Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
File: N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft (raw, json)
Hash identifier: 16RiXzapTk+wphpUuwAQOK3wCuh+xynWdNdJycRQhM0=
Subject key identifier: A5:04:40:4E:2A:09:04:C5:AE:63:AF:3D:D9:E9:F1:9E:B4:2A:12:24
Authority key identifier: 37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE
Certificate issuer: /CN=37698b4f37d8081c3505ada0baa85221934341be
Certificate serial: 01976D3DC06BF6630576BD09085A189E6CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
Manifest number: 0DEB
Signing time: Sat 14 Jun 2025 07:00:52 +0000
Manifest this update: Sat 14 Jun 2025 07:00:52 +0000
Manifest next update: Sun 15 Jun 2025 07:00:52 +0000
Files and hashes: 1: N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl (hash: SyyUcVfRhSAfBFlefAPzi8pFZU9fQncTkc+dGISXTi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:c0:6b:f6:63:05:76:bd:09:08:5a:18:9e:6c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37698b4f37d8081c3505ada0baa85221934341be
Validity
Not Before: Jun 14 07:00:52 2025 GMT
Not After : Jun 15 07:00:52 2025 GMT
Subject: CN=a504404e2a0904c5ae63af3dd9e9f19eb42a1224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:d8:80:15:e2:1e:ef:d9:d7:cc:66:f5:04:
bf:00:c6:c3:9f:14:a6:9c:7f:4e:bc:ab:8b:ac:87:
b6:37:05:d3:b8:78:6b:f6:6d:03:46:3a:4e:dc:53:
af:75:7a:f0:79:69:e9:52:e4:7e:a1:20:19:e8:30:
eb:b2:35:52:d3:0e:12:f5:5b:02:53:45:1b:c7:8a:
77:07:5b:3e:c1:8f:95:03:0d:d8:9d:b8:8c:5e:de:
2c:aa:c5:76:4e:53:33:c5:e5:99:57:c9:87:81:97:
73:ae:bd:33:de:72:43:91:4d:19:37:75:54:75:53:
22:86:55:57:42:0d:02:56:a0:04:da:0c:2d:64:78:
b4:0a:5f:68:dd:8b:b9:20:07:ac:61:ae:30:d7:cc:
d4:9d:30:5d:39:72:bc:a5:24:55:81:38:25:aa:6e:
df:79:75:d1:79:f6:d9:b5:d6:da:52:71:48:ae:28:
ec:29:f9:8f:11:ca:c9:09:77:b4:6c:24:da:b9:10:
d2:14:e9:f2:6f:d1:92:42:15:e6:60:d5:2c:d9:f6:
14:b1:8b:4f:5b:5e:73:3c:ce:05:98:de:b4:65:72:
d2:ff:d6:9e:94:59:7a:a2:55:a9:19:02:76:ee:d5:
8d:1b:f5:3d:eb:2c:5f:da:9a:c8:72:ba:77:ab:14:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:04:40:4E:2A:09:04:C5:AE:63:AF:3D:D9:E9:F1:9E:B4:2A:12:24
X509v3 Authority Key Identifier:
keyid:37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:94:b9:a2:49:98:4a:bb:b8:32:6a:fa:0f:c9:76:d7:a9:db:
8c:75:66:50:64:22:a3:84:62:6a:bd:49:86:7f:df:9c:c0:16:
f5:60:02:b3:a2:0b:80:e7:74:dc:f7:e5:f3:54:db:af:26:00:
64:e8:0b:b1:04:fa:9c:1f:43:91:63:51:27:c4:bf:6b:7f:9a:
b8:95:23:0c:ac:1d:16:68:e5:bd:95:2b:c9:8c:7d:d4:0d:6d:
fc:7e:ea:c6:aa:39:f9:c6:a5:4b:a9:a4:50:40:10:83:cd:c7:
b7:f3:d5:28:d4:ce:d6:6a:6e:dd:e9:91:93:fb:c2:f5:56:32:
31:4c:96:55:3d:df:0e:c0:ac:88:71:46:12:85:93:dd:10:c6:
9b:97:17:e3:42:c7:c1:cd:7c:d4:c3:9e:78:33:f1:82:d9:6f:
72:82:85:72:c8:61:5e:74:f9:b3:00:a6:b0:78:a8:d4:f3:98:
8c:9c:8f:2a:d1:7e:68:cf:db:33:04:70:b2:b0:b9:1c:6d:f3:
44:29:45:77:14:ee:9e:57:5b:15:42:f8:f4:90:fb:1e:0f:4a:
88:61:1d:ac:10:65:4b:1e:4f:89:36:26:92:d7:07:21:a6:44:
c4:7b:79:6a:8d:3a:d5:43:73:65:07:80:d7:db:3b:cc:98:bd:
83:cf:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:31:43 2025 by rpki-client