Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
File: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft (raw, json)
Hash identifier: VYVEMg3IJAR94K5lArDtj0l4M6NTBxLNnlSe1yHISec=
Subject key identifier: 6E:8B:FF:2D:6B:E8:4E:1E:72:AF:7E:65:88:A1:9D:CB:EA:FF:95:5B
Authority key identifier: 35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
Certificate issuer: /CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Certificate serial: 01969785783E11828A6AFD8768F3E8C3DA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
Manifest number: 1158
Signing time: Sat 03 May 2025 19:00:28 +0000
Manifest this update: Sat 03 May 2025 19:00:28 +0000
Manifest next update: Sun 04 May 2025 19:00:28 +0000
Files and hashes: 1: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl (hash: tuG2T6Y2IEL7sfmEK5qNhdNqKi96I38tX/OQ6uNJJew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:85:78:3e:11:82:8a:6a:fd:87:68:f3:e8:c3:da:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Validity
Not Before: May 3 19:00:28 2025 GMT
Not After : May 4 19:00:28 2025 GMT
Subject: CN=6e8bff2d6be84e1e72af7e6588a19dcbeaff955b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:73:5f:db:50:be:df:76:bc:50:a7:db:d3:
54:10:d1:20:a0:11:15:1c:89:81:47:23:43:d9:dc:
06:bb:d5:ef:36:27:02:14:55:df:9f:7a:5c:18:b9:
e0:0e:bf:4a:4d:8b:72:ea:99:05:8e:31:0e:90:d0:
ac:3c:59:1d:ef:d2:23:ab:64:c5:92:fa:2d:6e:b7:
94:61:fe:9d:2e:f9:71:f3:a7:50:1b:a7:07:bc:09:
0e:f2:f8:b3:df:03:e3:7a:45:7c:a9:ce:f2:e5:0e:
68:c1:a4:f9:7a:90:5f:05:44:c3:20:bf:34:7c:ec:
54:09:94:48:cd:be:0f:92:61:89:0d:4a:83:f3:bd:
1a:3c:89:8a:a3:8b:44:15:7f:96:a4:07:06:c6:7d:
bd:ef:8e:ca:7f:e1:21:64:0a:72:8f:0e:2d:c8:85:
fc:3c:07:88:46:ac:88:c4:d2:62:17:b4:76:4b:24:
6a:c9:0f:7a:93:5f:1d:2b:9f:d6:e2:76:68:20:ed:
0a:23:f7:d2:f5:a9:01:aa:e5:1f:b5:4a:dc:c3:f2:
c1:ab:0d:61:d5:32:14:e0:54:4a:47:6b:a8:eb:c7:
ff:87:f9:3f:0e:b7:3f:ae:61:75:c7:0d:e5:c6:73:
a5:4b:cf:71:7a:e3:79:8f:0f:18:74:69:1f:6d:2d:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8B:FF:2D:6B:E8:4E:1E:72:AF:7E:65:88:A1:9D:CB:EA:FF:95:5B
X509v3 Authority Key Identifier:
keyid:35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6b:d5:a4:2a:b6:d8:3d:0c:2b:1c:48:bd:bd:f8:02:6a:97:
fa:af:00:a7:3f:10:81:e7:4c:99:66:f3:0d:5e:8f:f9:c7:89:
34:08:04:e5:fa:e4:99:e3:7c:0f:9d:43:86:eb:b4:49:56:16:
63:95:ca:fc:b4:52:6e:73:46:3e:ed:90:80:03:f9:2e:5f:4d:
75:33:45:42:df:6c:a4:69:6f:69:74:88:40:ca:dc:3f:02:c7:
fa:43:98:b3:11:bf:49:c0:21:8e:48:87:d7:6b:cc:17:e3:e5:
49:72:7a:e1:ab:b9:8a:cb:65:e2:df:23:94:ed:17:91:4c:97:
52:86:da:60:ac:9b:a6:c7:a1:c7:90:a8:b8:33:a0:c1:f0:04:
55:13:25:4a:f1:4d:e2:3c:c4:c2:19:4c:c0:c1:16:d9:fe:22:
a8:a0:5e:c0:ea:b6:d9:c6:1b:ab:9c:92:f4:03:02:83:ab:c9:
af:3f:ce:7a:12:87:61:4b:82:e5:bc:03:82:1f:e8:d6:b3:29:
2e:c5:70:a8:f5:48:92:8f:ac:33:2e:0e:ef:5c:70:56:e0:5d:
db:c2:76:ac:a5:0d:15:1f:f2:e9:93:28:b4:16:e6:57:91:51:
5d:38:fa:c3:08:f2:0d:de:9d:3d:bb:c1:64:df:db:d5:24:0b:
dd:a8:19:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:51:13 2025 by rpki-client