Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File: N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier: HSqgZ/I8pzBZ1Hd6ZPEqohz9QXhyiB4aQ5sbfZkvwYI=
Subject key identifier: 70:29:77:FF:46:B4:24:DE:18:2C:97:DF:12:53:68:C3:48:DC:34:C3
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer: /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial: 01968322E32A3764D2C863E0BC4FA0DD4919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number: 14A7
Signing time: Tue 29 Apr 2025 20:00:23 +0000
Manifest this update: Tue 29 Apr 2025 20:00:23 +0000
Manifest next update: Wed 30 Apr 2025 20:00:23 +0000
Files and hashes: 1: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: LHWrdCWnR9ubz3hnCxN7fVpuEDnLvVW7Sbc44TladqI=)
2: UOgjlDZ-hlIE51uRVoyR7KP99NE.roa (hash: 1AY5DsB6GoL7krCLNb7v1DdRQDuAlUbr226PuiYccH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:e3:2a:37:64:d2:c8:63:e0:bc:4f:a0:dd:49:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
Validity
Not Before: Apr 29 20:00:23 2025 GMT
Not After : Apr 30 20:00:23 2025 GMT
Subject: CN=702977ff46b424de182c97df125368c348dc34c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:76:98:d6:c9:4d:ce:bf:af:12:b3:04:50:64:
8c:39:fe:fb:63:ba:a8:61:e6:e3:96:a8:0e:f2:3b:
d7:b9:20:d8:1f:11:f6:01:f5:3e:48:c7:01:ec:93:
a0:bb:a5:33:e3:6d:f4:93:52:b9:9d:8d:62:aa:e9:
f2:83:e6:72:50:b0:03:0b:76:2a:16:3f:77:4b:05:
d1:14:c0:86:ca:e5:0e:46:32:98:2c:c8:f5:f8:81:
88:40:9a:95:9a:d4:40:4e:32:16:0c:64:24:9f:aa:
7d:03:71:cc:26:04:f2:27:7b:96:e9:b9:25:8f:d8:
d3:76:75:c1:5b:be:9e:2a:da:b3:e1:51:3b:17:f0:
b1:54:13:41:43:89:60:9c:b2:9a:ef:e9:49:32:56:
b4:be:ce:d4:30:65:2e:21:95:af:67:a8:7b:cf:c8:
39:a4:63:e7:d3:8e:a8:4a:96:23:30:a0:0b:2e:54:
09:44:bd:6b:ee:a8:21:ab:21:58:16:47:bf:50:c9:
06:ac:64:62:9f:54:10:c7:88:66:20:8c:92:68:5a:
06:72:0d:e3:6c:0e:82:12:ce:5b:34:b0:62:02:46:
f1:1b:80:b9:e5:d6:8b:c1:7d:45:24:a4:e4:45:3b:
f8:2e:9f:73:7b:97:2e:a4:4a:6f:d9:4d:f2:43:b1:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:29:77:FF:46:B4:24:DE:18:2C:97:DF:12:53:68:C3:48:DC:34:C3
X509v3 Authority Key Identifier:
keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:02:82:b1:ca:34:90:3c:63:d8:42:65:1b:f2:df:19:87:46:
85:d7:ce:56:69:12:c7:d8:27:96:38:80:c1:e3:ea:92:63:da:
81:14:25:cc:b6:25:0c:e7:00:87:26:b8:d5:0c:01:05:4c:90:
62:a4:29:cf:d7:85:84:11:f7:05:c5:f3:6e:7e:79:16:91:4b:
65:ae:bc:aa:d9:57:5b:0d:0e:f9:e1:bb:5a:4b:31:64:5f:81:
fb:5e:51:51:56:45:30:a8:dd:81:dd:4d:d5:c4:2b:db:c7:69:
89:b1:c2:7a:94:8b:6e:80:5e:60:e8:8d:31:cd:a8:fb:e4:c2:
ac:51:7a:9e:0f:78:c2:5c:12:0c:0a:75:36:90:89:6d:4c:3b:
a0:84:56:3f:8e:f0:cb:61:b9:a8:fc:64:25:a6:0f:af:95:7c:
34:da:cd:ea:19:f3:1f:10:7e:4e:ff:ae:28:67:0a:4c:43:15:
d8:55:e5:83:3e:aa:4d:8c:f6:03:c3:e0:fb:8d:d7:f7:b2:97:
99:9d:84:81:b5:f1:d2:c2:42:30:38:65:8a:0d:27:d8:c8:51:
bf:98:c3:07:f1:7e:45:6e:63:25:79:f2:c4:78:e1:74:70:2b:
d3:0a:40:13:d1:e0:49:12:32:07:cf:2e:23:92:c5:1c:ad:62:
90:7c:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:55:43 2025 by rpki-client