Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier: uC6pZv3oKIzkyxdQV/5T50iPN326bcckj6WxT+B7dDg=
Subject key identifier: FF:0F:CE:AA:E6:AF:8F:27:90:4C:A6:18:98:C3:D8:BB:BD:FC:C0:27
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 0196789FAA39A93B4391A9C42EB8A7D70C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number: 09A8
Signing time: Sun 27 Apr 2025 19:00:51 +0000
Manifest this update: Sun 27 Apr 2025 19:00:51 +0000
Manifest next update: Mon 28 Apr 2025 19:00:51 +0000
Files and hashes: 1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: Pjeg0u9VjQRSrudfiPakvsNHi/ZzHGVopeEQQglBDts=)
2: zElW9nBSEefX0nViIsarFQPCkZs.roa (hash: CmIv1btIhlBvo+yXBuSYJkAIeImv5p3pKaVYvxzuwhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:aa:39:a9:3b:43:91:a9:c4:2e:b8:a7:d7:0c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Apr 27 19:00:51 2025 GMT
Not After : Apr 28 19:00:51 2025 GMT
Subject: CN=ff0fceaae6af8f27904ca61898c3d8bbbdfcc027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:ca:de:aa:4a:d6:8c:89:4c:f7:76:bd:a2:
1d:e1:56:81:3e:40:88:ea:23:8d:c9:4d:42:a8:59:
38:c6:56:bb:3d:2c:46:53:9f:e9:39:4b:65:41:12:
bd:1d:5b:de:9f:3e:9a:68:48:37:71:d1:4b:13:e9:
fb:6a:38:45:44:56:b2:23:70:7a:d6:44:64:92:dd:
b2:3c:b1:4b:77:42:1a:4f:d0:44:4a:5e:8a:21:46:
24:90:fb:68:b0:92:07:d7:24:9e:b9:bb:d1:c3:17:
9a:29:f7:f2:84:6b:54:d7:31:44:2c:fa:38:4d:38:
7a:bf:86:a0:2b:a8:18:72:44:71:60:b3:57:69:0b:
51:89:43:76:40:35:20:2d:76:b6:a5:93:4b:4d:4e:
21:42:54:3e:78:7b:f6:81:e4:d8:45:bc:60:d6:5d:
b3:e6:47:12:61:41:a6:c9:1d:90:a9:e7:cf:74:2d:
62:9c:7b:f0:34:81:4a:ad:0a:91:40:9d:42:e6:9c:
e2:2e:73:b7:2b:96:92:a9:ee:70:eb:6d:28:93:77:
c6:77:61:c7:6b:ea:b7:53:24:c4:36:ba:15:66:6b:
0d:fc:aa:59:41:02:cb:3f:6b:be:e5:b0:a9:64:47:
97:45:d3:20:e4:f9:dc:cb:24:35:8d:46:57:6e:a2:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0F:CE:AA:E6:AF:8F:27:90:4C:A6:18:98:C3:D8:BB:BD:FC:C0:27
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7c:a4:ac:d7:87:08:df:3e:b1:fe:e7:5b:56:e7:0f:3f:f3:
82:bc:48:6a:4d:e5:29:3d:3a:be:7f:c9:19:65:89:95:08:3c:
de:58:5e:43:eb:d8:51:79:e4:9e:fb:fe:8c:79:93:a9:ed:0e:
62:45:48:3f:8a:67:9c:ab:de:5e:96:69:52:34:da:f4:6f:48:
3a:ce:0a:e8:ff:96:c8:a5:ee:16:b1:1f:1a:a5:a6:27:5b:7a:
54:0a:00:c1:d7:a6:37:01:9c:54:9d:94:05:6b:d7:24:59:3f:
c7:16:ab:3d:75:fb:76:3a:8d:c4:39:c3:cb:cf:bc:a0:f0:eb:
a2:8d:8b:98:a9:c0:44:73:e5:a9:79:4e:15:be:2b:47:a5:78:
0e:bc:49:c3:94:c9:16:dd:e1:6e:53:10:1d:78:9a:93:c1:a7:
9b:1d:d5:6b:54:a2:e4:35:6f:c1:82:aa:c8:34:0b:08:c5:48:
0c:da:25:e9:2f:9c:e9:99:04:13:44:14:38:57:a1:d8:3a:e6:
9a:1c:a2:db:19:72:5d:24:93:2c:3a:a1:56:ef:53:63:99:9b:
ad:cb:36:bd:8d:05:04:c9:d2:4a:4c:cc:5c:8f:af:b0:40:f6:
b2:37:58:60:7a:fd:80:1c:44:ca:ca:19:ca:b3:8e:9a:ab:4d:
94:e5:00:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:34:03 2025 by rpki-client