Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
File: N8ZRc24kPV6mzsymOv20oDEtdzA.mft (raw, json)
Hash identifier: Rt9hu7DcvzIjbBCVXWO2+3jINhNFeBKJsSi+x09YBV8=
Subject key identifier: EE:C9:D8:8C:A0:D4:99:AD:DF:C2:EB:39:49:0B:39:2E:61:D0:1F:E8
Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Certificate serial: 019683FF0637E2814923EADA408D78EB9725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 00:00:50 +0000
Manifest this update: Wed 30 Apr 2025 00:00:50 +0000
Manifest next update: Thu 01 May 2025 00:00:50 +0000
Files and hashes: 1: N8ZRc24kPV6mzsymOv20oDEtdzA.crl (hash: qm/vtNON8o4IuMP0e54I+CTQMsZnNQ7eLrRg9treOlg=)
2: ZRv7bLa28b8tf6OWanURzCF5xRg.roa (hash: oK8tGS8JdWtsRZmm08fTUJdRLOafRX6MArGF8Pv/FL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:06:37:e2:81:49:23:ea:da:40:8d:78:eb:97:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Validity
Not Before: Apr 30 00:00:50 2025 GMT
Not After : May 1 00:00:50 2025 GMT
Subject: CN=eec9d88ca0d499addfc2eb39490b392e61d01fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:89:11:37:d9:cf:31:8f:3f:7a:b9:50:a9:9b:
69:e9:97:58:01:8e:36:e1:f1:5f:d5:35:87:60:4f:
dd:06:de:0a:c3:fd:56:1b:4a:b5:bc:6a:99:21:9b:
ae:f3:2e:d3:e8:88:62:de:6d:16:63:f8:4b:33:51:
0a:5d:b7:2f:e8:a7:ad:fa:ae:3a:d7:3b:cd:dd:89:
b3:46:94:85:fe:73:ca:9d:93:6b:38:b1:89:3c:98:
86:8c:91:83:5c:1f:e2:0d:50:d8:f9:d0:c4:65:3e:
c1:bf:37:65:af:bd:08:e7:7e:71:4d:4a:76:da:5e:
84:b1:d3:7f:5a:23:4c:7c:ef:e6:88:5a:02:bc:94:
dd:9f:6c:f7:ec:ba:d7:0a:e2:9a:a7:41:64:6f:d8:
10:f2:0e:b0:5f:08:de:ca:7f:4e:e7:0b:9a:d6:80:
a2:e6:4f:e7:13:61:d5:59:9d:96:a4:1b:65:1c:dd:
a5:4e:6c:0e:fb:10:39:48:9d:a8:36:6b:cf:e9:62:
cb:b2:f7:3e:93:ab:b7:e0:e0:24:a9:08:0d:71:4c:
56:89:bb:04:c7:62:c9:8c:86:f6:fb:64:2c:5f:29:
7d:69:65:23:75:0a:98:cc:a5:04:b3:6c:e2:e4:0a:
f0:ef:2e:66:00:b2:f0:63:80:04:5f:7a:15:d8:3c:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C9:D8:8C:A0:D4:99:AD:DF:C2:EB:39:49:0B:39:2E:61:D0:1F:E8
X509v3 Authority Key Identifier:
keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:81:3b:3a:b1:4f:73:b5:6c:cf:18:3f:9e:d3:71:fd:30:f5:
ec:11:01:15:68:2e:f1:53:ae:4d:ca:40:ab:ad:fb:0d:cb:1a:
6e:dc:4b:45:8c:a5:cc:8e:80:22:dc:68:fd:fe:e3:fd:11:d4:
09:de:82:7c:4a:86:a4:e4:8f:05:7d:2c:92:5a:8c:51:c3:57:
92:d8:6c:59:bc:0e:54:1c:92:68:26:5a:2a:30:1e:c1:5a:73:
9f:d8:26:95:c7:04:d5:61:50:58:d7:a1:39:4f:fc:15:13:c9:
6b:21:af:e6:ae:4b:af:78:74:83:4c:3a:9e:cf:19:90:bc:f4:
7f:49:eb:ab:63:39:6e:53:34:bc:fa:98:a2:cf:3f:e9:c1:68:
a6:4e:a0:96:77:51:c7:a9:85:a0:ee:2b:13:2a:d5:3a:df:5e:
2d:1b:f0:ae:3b:ac:77:77:75:37:3c:98:79:35:c4:5b:3e:ce:
3b:60:3c:c1:a0:f4:e1:a7:97:f7:09:27:50:69:5c:70:92:13:
ea:8a:26:be:21:57:be:54:a1:9c:ae:53:37:38:58:a6:1e:24:
54:47:ea:ad:35:bf:04:11:06:9d:2a:a6:36:55:b4:fd:88:3c:
ce:af:11:dc:66:f2:30:49:73:d2:18:63:66:22:b8:c0:41:ff:
fc:33:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:16:34 2025 by rpki-client