Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier: UpRp17S1BxZwBXNRbZNqdOPs2xf+bkssixRQEHTnZ7s=
Subject key identifier: 19:56:B0:8F:EC:B0:1F:27:97:01:CE:A8:7A:58:87:F0:EC:34:63:42
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 019679B1FCEFA91B6010BA2FEFF8ED80D63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number: 0F0A
Signing time: Mon 28 Apr 2025 00:00:29 +0000
Manifest this update: Mon 28 Apr 2025 00:00:29 +0000
Manifest next update: Tue 29 Apr 2025 00:00:29 +0000
Files and hashes: 1: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: CqdP45emA82j/utTudG4SBxCyEfzVuwa08lIRKd20EI=)
2: cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa (hash: VnVBSnuyvJSL8u2y/xmozn76q7jfteZhwwoJt7Qqpuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:fc:ef:a9:1b:60:10:ba:2f:ef:f8:ed:80:d6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Apr 28 00:00:29 2025 GMT
Not After : Apr 29 00:00:29 2025 GMT
Subject: CN=1956b08fecb01f279701cea87a5887f0ec346342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:78:ab:fb:1d:61:2a:ff:ff:95:2b:b4:84:
7a:e2:39:b7:7f:1a:a0:d2:ef:a8:e8:c6:97:98:c3:
0d:98:74:4c:58:a8:ee:bd:f2:dd:3b:66:43:2a:58:
f3:7d:54:f7:1d:87:76:9f:26:82:db:c3:a0:d6:47:
47:ec:4f:1a:c5:b1:a9:07:2f:99:fa:44:bd:f1:30:
97:db:46:9a:ad:78:3a:47:6f:e0:bc:3b:c3:d3:43:
68:52:17:16:3a:e8:7b:9c:c7:0d:a3:0d:dd:38:a1:
5f:58:c9:25:db:99:e5:d0:bd:0f:aa:d8:5e:e8:bc:
35:27:af:f1:fe:bd:d1:89:36:51:4c:c0:8e:5b:93:
81:6a:c1:ab:db:de:bc:de:4a:9c:c4:c8:06:a9:24:
cb:a2:d5:f6:5c:12:31:ca:9c:5e:32:b3:b8:9c:21:
c9:2b:42:05:46:00:5d:fe:8d:dc:8b:5d:83:37:5d:
50:92:4a:0a:c1:6d:d1:1b:da:78:5f:6b:70:88:99:
a3:bf:57:fc:6d:1c:81:a9:34:57:97:60:2a:e3:01:
60:0f:0c:1b:95:46:62:02:1d:44:ce:2e:bd:99:92:
5e:03:ef:b2:26:8f:32:06:ff:7e:47:8c:f2:af:b2:
81:c2:75:bf:fe:88:3c:f1:4a:a5:ec:b3:e7:57:ba:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:56:B0:8F:EC:B0:1F:27:97:01:CE:A8:7A:58:87:F0:EC:34:63:42
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:66:e6:11:90:14:d7:93:02:27:57:2c:fb:55:49:a1:ea:87:
1e:53:35:bf:fc:4c:39:51:f3:f0:3e:90:97:a1:d3:45:87:7e:
ca:0f:e1:aa:35:5a:b4:9a:a9:ff:22:9a:13:5d:0f:b7:4a:05:
9b:16:95:c1:c2:26:6f:c4:86:d6:c0:ab:57:0f:6f:a7:82:f4:
3a:36:dd:28:49:a5:a9:08:44:6b:0d:51:25:c9:21:75:05:6d:
dd:6d:9a:f9:4b:67:de:23:dd:93:dc:cb:03:71:be:29:6f:e5:
4e:fb:33:fa:47:81:08:62:39:cc:95:84:21:70:67:81:58:12:
41:5c:dd:a0:b5:48:a0:53:5c:91:51:4d:00:1e:b3:01:9f:42:
5f:20:ed:3e:6a:0e:3a:b6:31:f2:4b:30:7d:04:85:4e:3f:fe:
85:21:d4:01:94:34:50:1e:b9:45:10:f7:fb:41:be:98:92:01:
de:aa:b5:93:df:29:c8:2c:8c:0c:6e:ee:64:70:38:35:d6:7f:
2d:e3:b7:3d:f1:ca:66:19:ae:aa:bb:5a:37:50:bd:43:b4:ad:
12:81:46:32:85:9d:e3:29:f6:b9:ba:d4:4b:e9:b2:20:bb:62:
e1:24:1d:e9:44:cf:d6:33:d3:42:80:3f:61:3f:0c:98:86:e4:
8e:26:c5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:31:15 2025 by rpki-client