Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
File: Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft (raw, json)
Hash identifier: 5OFvKqTceD7wHFxAJd7hLovma05MMhFEWmYL4s143co=
Subject key identifier: 52:12:E4:23:79:66:E9:4A:56:39:89:38:CD:23:38:2B:0B:12:D8:52
Authority key identifier: 37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
Certificate issuer: /CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Certificate serial: 0196760C2FC3DA108E2D99AD468E07F3D3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
Manifest number: 0B73
Signing time: Sun 27 Apr 2025 07:00:32 +0000
Manifest this update: Sun 27 Apr 2025 07:00:32 +0000
Manifest next update: Mon 28 Apr 2025 07:00:32 +0000
Files and hashes: 1: Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl (hash: PkWiGXNp0qbnxNBJavNOfuch02tnUhIxUX9+NC/dsAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:2f:c3:da:10:8e:2d:99:ad:46:8e:07:f3:d3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Validity
Not Before: Apr 27 07:00:32 2025 GMT
Not After : Apr 28 07:00:32 2025 GMT
Subject: CN=5212e4237966e94a56398938cd23382b0b12d852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:46:fb:d6:ee:f6:1e:a7:ac:e4:e4:2a:1d:
70:ca:0f:f3:3d:5e:d8:a2:22:4a:f0:5b:e4:06:26:
99:87:3e:71:3d:9e:d7:da:01:45:8a:c8:dc:f2:f9:
a0:9b:e1:3f:a2:96:58:69:55:ce:a0:9b:75:65:3d:
9c:77:59:fd:48:06:26:fd:8c:4b:93:03:ac:39:17:
0b:00:66:70:b0:80:5a:05:ca:cb:c2:c4:b8:8d:ca:
32:b2:0d:29:19:38:b1:2f:10:97:c2:3f:f8:24:1b:
49:b1:89:1b:8f:2a:30:2d:9a:55:aa:82:df:c8:cd:
dd:43:93:f6:b7:96:96:43:77:01:ea:6d:be:9d:4e:
ef:65:2b:b0:31:44:e6:4d:dd:db:35:7e:0a:0f:60:
59:98:ce:40:a7:2d:e8:e3:ce:5d:79:ba:e8:81:3a:
ba:fa:ae:7d:98:fb:8f:50:d4:ab:39:ec:6c:d9:78:
3a:2c:2d:73:d0:55:55:c8:4f:e4:7f:67:44:a1:c3:
49:79:98:f0:9f:c5:bd:9d:41:3d:fd:a3:f8:5c:09:
0a:2d:36:d7:42:46:1e:2a:df:1a:bc:83:8d:6d:e4:
47:97:c0:97:13:10:c8:4c:d4:60:3a:82:54:51:16:
99:1e:43:30:4c:e1:0f:1b:68:83:13:93:67:dc:48:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:12:E4:23:79:66:E9:4A:56:39:89:38:CD:23:38:2B:0B:12:D8:52
X509v3 Authority Key Identifier:
keyid:37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:15:31:e9:1c:b3:06:a5:db:64:d8:53:f6:3f:99:88:ff:61:
47:51:e5:81:77:26:a1:81:d9:46:4e:ca:9a:d6:79:4f:75:67:
07:20:0d:fa:75:3a:3b:46:11:c2:73:dc:38:fd:37:d9:0c:0f:
7d:84:28:4c:bb:9c:74:b0:64:be:fb:08:b2:cd:c2:7e:72:ea:
b2:fc:e5:23:30:43:b9:29:59:dc:24:c3:70:ef:23:71:b5:36:
25:c8:b0:0c:20:7e:b0:e8:9e:31:f4:7a:d5:53:99:41:d2:45:
ee:dd:d6:eb:90:ab:7f:c8:9d:8c:4d:32:51:e3:b6:f3:1c:3a:
54:76:ce:b9:53:aa:06:f5:9e:5c:1a:6a:80:4f:c0:ae:64:5e:
ae:53:e5:98:b4:af:bf:d4:75:dc:77:60:7d:e8:ac:85:e9:ed:
1d:ed:b4:40:fc:f6:85:a9:3c:56:cd:a8:4d:26:7f:fd:b3:6c:
a0:17:61:7a:1e:d4:2c:3d:c7:85:fc:69:64:9c:e9:64:ed:45:
95:03:ee:59:0a:17:04:37:f7:9f:76:7b:d2:87:49:10:c6:12:
12:fe:2e:a5:3f:6f:82:95:0c:31:71:e3:d6:4e:b7:bd:ae:bf:
61:4a:bb:59:23:c2:cf:15:38:e6:f9:df:77:4c:10:b5:cb:46:
ba:15:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:13:35 2025 by rpki-client