Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
File: N0mXVDn-T_qTECYqy91fcjzuIiM.mft (raw, json)
Hash identifier: yggPAedyVgDEao8VgrBY9MRDVuAFjxpx2C/M8GaCuoA=
Subject key identifier: 08:7A:E8:10:86:0D:0E:7A:9D:EB:DD:26:95:8C:C6:FD:EF:2E:A0:5B
Authority key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
Certificate issuer: /CN=3749975439fe4ffa9310262acbdd5f723cee2223
Certificate serial: 01967DFCB3AFA1D6E2074EB16911D58A6A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
Manifest number: 1508
Signing time: Mon 28 Apr 2025 20:00:35 +0000
Manifest this update: Mon 28 Apr 2025 20:00:35 +0000
Manifest next update: Tue 29 Apr 2025 20:00:35 +0000
Files and hashes: 1: N0mXVDn-T_qTECYqy91fcjzuIiM.crl (hash: vsOn7AsJ4xsxoG7oVM/l2mmV4Bx/sXGbMaRhQETtPco=)
2: kzwjfq1uCpgiTAUnk5qhqKOqoaU.roa (hash: MJDFWuspOJe8rc6Woxt8ScoRrsfkLnrA6WpK9920n7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:b3:af:a1:d6:e2:07:4e:b1:69:11:d5:8a:6a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749975439fe4ffa9310262acbdd5f723cee2223
Validity
Not Before: Apr 28 20:00:35 2025 GMT
Not After : Apr 29 20:00:35 2025 GMT
Subject: CN=087ae810860d0e7a9debdd26958cc6fdef2ea05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:54:6f:26:0e:dc:0f:83:c5:26:ae:35:a9:
5c:7e:74:86:da:14:23:db:e0:10:ff:55:72:18:8f:
36:5d:b4:e1:64:f5:0f:e8:7e:53:47:bc:d9:25:e6:
d4:ca:ac:72:9b:63:a4:e1:30:14:aa:50:da:86:25:
e6:d8:8e:6e:29:a4:57:d7:3d:f2:a0:db:c8:cc:e0:
c4:13:d4:c4:a4:af:b8:17:69:a5:64:b4:b8:b7:63:
2a:a9:1b:80:9c:d9:42:13:93:79:df:50:0d:ef:54:
2e:1a:ef:93:f3:95:c0:ff:4a:b9:17:e3:4e:ab:e4:
39:30:31:be:f9:6b:a4:7d:43:7f:29:ac:8f:ee:dc:
5a:e2:76:ae:0c:c1:63:b4:81:af:4e:a1:a8:b9:89:
3c:17:39:3a:75:fd:73:b1:2c:b5:a8:86:8a:95:e7:
9c:57:99:12:02:c9:c6:bb:f4:e2:47:3a:bb:ff:18:
6a:0c:ed:ce:59:3d:7f:5a:e0:49:2b:86:5f:64:80:
3e:b9:da:73:36:71:22:6b:96:86:b8:4a:d9:10:65:
2d:42:57:2c:cf:1a:59:f9:56:86:3e:c0:66:97:e0:
09:b4:4a:c8:83:b8:81:ea:15:ec:0d:f4:93:d6:67:
ae:81:98:ec:c3:02:df:aa:19:d8:af:fb:07:1f:61:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7A:E8:10:86:0D:0E:7A:9D:EB:DD:26:95:8C:C6:FD:EF:2E:A0:5B
X509v3 Authority Key Identifier:
keyid:37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:35:f4:4f:e6:6f:32:59:c2:3b:8d:02:75:63:05:79:88:47:
9f:77:78:88:c1:0d:cb:70:ef:10:cd:9d:1e:a2:58:be:47:86:
cd:23:e3:81:2a:52:e9:03:b9:7e:11:98:7a:72:cb:0f:60:68:
1d:fd:c4:a3:20:0d:72:17:69:eb:af:6c:05:30:c0:7e:e5:cb:
9d:07:f5:0b:46:1b:d5:eb:c9:da:aa:8d:4c:06:7f:87:b0:1b:
32:4c:8a:f0:b4:13:be:c7:e6:37:eb:43:d8:77:2d:14:62:8c:
99:e5:2a:4f:9f:20:4e:c5:8b:02:2e:37:d2:39:c4:be:b1:98:
2e:31:95:80:93:c4:99:f5:15:41:89:1b:d6:3d:88:f9:31:e1:
7e:67:14:65:b7:85:c9:5c:89:9b:d7:78:5d:f6:61:8d:ef:e5:
e0:f1:db:97:4c:66:97:81:6c:b5:4f:9d:5a:fa:99:b0:8b:69:
10:8d:17:5d:5d:19:16:86:be:6c:00:24:e7:4d:95:d4:bd:3b:
f3:dd:90:1a:6d:ab:fc:2e:b5:c7:9d:01:df:e0:19:d8:2e:91:
8a:b2:0a:4d:c2:50:5d:a0:64:8d:6c:41:4e:71:00:5f:0f:5b:
ff:9a:2e:59:3d:f9:40:c1:b8:b3:e6:f2:07:8e:70:50:b3:4d:
4d:e2:d2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:34:44 2025 by rpki-client