Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File: N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier: RGVRe1TBml6ScqsHaHBDOlGUfEO5Dv6iwOCQvP4PDrE=
Subject key identifier: 54:22:5F:DA:B7:73:50:9F:C9:36:5B:77:BE:FA:9B:67:C2:F1:19:6B
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer: /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial: 01967BA04D275CC8C37199ACC5653BC1490D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number: 0BBC
Signing time: Mon 28 Apr 2025 09:00:25 +0000
Manifest this update: Mon 28 Apr 2025 09:00:25 +0000
Manifest next update: Tue 29 Apr 2025 09:00:25 +0000
Files and hashes: 1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: g5jZApkUil0Ry3Ny1Rx+QZ6fADAWkJEUAlpl58euDUM=)
2: cNzBuZews7ZdR62Aog1WuWIa_Vc.roa (hash: QJxazJXAbp+Y08ZTXOoocYGXg/oCHOcrCqlhmHqJgf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:4d:27:5c:c8:c3:71:99:ac:c5:65:3b:c1:49:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Validity
Not Before: Apr 28 09:00:25 2025 GMT
Not After : Apr 29 09:00:25 2025 GMT
Subject: CN=54225fdab773509fc9365b77befa9b67c2f1196b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:62:85:ce:8b:34:f3:d1:eb:e9:75:f6:a6:
fc:35:ff:62:d0:91:5f:19:5c:88:11:8d:f3:47:c9:
ab:22:b7:e9:cd:d6:e7:a2:4e:50:c5:32:e2:6a:83:
94:df:1f:5a:69:df:86:cb:2d:ea:de:4a:92:c9:ef:
51:4a:eb:da:e0:6e:82:3b:d8:05:f6:2f:30:36:8b:
b9:53:62:36:a1:0d:25:83:04:b4:b6:34:b7:4c:03:
34:b3:03:59:53:dc:a8:d3:57:b8:ac:76:7b:bc:29:
71:af:8a:2a:ac:2e:1a:cb:18:23:6b:11:11:1f:87:
eb:a7:da:15:c4:b9:b9:7e:ae:0c:23:82:fc:11:75:
95:76:de:97:40:e7:31:a8:99:8d:74:f2:fb:b7:bd:
9a:a7:63:7a:fb:cd:d3:6b:63:a6:5a:03:22:39:59:
87:f7:15:b4:99:51:c2:e7:9a:4f:3c:d8:ca:4d:4a:
92:10:93:a1:cb:ad:15:85:37:a6:76:a6:ee:09:93:
aa:e7:cf:30:0b:04:a1:d2:7f:bc:9d:1b:49:ff:79:
af:e8:69:e4:65:ab:a7:44:8e:7a:b5:94:f3:9c:6d:
a1:1b:75:bc:91:63:9c:9c:7c:a4:96:e2:37:21:db:
71:ac:79:f3:d3:b3:27:26:9e:82:db:c6:53:a7:cf:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:5F:DA:B7:73:50:9F:C9:36:5B:77:BE:FA:9B:67:C2:F1:19:6B
X509v3 Authority Key Identifier:
keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b0:f0:3e:cd:7f:09:42:c0:88:f8:0e:7f:94:84:12:4d:de:
ca:a7:bc:9d:64:34:0b:61:c3:1e:c9:56:7e:21:94:7e:59:a0:
52:f2:60:26:2f:63:14:85:2b:12:b0:48:24:7e:5f:39:06:c3:
a5:3b:e7:d3:7e:08:7d:28:32:a3:c4:40:41:2e:4a:78:ca:1f:
d5:d3:ed:89:3f:bf:01:dd:97:7b:75:0e:34:9c:44:dc:2c:79:
d3:a0:f9:c4:9e:7a:63:e5:84:9e:96:d4:3e:ec:ba:80:03:08:
b0:16:98:09:a5:a1:43:24:71:92:6d:13:19:03:2e:14:06:b3:
eb:9e:da:2d:c1:92:54:3d:22:7c:c9:80:8b:4f:00:cb:81:73:
36:8e:80:87:42:a8:a8:2f:cd:04:3f:6a:44:b3:09:75:68:56:
9a:c8:9b:40:b6:01:9a:ca:d4:64:f7:85:7f:5a:f7:0b:a5:9e:
a4:09:3c:a1:a9:3a:a6:34:e6:5d:8f:88:3b:7b:2d:b7:00:67:
a6:41:38:91:d0:50:05:0f:dd:60:c3:d2:93:b8:d0:25:6e:de:
c7:ee:12:b9:0a:7a:16:0c:71:60:45:09:05:07:59:37:b3:c6:
2f:27:e0:38:1a:cb:e4:1d:a6:00:0d:5a:bd:7f:9f:6c:40:de:
8e:39:da:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:33:55 2025 by rpki-client