ff:d9:f6:55:66:99:7b:6c:01:b0:6f:0f:
d0:57:62:65:c6:10:f6:14:38:6b:57:c9:ee:04:40:81:6d:3f:
59:36:0e:99:5e:d3:c2:36:57:b7:9f:8a:29:1d:12:57:cd:53:
1c:1f:52:5b:2d:f1:a7:ab:b1:64:7f:46:46:ab:f1:73:c4:ba:
94:f5:36:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:55 2025 by rpki-client