Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: hzLXdZlKsVBEu0n5btmtGJ5jBjgOxTwKjrJR1eudtQg=
Subject key identifier: D7:CD:8B:6B:01:F3:3C:15:4F:71:09:AA:00:09:98:43:9F:A6:91:6C
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 01969906329A66FAA33C6BA67A8EEB43D33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 024B
Signing time: Sun 04 May 2025 02:00:42 +0000
Manifest this update: Sun 04 May 2025 02:00:42 +0000
Manifest next update: Mon 05 May 2025 02:00:42 +0000
Files and hashes: 1: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: pP3lAls3q4XqJzUt+Dg6Y05+FY8g4vww4LdtbOaaL1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:06:32:9a:66:fa:a3:3c:6b:a6:7a:8e:eb:43:d3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: May 4 02:00:42 2025 GMT
Not After : May 5 02:00:42 2025 GMT
Subject: CN=d7cd8b6b01f33c154f7109aa000998439fa6916c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fa:86:0f:45:3a:f4:c4:79:92:97:cc:c8:1f:
a2:70:02:ee:80:22:d2:1f:83:7f:ed:4b:a9:8a:47:
e4:7c:f8:83:6d:6b:63:f7:8c:69:64:92:c2:1d:68:
11:f5:48:f7:aa:7e:71:b0:e8:d3:a8:8b:3b:2b:9d:
96:ad:96:a2:8f:f1:9a:ff:17:16:f6:1f:d0:17:16:
84:e3:06:8b:3d:83:4c:0a:5d:08:38:bf:0c:5b:6b:
c9:4d:33:dd:a0:14:9c:25:05:c5:74:19:2a:f1:32:
be:81:28:91:e0:51:e6:8f:5b:5b:50:c3:16:c8:32:
51:46:52:bd:26:23:36:80:47:9e:3f:83:0f:8d:49:
f7:ec:f9:79:0f:5f:0f:1c:5b:64:4c:5e:bf:83:72:
39:24:be:95:f5:a3:3a:52:33:95:58:57:f1:e4:83:
87:73:77:8b:c0:6b:55:8f:bb:d4:fd:2f:a4:9b:1d:
5c:a4:d0:a9:45:f8:bd:34:d8:1b:82:d8:62:a7:f4:
c1:32:7c:e0:07:d7:fa:ca:0b:cf:26:ac:44:31:f7:
ed:2b:5d:36:31:48:e1:11:32:88:d5:56:04:cd:e6:
47:19:00:3c:74:49:2e:b1:df:00:c4:36:af:23:75:
b9:50:0b:47:62:34:98:dd:b0:92:f8:71:4d:79:9a:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CD:8B:6B:01:F3:3C:15:4F:71:09:AA:00:09:98:43:9F:A6:91:6C
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4c:01:0a:3a:e5:4c:49:a1:a4:37:4c:ee:9f:ca:47:05:e3:
c6:ac:de:0c:ee:0a:40:39:78:cf:7e:9d:a7:21:20:77:4b:f1:
d8:be:1f:6f:c3:dd:0d:9f:c8:bc:16:1c:26:6d:c6:88:6c:15:
da:94:5b:4c:09:a8:18:39:b8:84:9b:bc:bf:36:c5:60:60:11:
43:24:64:46:4c:9f:35:d9:dd:46:e1:24:44:05:cf:c8:77:9c:
82:6d:24:13:25:27:46:ca:6b:09:fb:58:2a:e1:af:a0:a0:05:
13:4d:78:ab:23:e9:0d:cb:9f:e3:aa:58:2a:fc:da:8e:95:a6:
34:aa:0c:7f:67:40:be:94:64:78:87:dd:5b:f6:5c:f0:2e:0c:
1b:67:8b:b8:39:5d:9b:a8:a7:4d:61:dd:10:7d:03:91:03:50:
ff:2b:3e:a5:4f:46:8f:55:99:be:29:17:f2:82:46:ff:9b:9d:
bb:3a:29:f5:40:c8:4e:98:52:94:84:57:72:17:72:0c:e7:ad:
32:fc:7c:df:57:bd:e4:fa:f0:94:65:3c:6c:75:12:99:20:ae:
85:4b:68:a4:a0:b4:c7:88:2f:6c:59:3c:27:52:46:85:aa:18:
99:b5:b7:5e:ad:8b:24:7c:bd:86:20:62:51:db:49:fa:59:2f:
04:6c:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:02:20 2025 by rpki-client