Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: WYwOWp+tnBOPMp1Qbe0Fnfnskirk3vQe0+UkJ54pxrg=
Subject key identifier: 5F:09:0F:E2:7B:95:1E:2F:B8:3D:A6:85:0F:D0:1C:ED:C0:4B:53:C3
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 01968A383B4E43145572984D2EA2F37338B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 01E1
Signing time: Thu 01 May 2025 05:01:02 +0000
Manifest this update: Thu 01 May 2025 05:01:02 +0000
Manifest next update: Fri 02 May 2025 05:01:02 +0000
Files and hashes: 1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: QPlK2GHS7qbqKzr7EVpNZScb7IISsiLnAntOngIO36g=)
2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:38:3b:4e:43:14:55:72:98:4d:2e:a2:f3:73:38:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: May 1 05:01:02 2025 GMT
Not After : May 2 05:01:02 2025 GMT
Subject: CN=5f090fe27b951e2fb83da6850fd01cedc04b53c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:cd:ff:6d:cc:8a:3a:09:b0:7e:00:ea:1d:
e0:2d:3c:4d:d0:4e:66:53:b1:a8:af:9f:61:66:27:
16:d2:68:87:3b:18:ec:fc:4f:1a:de:89:f8:a6:de:
e4:39:6d:50:73:44:31:ef:b9:36:cf:72:37:4f:21:
25:59:43:a2:f7:a2:e7:d4:dc:7d:cc:20:be:49:9a:
0d:c1:66:cb:2e:3f:96:31:b7:1a:55:1f:19:37:a1:
ac:6e:fe:d0:64:84:24:a7:fc:ef:e2:d9:2d:84:35:
3c:e0:0f:17:c1:6a:9d:ec:ce:2e:30:24:76:79:04:
4b:15:d1:f4:ce:d4:6f:1d:9c:f1:51:cc:ae:e8:8b:
ca:5a:19:66:70:ba:df:36:8b:0e:39:8c:8f:32:02:
37:6b:64:a8:26:02:03:b2:62:6d:35:09:d8:04:e0:
72:83:bd:ab:59:de:c8:26:58:2c:7d:60:30:4a:1d:
6a:bb:c4:ed:ad:79:0f:36:bd:75:16:57:4f:9e:88:
26:7a:66:bf:5d:e1:4a:8f:74:f3:c4:0f:e8:5f:e0:
e9:9d:74:a2:c7:b8:f4:11:4c:1f:23:d3:4e:8c:8a:
99:88:2c:0c:76:3f:9e:54:8b:f7:22:4d:3c:5c:d0:
52:00:d7:69:28:15:cd:87:51:04:dd:3a:6a:a9:95:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:09:0F:E2:7B:95:1E:2F:B8:3D:A6:85:0F:D0:1C:ED:C0:4B:53:C3
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8f:50:c2:78:c1:33:2c:27:49:ea:ff:08:b7:38:ca:a3:00:
7e:f1:2f:75:ee:1e:60:d6:f2:b2:12:2f:f6:9b:0b:16:e5:96:
b9:ba:2d:e2:1f:be:75:fd:4d:08:ad:2b:74:35:72:fd:87:33:
f1:b5:cb:ce:1e:70:f3:94:8f:c2:56:fd:96:10:e1:23:bf:6b:
44:5f:79:7c:7d:db:13:be:77:a6:ec:63:97:19:ac:8e:28:df:
f0:0e:af:42:0a:72:e6:03:02:aa:6f:ed:cb:04:40:9a:34:13:
f9:78:ac:55:17:74:ce:7c:cf:2e:9c:96:3b:e2:b3:e4:e8:46:
81:16:ca:8e:b5:40:29:a8:ae:d9:dc:f7:91:f6:56:48:32:a7:
a9:61:2e:67:d9:87:2c:11:b4:b8:68:2f:1a:06:7c:e1:d5:12:
65:ca:0f:1e:19:da:f0:b2:3a:cf:57:f7:da:7a:b1:29:f7:52:
c4:e1:40:e3:5b:08:a7:65:31:f0:26:dc:d8:5c:cb:37:f9:a9:
82:fd:17:b0:a6:1f:8a:fe:19:88:52:e2:eb:d9:b1:a3:ac:55:
19:3e:6d:50:11:0e:b0:de:b8:18:4d:67:da:fe:78:68:83:d7:
46:be:d3:f1:de:81:6d:fb:1c:bf:46:ce:f6:42:2c:e5:39:4e:
04:b0:ee:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:45 2025 by rpki-client