Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
File: nc28ow8_5XpR57bAt_MgOvFnKiI.mft (raw, json)
Hash identifier: oHqbVz48VORN7ycHE+b1oVUt0OzuImvWQpaYDKtnKWM=
Subject key identifier: 4E:CD:36:AE:3D:85:E9:49:46:6E:E3:A8:A0:34:E6:41:EC:85:0D:A1
Authority key identifier: 9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
Certificate issuer: /CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Certificate serial: 0196857F19F32CA05D02B3A50F3E9EDD503A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
Manifest number: 1511
Signing time: Wed 30 Apr 2025 07:00:21 +0000
Manifest this update: Wed 30 Apr 2025 07:00:21 +0000
Manifest next update: Thu 01 May 2025 07:00:21 +0000
Files and hashes: 1: nc28ow8_5XpR57bAt_MgOvFnKiI.crl (hash: 6fuJexs56n0QkpVPuig5hTO43MRBAw5erk7SmwLwW4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:19:f3:2c:a0:5d:02:b3:a5:0f:3e:9e:dd:50:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Validity
Not Before: Apr 30 07:00:21 2025 GMT
Not After : May 1 07:00:21 2025 GMT
Subject: CN=4ecd36ae3d85e949466ee3a8a034e641ec850da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:66:64:e5:62:86:ce:a9:95:7c:e9:67:96:34:
e3:a5:ef:ed:e1:74:83:e3:a2:45:14:3e:eb:ba:29:
3d:9e:76:62:b4:75:e3:0a:18:90:1e:db:48:2b:b7:
dd:1d:ba:86:32:37:3f:9d:39:0f:1a:f7:ed:b5:2c:
36:b6:ba:1e:41:e8:87:0d:bd:97:bf:fb:af:79:7b:
47:fd:07:e4:38:22:56:60:4d:69:4a:72:e3:8a:0c:
ff:ee:6a:e2:82:37:b6:ed:7a:20:23:30:7d:f2:af:
6f:97:0b:79:ec:a9:76:27:07:10:1c:b1:01:d8:5e:
7c:c5:48:7b:ca:02:56:92:2f:fc:0d:a0:55:a9:98:
d0:2f:bd:ab:d0:aa:8a:41:68:74:af:f3:10:2d:fc:
a4:c1:58:04:b1:f0:b3:40:d5:dd:a0:c2:16:57:54:
58:8b:9f:0b:cb:1e:3b:78:ca:bb:7a:94:ec:2d:c8:
7d:76:51:f7:64:7c:00:e2:54:cd:4b:e6:53:3b:e8:
93:5b:1f:82:f0:c4:75:1b:2e:6d:9e:df:fb:b0:ab:
07:0d:fd:80:cd:eb:4b:a1:28:c6:0a:7a:85:30:08:
34:20:3c:d7:9f:9e:2d:31:1a:a4:10:4b:7b:d3:bf:
ab:f8:10:29:49:d6:a6:02:5a:ef:d1:28:ac:22:14:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CD:36:AE:3D:85:E9:49:46:6E:E3:A8:A0:34:E6:41:EC:85:0D:A1
X509v3 Authority Key Identifier:
keyid:9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:87:8a:72:1f:64:96:fb:48:64:81:98:ce:5b:96:84:da:0a:
f8:5b:ed:70:d2:e8:b5:8c:ce:dd:08:95:10:76:98:c3:e2:b7:
3a:4b:39:d4:25:47:1e:cb:9f:1c:1d:df:3d:53:36:a3:a1:68:
21:6b:94:98:88:10:88:fa:b2:29:55:a5:e8:bc:12:fc:ac:0f:
7c:ae:42:bc:75:f4:4f:93:95:99:8b:31:53:51:3d:15:db:06:
b2:b7:45:9f:01:84:f8:dc:a5:09:83:7c:20:e3:a1:99:64:90:
f8:38:5d:80:93:61:f3:6f:67:56:6c:a8:ff:e6:b6:e3:e6:58:
31:f5:f2:02:28:68:cb:de:58:57:f1:7c:95:5e:8f:5b:08:0e:
7f:69:9b:7e:98:12:0b:ba:6d:e2:a4:6f:2a:0a:68:a1:05:e0:
9c:a6:a4:3d:e8:02:d0:ac:f9:3f:00:08:11:7a:bd:52:1f:ab:
ae:03:f7:43:08:0a:de:eb:00:d1:80:0d:7b:55:8a:7a:69:24:
ce:c7:d4:44:25:41:07:27:3b:80:b6:93:a5:2e:73:eb:41:d7:
fc:12:b3:b7:46:d1:3b:56:78:3b:4a:8a:89:19:34:f8:9b:03:
22:23:1b:96:40:94:0e:92:0b:1b:f8:eb:04:28:85:ab:ec:a4:
c5:fc:65:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:52:18 2025 by rpki-client