Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
File: N-1J76yXlZh3cazcd6DiKJBCd60.mft (raw, json)
Hash identifier: VmxqQXZIBdgi4mPC+9arr9LtWC5CmDraSzmyoMm9ebg=
Subject key identifier: C7:F8:BD:56:3E:AF:5C:AD:82:A8:01:31:69:79:8D:4E:48:C1:02:17
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 0196827E7B4936C6223F5415FE45E22CDA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
Manifest number: 0D11
Signing time: Tue 29 Apr 2025 17:00:49 +0000
Manifest this update: Tue 29 Apr 2025 17:00:49 +0000
Manifest next update: Wed 30 Apr 2025 17:00:49 +0000
Files and hashes: 1: 3R2oLYAWIxvU3vOCY9T-jGflBdY.roa (hash: 2FML5v0SfL1lum2iuE3qWeIT2u7iaV71VaL91S9NgIQ=)
2: CYs8Y4QkC6pLrRdUhQ8lF-crHv0.roa (hash: 2fQ0fJbFJmLOokw4tzaSLmT6+UmzzfHaw4FKPEJcqOo=)
3: N-1J76yXlZh3cazcd6DiKJBCd60.crl (hash: xOJL6hHBYqPhM0F2gw2RM4vc2wAteStnNNRmlbdKnL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:7b:49:36:c6:22:3f:54:15:fe:45:e2:2c:da:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Apr 29 17:00:49 2025 GMT
Not After : Apr 30 17:00:49 2025 GMT
Subject: CN=c7f8bd563eaf5cad82a8013169798d4e48c10217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:d8:d2:40:90:17:d6:67:0c:cc:5a:62:b8:
f8:59:d7:cd:1e:db:8f:8c:14:68:59:9d:01:9b:c8:
98:18:59:50:76:53:96:30:33:cc:61:93:d8:60:73:
78:7a:a0:89:20:01:a0:52:14:63:13:f9:1f:b9:4c:
bb:8d:f7:8f:6a:12:fc:c1:d8:71:4b:94:ba:7b:7e:
30:84:70:0a:8e:2e:cb:d9:1e:34:45:0c:17:3e:51:
e6:f4:3a:b2:93:1b:97:7f:af:18:10:41:2e:c1:60:
a3:34:15:d3:42:50:f7:45:08:af:18:8d:2b:26:54:
22:25:63:dc:99:2d:b7:59:55:82:2e:93:17:83:29:
70:a7:9c:6a:c6:c9:a7:a5:ed:6e:99:8e:98:de:af:
00:a9:23:37:c5:ec:f3:15:c9:05:aa:6e:58:3b:d7:
da:8a:c5:aa:46:29:41:6d:e1:54:3c:6e:dc:58:c0:
ac:a3:37:d8:30:e7:3b:0d:5d:10:ad:69:bf:de:9c:
80:dc:97:79:9e:ea:47:63:c0:b8:c9:2b:31:a8:53:
b7:aa:d5:9b:46:a9:56:3d:8e:4c:dd:da:d9:eb:50:
a6:f9:3a:3a:d8:10:40:bc:86:43:2e:4f:59:b1:26:
5b:7a:c0:48:d1:c1:fc:62:13:dd:68:94:7f:36:04:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F8:BD:56:3E:AF:5C:AD:82:A8:01:31:69:79:8D:4E:48:C1:02:17
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1d:31:56:7b:d5:eb:77:97:f1:0d:b0:16:f7:80:92:ab:ab:
ba:41:c5:3b:5c:5b:97:5d:dd:2d:d3:fb:68:e3:7c:a5:cb:c1:
d6:2b:27:2b:00:98:8a:ce:fb:18:70:17:f5:20:f5:8c:1f:b1:
0f:95:8d:28:0c:7d:e1:63:50:25:6b:95:4d:7d:16:82:ff:c8:
2f:6e:82:9c:b2:75:21:51:56:8c:d6:a6:c0:73:33:e5:81:ea:
f1:8b:7a:11:84:1e:b5:74:58:d2:61:f0:18:25:94:6e:c8:4b:
e6:06:e7:43:90:f4:10:bf:43:06:e7:cb:61:7d:d1:9b:00:75:
27:13:be:cd:da:51:90:98:a1:fc:48:3f:65:2f:0d:d9:e4:12:
e5:a5:70:ae:99:f9:41:ba:f8:55:4a:97:cf:a4:31:46:a3:2f:
98:93:20:04:97:f7:1a:25:70:96:61:d1:aa:9a:c8:73:d2:4e:
4f:16:73:54:0f:74:3e:d9:63:ac:34:53:cd:fc:b0:ce:7c:37:
de:d7:d0:0d:e3:07:0d:49:10:a0:fe:a3:13:ef:a1:5a:2d:6c:
50:66:4e:4e:52:09:f7:3c:e9:2d:1d:b5:a2:47:e4:04:14:ab:
f7:21:ea:86:af:35:dc:ba:20:77:ba:dd:a5:81:80:3f:55:11:
91:87:16:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:55:28 2025 by rpki-client