Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
File: ndVRnFTz4jtOEhKogIM58pXaSzQ.mft (raw, json)
Hash identifier: LnHuG/T32Apwt/K8NMjOqT4FBcb8DHfEcGv1HoIynYg=
Subject key identifier: 80:EB:2A:71:39:F0:8C:0B:F9:A4:89:A1:35:7D:99:14:62:B2:B2:4C
Authority key identifier: 9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
Certificate issuer: /CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Certificate serial: 01968A0119848E7BF2C95E9DA35B2529A6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
Manifest number: 1516
Signing time: Thu 01 May 2025 04:00:49 +0000
Manifest this update: Thu 01 May 2025 04:00:49 +0000
Manifest next update: Fri 02 May 2025 04:00:49 +0000
Files and hashes: 1: ndVRnFTz4jtOEhKogIM58pXaSzQ.crl (hash: v1wXVVAAhUruwHuYvoC2ybsXjekPuVQxwVCi+UIcrkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:01:19:84:8e:7b:f2:c9:5e:9d:a3:5b:25:29:a6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Validity
Not Before: May 1 04:00:49 2025 GMT
Not After : May 2 04:00:49 2025 GMT
Subject: CN=80eb2a7139f08c0bf9a489a1357d991462b2b24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:4b:cd:e5:8d:18:a7:df:07:82:3a:37:8a:
17:b9:6c:57:d0:98:c0:44:2d:6e:be:46:65:5b:de:
da:9a:41:50:5e:0b:1c:12:c1:7e:91:c6:e9:43:52:
3e:53:d4:a5:0e:04:78:e6:3c:8e:ed:69:75:c9:17:
32:ea:8c:8b:bd:81:38:7b:52:29:0b:57:d6:aa:af:
c0:46:48:3b:c9:58:6e:1d:9e:0c:12:a8:e8:70:01:
3f:f2:8d:f9:21:f9:e4:79:fc:6c:7f:7f:8a:f8:30:
48:dc:9a:e3:90:3d:47:cb:00:c5:79:d3:8b:76:4b:
1f:78:31:0d:fd:4e:9f:30:04:24:6a:79:76:41:41:
89:54:75:ad:dc:b6:71:5f:f8:ae:c3:69:8d:70:b1:
c7:a9:c2:76:2c:f3:a2:19:51:af:7a:d3:6e:cd:d4:
2e:e2:39:e2:16:74:88:f6:e5:84:4a:e7:16:e2:00:
f1:40:43:72:85:d3:8e:bc:1a:c0:a6:5a:29:ee:1a:
33:94:0a:fa:15:4d:9e:2c:f8:56:b8:84:e9:5e:06:
a2:a4:8c:66:b1:6f:16:42:58:d0:a1:54:77:be:3e:
ff:6f:d0:aa:4d:73:c9:62:ee:24:ba:5f:ce:84:27:
0a:2c:d3:a2:ea:86:87:f8:b5:6f:c5:8a:a1:14:6d:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EB:2A:71:39:F0:8C:0B:F9:A4:89:A1:35:7D:99:14:62:B2:B2:4C
X509v3 Authority Key Identifier:
keyid:9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:91:d4:c4:0d:be:9b:bf:b6:ce:78:32:8b:04:a8:9e:fb:e1:
f0:80:c7:96:99:ba:e6:3e:f3:ce:63:85:f9:da:d5:eb:0b:87:
88:31:d4:84:b0:7b:64:3c:de:6f:ac:d5:7a:d4:d3:63:e5:bb:
40:f4:f8:ae:07:2f:69:ae:14:f3:73:74:d8:85:9b:24:27:04:
e9:5b:8d:10:99:43:38:f0:91:7a:f2:e3:55:da:f0:82:a6:db:
7f:0e:74:87:6e:fd:83:f5:d9:56:ac:8a:55:f0:57:d7:53:67:
7c:29:e4:4c:74:9b:61:34:36:b0:ee:c4:1e:38:5b:ce:05:01:
ab:f6:fe:58:f4:05:5b:52:11:45:52:36:fa:83:4a:bd:0e:47:
fb:bb:1f:3a:3b:a4:3f:78:1a:70:f4:d7:6f:5d:19:ab:70:80:
53:52:89:73:24:a3:5b:f5:d0:b7:38:49:0d:16:80:2c:87:40:
bd:51:e3:17:3e:b0:c8:89:d9:a7:bd:c6:db:58:cc:26:79:02:
fb:a9:be:03:29:42:cc:57:18:13:e2:3e:32:44:ba:0b:74:26:
7a:13:17:54:69:3c:ba:f0:28:20:43:41:6b:fd:20:9b:22:8f:
a1:e7:9b:50:a2:45:ff:8b:be:53:c5:22:c0:0b:30:46:5b:b9:
16:13:e1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:50 2025 by rpki-client