Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json)
Hash identifier: jOj/eJYG1/lUovF3Nx9WTwcQKADImwVDci8vAumMlFY=
Subject key identifier: EE:C0:6D:A0:9A:20:2F:80:1A:F8:E3:F4:2D:8C:D1:BD:3E:16:56:0F
Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
Certificate issuer: /CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Certificate serial: 0196846CC44AB86D7200F812A27CDB2DB062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
Manifest number: 0F22
Signing time: Wed 30 Apr 2025 02:00:42 +0000
Manifest this update: Wed 30 Apr 2025 02:00:42 +0000
Manifest next update: Thu 01 May 2025 02:00:42 +0000
Files and hashes: 1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: OVCI46KKgP30b7ocozstrLHVhU6Qy7DtPlkHworFufA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:c4:4a:b8:6d:72:00:f8:12:a2:7c:db:2d:b0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Validity
Not Before: Apr 30 02:00:42 2025 GMT
Not After : May 1 02:00:42 2025 GMT
Subject: CN=eec06da09a202f801af8e3f42d8cd1bd3e16560f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:e5:1e:09:78:a4:5d:03:06:ef:28:34:cc:
c7:82:60:32:86:d7:1e:b6:f4:d4:71:ca:48:2b:1c:
56:f5:d8:33:7a:5e:a6:7c:2f:56:a4:e2:fe:82:18:
b2:37:c5:46:61:ca:8c:c8:c6:51:ce:a2:b9:04:ea:
6a:f4:c9:d4:6c:a4:b2:f7:fb:0d:7c:48:b9:ec:bc:
cb:4e:14:8b:f3:08:bb:be:8b:ec:f4:e7:38:7f:80:
ef:d4:1d:65:93:d1:26:26:a5:19:28:ee:63:6b:24:
d7:4e:57:fd:a0:b0:5f:c8:af:f3:bd:2f:14:73:7d:
88:fe:c8:51:38:1f:75:ae:d7:3c:86:31:58:31:8a:
97:c1:5d:62:fe:0f:0b:a9:ef:10:08:9d:6b:1d:20:
89:4f:d1:78:35:cf:b4:63:5a:ac:f6:a7:20:34:83:
73:18:c3:57:1c:10:44:34:31:18:c9:38:f1:7e:d4:
5c:5c:a2:7b:be:06:1c:e9:d3:af:06:ad:b2:92:f8:
3c:af:3c:89:21:ee:92:2d:ac:f9:41:d5:ba:67:9d:
d7:94:8b:31:d2:d6:7a:ea:42:85:b6:be:5e:35:3a:
16:66:ee:1b:b0:96:54:90:a2:7c:59:9f:01:6d:07:
b6:c2:b8:99:a5:ca:60:79:79:68:44:a7:f0:df:4f:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C0:6D:A0:9A:20:2F:80:1A:F8:E3:F4:2D:8C:D1:BD:3E:16:56:0F
X509v3 Authority Key Identifier:
keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:43:a9:b4:fe:0d:b8:08:6c:fa:7d:ba:c4:bb:23:d4:e3:73:
fb:ce:d8:4c:7d:87:65:8a:98:e0:7b:d0:69:66:1b:4f:ca:de:
67:a2:01:eb:46:de:31:de:82:05:5c:04:1d:0c:53:c8:10:77:
da:d1:33:4a:21:20:ea:da:32:19:19:21:11:a6:74:a5:3d:8d:
a3:87:ac:98:ab:35:cc:1b:5d:a5:16:75:54:8c:b3:7e:69:83:
88:5d:cc:21:5c:6a:b9:03:1a:c1:bd:1d:83:48:72:f2:04:44:
9a:b1:44:0a:ee:57:5e:a5:5b:2f:f9:5c:99:c5:5f:47:12:b7:
71:23:34:1e:4f:89:6b:16:ec:a0:5a:7e:65:d1:ce:b6:71:c7:
ae:27:e2:28:90:da:0b:db:3e:f0:52:1a:a7:0e:4a:13:58:58:
34:15:bb:35:87:e9:9c:98:fa:78:ec:3d:b4:a6:e0:69:f0:0a:
37:c1:31:5e:93:4f:cf:71:15:30:bc:1b:fe:52:de:c8:31:ac:
1b:d3:ea:a8:8a:d1:c3:87:7f:af:e4:18:91:80:02:12:37:23:
a6:30:3b:e2:dd:55:a0:fe:e0:f4:bc:7a:e5:9f:c5:4c:fb:c6:
b1:a1:e6:68:c5:be:20:8a:53:db:49:17:a9:59:f9:40:3f:3b:
ab:43:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:28:21 2025 by rpki-client