Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
File: NDez9zdtPvHNqLyWbxOXCFnPeW4.mft (raw, json)
Hash identifier: 5F7895KG5ieUa66RQxbZUT883rnd3t7J55vqKXe/yko=
Subject key identifier: 17:CA:6F:9D:5C:B2:7D:13:02:F9:95:A4:D6:BC:71:28:5F:59:50:F1
Authority key identifier: 34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
Certificate issuer: /CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Certificate serial: 019694F2A80A715E22AF8DDF286A23B666A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
Manifest number: 061B
Signing time: Sat 03 May 2025 07:00:52 +0000
Manifest this update: Sat 03 May 2025 07:00:52 +0000
Manifest next update: Sun 04 May 2025 07:00:52 +0000
Files and hashes: 1: NDez9zdtPvHNqLyWbxOXCFnPeW4.crl (hash: nGqAQON6cTqshfocnrUQnaaDJTb3AEhiTldnkU2eTwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:f2:a8:0a:71:5e:22:af:8d:df:28:6a:23:b6:66:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Validity
Not Before: May 3 07:00:52 2025 GMT
Not After : May 4 07:00:52 2025 GMT
Subject: CN=17ca6f9d5cb27d1302f995a4d6bc71285f5950f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:e6:99:95:02:df:f0:6b:3b:ac:8c:b9:34:
41:7e:6c:4c:50:7c:45:3f:39:e7:7d:a5:c7:7e:17:
8e:da:63:e0:e1:39:93:28:94:9f:02:26:5e:0c:0b:
66:02:f7:0d:7a:4b:56:e2:c5:34:3d:74:70:5b:1d:
1d:ea:80:bd:f5:2b:31:59:1f:87:9a:6c:d4:2c:c7:
42:21:02:0e:24:cc:07:24:97:e1:b9:45:ce:55:1e:
8c:61:1f:df:12:57:1d:33:4f:ed:ff:64:ee:bf:b5:
41:ab:3c:06:ed:9e:41:48:f0:d3:6a:63:a9:04:d7:
14:e5:44:aa:41:58:72:dc:6a:61:cf:9a:53:ba:e0:
8c:c4:70:fa:d3:fd:61:fe:12:0f:f9:bd:83:06:61:
06:b6:9d:0c:a9:1e:bb:96:1c:83:30:0c:6b:41:58:
4e:5f:4e:45:03:ed:2f:7b:94:51:bd:c8:d1:a0:49:
7c:55:97:91:13:19:00:0f:4f:a8:f5:ec:a2:24:c3:
28:f1:41:3a:5a:23:90:87:cb:f7:e8:b1:9e:3d:b0:
66:92:2f:0f:5f:42:11:3d:32:37:69:84:d4:be:b5:
a9:4a:dc:47:e5:d9:d5:b8:03:bf:2e:a1:b6:3b:9a:
6f:4e:ef:b9:b7:1b:9a:6d:27:3b:21:fa:3b:e6:f1:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CA:6F:9D:5C:B2:7D:13:02:F9:95:A4:D6:BC:71:28:5F:59:50:F1
X509v3 Authority Key Identifier:
keyid:34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:00:44:1e:95:1e:03:3f:33:f4:63:e0:8b:e1:be:19:d0:eb:
10:ba:0b:9d:67:0a:bc:d8:2b:35:d4:95:20:ef:71:cf:b6:67:
37:b9:cd:b8:48:db:47:ec:e1:a2:02:57:e8:88:b2:f8:50:ae:
55:7f:cd:a7:f7:a4:6e:9c:18:39:e0:7c:e5:fe:24:ec:62:02:
64:45:3f:16:58:16:81:5c:7c:7d:5a:8a:74:d5:eb:3b:d5:7c:
c7:b4:c3:78:39:f4:19:a7:5b:36:60:f8:05:44:6d:96:d7:49:
73:23:7a:b3:93:b2:ac:20:84:de:69:0d:fa:c7:3b:e8:19:04:
39:af:43:ab:9c:d0:7a:68:cf:d2:8e:4c:27:02:91:61:6c:8f:
83:c8:4a:e3:77:49:8e:08:35:ef:90:80:d8:dd:98:6c:d8:73:
d5:f7:a0:3d:8c:87:ba:c3:49:ef:0f:ca:5f:a3:8b:bb:28:f1:
31:1b:d2:43:90:32:fd:1b:af:e0:79:94:be:8d:a7:ec:ac:89:
51:7b:2c:6c:e3:67:f1:e1:71:c0:c1:dc:88:92:af:a9:9e:dd:
fd:54:2a:16:2b:50:2f:60:ec:5e:2f:3f:a1:c3:2a:c7:7a:fd:
02:b7:b9:8d:cf:13:12:d3:a8:97:83:13:9e:c2:3f:1c:d9:2b:
06:80:31:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:38:08 2025 by rpki-client