Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: ZoaXct8ihjijPYgrFycdVboOBbL/WXSn68CfsvmsZ6k=
Subject key identifier: C2:12:25:73:C8:2A:02:54:2D:7B:AF:0E:53:B8:FC:4A:EB:46:1F:8C
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 0196959725901268291A99B5596169982D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 147A
Signing time: Sat 03 May 2025 10:00:32 +0000
Manifest this update: Sat 03 May 2025 10:00:32 +0000
Manifest next update: Sun 04 May 2025 10:00:32 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: OplxHi9Bj3bHsH0KLKvDboGIxq8Xtmk+0so20LgZatA=)
2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=)
3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:97:25:90:12:68:29:1a:99:b5:59:61:69:98:2d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: May 3 10:00:32 2025 GMT
Not After : May 4 10:00:32 2025 GMT
Subject: CN=c2122573c82a02542d7baf0e53b8fc4aeb461f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:d9:0c:e0:5e:bf:d7:d9:6f:c1:98:0d:d0:
52:24:60:05:86:28:38:49:16:32:35:3d:2d:a0:81:
d5:50:e5:53:03:04:72:df:4d:9b:45:6d:4e:f4:24:
fd:67:67:f2:1f:a9:8b:29:42:83:b3:c6:4a:91:0c:
bc:f0:e9:44:37:39:bf:f9:ef:4a:ee:55:c6:2e:de:
09:da:90:8b:d1:1b:75:b1:19:5f:42:6a:d7:a0:4e:
67:a3:a8:f3:6d:a5:98:e6:ce:96:12:42:0f:da:7c:
e5:23:74:40:02:5e:e6:f7:b9:ba:69:0b:f8:a7:25:
0b:48:11:c9:20:2b:99:31:18:48:69:02:e5:b0:c4:
ad:7f:83:9d:16:e1:e5:b6:94:8d:53:2b:53:3e:f5:
7e:83:38:1f:47:1c:53:51:95:b6:3c:8c:de:82:fc:
2f:eb:19:18:f8:46:d7:37:d0:61:5f:f9:71:05:4e:
75:e3:24:41:1b:74:b1:fe:ba:cd:d6:69:f6:d7:68:
be:7d:15:bd:e4:2b:eb:05:92:85:4c:14:29:03:c1:
96:36:c2:ac:c5:19:00:67:d2:e9:11:59:e7:9c:90:
4e:6b:1a:8f:ee:cc:01:64:54:d7:09:60:21:47:89:
8f:79:87:d9:e4:6c:5b:7b:3f:eb:03:e2:14:48:4a:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:12:25:73:C8:2A:02:54:2D:7B:AF:0E:53:B8:FC:4A:EB:46:1F:8C
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:58:d6:54:e3:c9:5b:a3:ea:1d:4d:5d:f0:ab:b4:a8:4f:68:
63:9f:71:cc:d1:83:8a:24:7c:16:2b:da:6a:23:6e:a7:a6:d7:
49:ca:f6:40:e8:bb:0e:5e:cd:71:42:b8:2b:2a:f3:87:eb:66:
c6:81:da:fa:60:af:b0:8a:74:fc:75:70:32:36:2e:04:f7:fa:
c2:d2:7e:f7:22:47:5d:75:72:c3:99:03:63:59:4b:f7:a9:0f:
12:4c:d9:1d:16:9d:a7:f5:22:10:46:a5:e6:22:b2:fe:ac:ce:
45:26:da:9b:32:04:0d:90:fd:8f:b0:5b:2e:b4:df:3d:0e:49:
f9:7c:70:22:20:f0:c8:fe:b5:e0:82:28:be:a7:f5:50:15:d2:
2b:4f:56:00:d1:20:0d:51:50:b7:58:59:69:80:06:fb:d4:7f:
d3:94:21:0d:86:ed:6f:99:f1:b5:45:1d:e0:d9:90:6b:48:66:
82:69:ab:98:da:d6:d0:64:66:63:86:7b:71:e0:1c:34:21:87:
2e:cf:f5:2d:69:34:b9:cf:ff:58:05:0e:0d:5b:13:e1:7a:19:
88:5e:d7:92:4e:19:b6:7f:8b:83:52:59:53:c1:c0:9d:51:0c:
a6:83:92:99:eb:ee:84:c5:24:ac:c1:ca:3f:89:52:db:30:91:
0e:c9:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:38:36 2025 by rpki-client