Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
File: NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json)
Hash identifier: HzOGAu5FO8lWTp03Ef5B1dHbCcsbTxWiX25vFQPGBc8=
Subject key identifier: 6A:D3:0B:28:70:57:15:71:63:1E:C5:95:09:CA:16:3B:6D:BE:19:DB
Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
Certificate issuer: /CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Certificate serial: 01967DC5E066A47426CD59A4B9495AF754BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
Manifest number: 14A3
Signing time: Mon 28 Apr 2025 19:00:42 +0000
Manifest this update: Mon 28 Apr 2025 19:00:42 +0000
Manifest next update: Tue 29 Apr 2025 19:00:42 +0000
Files and hashes: 1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: ++Kcvin07pD8Qy0S6yJudKqsnQmhzla/BakNLfSU/3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:e0:66:a4:74:26:cd:59:a4:b9:49:5a:f7:54:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Validity
Not Before: Apr 28 19:00:42 2025 GMT
Not After : Apr 29 19:00:42 2025 GMT
Subject: CN=6ad30b2870571571631ec59509ca163b6dbe19db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:7f:5f:39:1c:9e:5b:79:b6:6e:38:2f:63:
7b:1a:c5:f8:0e:41:71:4a:2f:bd:fd:05:94:72:2a:
3e:76:f9:21:f1:91:04:7a:c4:39:89:32:4e:40:a5:
a2:f8:e0:2f:54:db:b1:42:6b:59:cd:18:a1:0a:89:
7b:06:52:59:cf:2b:f8:47:bb:24:52:f0:ce:84:65:
27:d6:9f:c9:10:94:d7:5a:cb:97:22:98:86:4f:93:
2c:8c:b8:1e:c9:56:36:7c:f7:4f:1b:33:1c:b8:af:
6f:e2:9b:31:6b:48:85:ff:b5:1f:48:87:43:21:0e:
21:9a:a6:4c:bc:83:45:81:8d:87:4d:4e:1a:b5:01:
07:d6:e1:eb:21:8c:ec:01:d9:f8:d5:1c:4d:35:40:
97:25:2f:e3:63:0e:cc:ae:f3:4a:94:c1:ea:77:ca:
29:f0:1e:f2:8c:8b:fb:44:5b:0e:87:2f:7d:02:3e:
40:a3:c9:1e:93:97:71:87:4f:2d:44:1d:4f:ff:48:
fe:91:a3:36:38:d3:62:3b:26:01:df:f9:34:7d:41:
ab:eb:13:bb:d0:95:3b:31:8c:61:7a:26:07:c1:a0:
32:38:f4:82:6e:30:96:c5:cc:80:6f:87:5a:dd:09:
02:d6:24:6b:fb:fb:e8:0d:49:7e:a4:b3:34:1e:ad:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D3:0B:28:70:57:15:71:63:1E:C5:95:09:CA:16:3B:6D:BE:19:DB
X509v3 Authority Key Identifier:
keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c8:7d:9e:09:af:8d:1c:1f:71:14:61:f8:49:ed:f9:ac:22:
53:02:25:d0:77:58:26:3f:22:ad:a4:22:b6:d9:21:73:7b:fb:
8e:0a:63:c3:22:6b:d1:8c:83:10:b9:cf:e4:73:f0:30:bd:42:
20:e8:89:2c:65:ff:6d:9c:5b:e4:d7:35:ba:f2:70:87:5a:bb:
a7:90:58:ed:04:c2:81:8b:13:35:45:e7:69:10:79:a0:e2:7e:
a1:2b:62:b0:ff:b1:4d:1c:b0:1c:0f:79:c7:80:8a:b4:f3:fa:
1b:dd:bc:d9:72:10:c4:fb:9d:4b:56:36:b7:1c:90:cd:a8:65:
49:e1:f2:52:ac:76:26:b0:7d:8d:51:48:64:2e:91:4a:e9:02:
3f:24:e4:4d:1a:ed:d3:72:c0:60:0c:e4:4e:39:9d:de:9e:2b:
26:ea:a4:69:e2:a2:6d:16:0a:c9:06:42:39:4c:18:82:bc:c4:
51:23:3a:ba:81:c5:ab:40:e4:0b:e0:e8:aa:99:ec:f6:ae:c8:
b5:04:d4:ba:1a:74:27:87:22:e0:51:7c:70:9b:f0:91:43:ad:
8b:8f:05:b3:a4:48:a0:3a:d5:87:51:b8:04:c0:52:6e:b9:f5:
fe:67:89:7a:e2:2b:87:cc:38:95:f8:c6:e1:8a:1b:0d:2a:99:
8b:b8:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:46:06 2025 by rpki-client