Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
File: N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft (raw, json)
Hash identifier: nUWFupBNzAygjfr/Kksio8T427NybSamw4hDeF2e4jU=
Subject key identifier: 1B:A8:AE:4A:B6:C4:A1:AD:F0:70:B0:CC:1E:20:BC:35:F9:D9:26:27
Authority key identifier: 37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE
Certificate issuer: /CN=37698b4f37d8081c3505ada0baa85221934341be
Certificate serial: 019679E8F6F53F7D276D817156B7823E3CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
Manifest number: 0D6D
Signing time: Mon 28 Apr 2025 01:00:32 +0000
Manifest this update: Mon 28 Apr 2025 01:00:32 +0000
Manifest next update: Tue 29 Apr 2025 01:00:32 +0000
Files and hashes: 1: N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl (hash: 5/agd+xvzOc/Kd+NmlbjUJ0M9QBrTPIBkJctmaxi6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e8:f6:f5:3f:7d:27:6d:81:71:56:b7:82:3e:3c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37698b4f37d8081c3505ada0baa85221934341be
Validity
Not Before: Apr 28 01:00:32 2025 GMT
Not After : Apr 29 01:00:32 2025 GMT
Subject: CN=1ba8ae4ab6c4a1adf070b0cc1e20bc35f9d92627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:fc:2d:fd:af:a6:91:1f:3d:5a:fd:c6:9e:
d1:14:bd:e0:c0:59:16:9c:b2:95:7a:2a:a3:e0:f2:
5b:e1:56:1c:4f:97:b1:27:7c:e2:b5:63:37:57:66:
8b:7a:87:74:77:8c:79:08:0f:54:38:b2:47:4e:69:
37:96:0c:ae:03:e7:b2:87:8e:ef:d4:cd:41:d3:d9:
48:e0:0f:a7:37:35:77:4b:03:c8:88:7f:6c:43:24:
5e:b4:f8:a6:13:9d:8c:53:21:89:ff:43:86:cf:5f:
b6:8d:32:1e:a6:57:ae:1e:db:f7:87:04:a3:f6:13:
2c:93:3a:1b:f2:ca:0c:b8:68:19:4c:24:ac:4a:d6:
82:73:ed:d5:4b:b7:58:4e:f5:3e:53:97:20:70:5f:
9a:80:f1:01:ff:a8:1a:8c:f5:b7:01:39:25:b1:bb:
67:15:d2:ab:d4:58:b9:d5:3f:42:d3:f9:e7:aa:b4:
1c:1e:90:ca:9c:b7:3a:80:16:a3:6f:df:6f:e5:fc:
36:9d:25:dc:b3:dc:76:5f:62:d0:b4:df:23:ed:00:
e0:4d:50:e5:97:01:d1:3d:1b:93:c1:7a:39:01:10:
71:f0:9e:87:91:f5:32:30:a0:50:a4:6c:9e:a3:b7:
19:97:bf:aa:d9:21:5f:dd:94:69:f9:4f:6d:7f:64:
eb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:AE:4A:B6:C4:A1:AD:F0:70:B0:CC:1E:20:BC:35:F9:D9:26:27
X509v3 Authority Key Identifier:
keyid:37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6b:b4:cb:9f:46:26:52:49:5f:bf:81:93:ee:fe:8b:3d:d6:
da:98:45:5f:00:46:93:6a:0e:53:19:63:a7:bc:38:16:9d:fb:
c0:8d:07:27:f6:7a:b9:5a:33:24:e2:5f:ba:89:ac:be:a0:59:
5f:55:a6:c5:2a:31:3e:03:c1:a6:07:e6:fb:49:e2:d3:17:cb:
ad:ea:16:46:09:a1:15:6f:ec:b3:f8:d0:51:88:54:92:4e:7f:
22:b5:a4:c4:c8:c5:c2:1b:ff:d5:bc:0a:8d:14:d0:6b:c7:91:
2a:da:86:cb:dc:f5:dd:e9:47:51:58:e7:10:1d:5e:0e:3a:d3:
9d:74:37:53:be:a8:fa:84:0a:25:82:c0:19:45:30:35:b5:25:
b9:b4:b8:ce:55:fa:61:93:da:05:e2:ac:95:6c:f8:82:ea:f6:
a9:07:75:09:c8:51:af:d8:ee:9f:dd:89:54:41:6d:39:7b:f2:
82:72:ab:c7:b1:ba:c5:cd:8c:62:18:6a:8c:91:42:29:aa:d3:
00:ab:2e:c6:21:2b:eb:e7:e5:c5:e7:b8:5f:87:19:01:d6:46:
da:66:c2:f5:0f:e9:df:ec:3d:45:20:db:ab:c6:6b:aa:5b:f7:
01:b9:14:92:96:00:52:5e:cf:62:02:75:b5:2e:41:e1:b7:8d:
0e:11:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:32 2025 by rpki-client