Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
File: npzXqbifTgVovUoLbCwRzRfn8OE.mft (raw, json)
Hash identifier: iADpH+z9sJ8dTC9eZ5cwikVBxnfQnSZ1sVkczoWbI7Q=
Subject key identifier: 1E:6A:2A:5B:AC:EC:CA:0C:F2:CC:1F:3B:1B:30:D8:43:5F:1B:E7:B5
Authority key identifier: 9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
Certificate issuer: /CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Certificate serial: 01968210DAA79C2B33E7EFE061E7B8B92168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
Manifest number: 02C7
Signing time: Tue 29 Apr 2025 15:01:04 +0000
Manifest this update: Tue 29 Apr 2025 15:01:04 +0000
Manifest next update: Wed 30 Apr 2025 15:01:04 +0000
Files and hashes: 1: npzXqbifTgVovUoLbCwRzRfn8OE.crl (hash: p4qEQl7FRzOvSIVM5qg6EPeBAHBiq+4K8l54JOe+SH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:da:a7:9c:2b:33:e7:ef:e0:61:e7:b8:b9:21:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Validity
Not Before: Apr 29 15:01:04 2025 GMT
Not After : Apr 30 15:01:04 2025 GMT
Subject: CN=1e6a2a5bacecca0cf2cc1f3b1b30d8435f1be7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:d8:ae:14:34:32:30:61:b5:85:05:39:fa:
0e:86:ea:65:f4:3e:e2:da:be:c9:91:76:67:13:88:
d4:14:89:76:36:c5:96:85:11:8f:d5:e4:79:75:4b:
f9:70:2a:1d:94:69:50:5d:5a:29:a7:da:7e:aa:49:
1f:21:82:7d:09:f8:10:6d:7b:65:57:f6:72:a8:a9:
ab:03:9b:37:9f:df:14:4b:cf:52:5d:6e:23:a6:58:
39:2a:c2:85:c0:26:4f:bc:97:2c:e3:c4:93:99:13:
c8:98:7a:ba:e6:0c:70:63:c0:53:30:89:73:d7:e2:
0a:ac:cc:93:2b:e9:51:86:1a:7b:d5:ac:c7:36:54:
11:c1:60:82:0e:b9:51:26:77:1a:ae:31:7b:5e:fb:
92:56:82:15:58:88:73:37:28:08:56:76:9a:35:df:
51:5c:12:79:8c:ee:0a:9e:da:71:53:06:3d:86:01:
52:7c:32:f0:07:1b:d0:78:52:3a:94:96:41:e7:0e:
70:32:af:a1:ac:ec:82:ef:c1:1f:e5:17:a2:9a:fa:
ab:67:ba:dd:02:94:32:98:66:d4:5d:68:6f:37:cc:
c8:91:6b:62:76:0c:78:88:87:d3:95:b4:0b:c7:1b:
9f:19:8a:26:4a:bd:59:8a:50:3f:d0:5a:22:01:e7:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6A:2A:5B:AC:EC:CA:0C:F2:CC:1F:3B:1B:30:D8:43:5F:1B:E7:B5
X509v3 Authority Key Identifier:
keyid:9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8a:20:f4:f7:4d:71:40:72:54:5f:e1:7a:f1:5d:62:ce:a6:
37:5f:2e:44:a4:c6:d5:34:91:e2:3a:81:40:47:d4:fa:26:8b:
71:ab:c1:d7:45:57:d2:25:03:91:86:59:64:ed:fa:11:f9:55:
64:c6:6e:a0:3d:76:79:e1:00:f5:8b:30:9e:be:b8:5b:30:83:
d2:1f:d5:4c:6a:2e:97:5b:5d:36:3a:ae:97:6b:07:0e:80:49:
ca:48:b0:11:07:e8:e2:c2:e9:9c:fb:05:42:48:74:bd:87:23:
fe:7e:8c:2a:97:16:f5:68:c4:02:5e:7f:e3:df:3a:8a:0b:77:
d9:48:c0:e8:ee:23:ce:77:7d:15:24:2b:04:f3:89:d6:f3:07:
80:1a:89:06:68:9c:2f:09:7d:44:4a:85:02:68:3e:55:b7:60:
70:3a:be:00:64:6e:71:70:66:93:42:38:50:06:7a:8a:aa:cf:
52:57:48:fc:58:e5:0e:9e:59:64:a8:45:74:fd:ae:9a:c7:e4:
9c:53:f9:ab:4b:69:49:a5:51:f3:5c:f2:80:a2:e6:f1:0e:f2:
d3:ab:11:1a:e5:56:f1:00:31:f1:d7:24:44:92:54:33:29:fd:
ab:58:31:17:b3:a7:ec:08:55:2b:b7:d3:f8:2c:0d:2d:46:15:
7a:9f:72:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:29:52 2025 by rpki-client