Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
File: N97mrLx4K4x2lqQLKOgDOWGdDxs.mft (raw, json)
Hash identifier: sVEXsNRxSlufvHIfQFb63UdnPCaLOdgwhoYNORYLWpQ=
Subject key identifier: 28:E3:DB:EF:CB:5F:6D:C8:0A:71:11:3B:D4:63:1A:DE:15:EB:86:8F
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial: 0196B2FC96EBDDD7A6AF00591B14ED8450C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 03:00:20 +0000
Manifest this update: Fri 09 May 2025 03:00:20 +0000
Manifest next update: Sat 10 May 2025 03:00:20 +0000
Files and hashes: 1: MbrCU5EWrzqFZBAeUe4bUJd8wew.roa (hash: 5Pva3cv3+IYsnuZvSImhrKouYMj9MMRYEIbLj8Bzi98=)
2: N97mrLx4K4x2lqQLKOgDOWGdDxs.crl (hash: ArqHWgprJTZMajZAt7JA8/5ew/U8g9GG6DpQU9w95oE=)
3: zQEfbksVhhA2S7Y-4p6fScJooW4.roa (hash: wml6Lhyvjtk0nrkWUQQ2ofJbLrbKj1m4u8FJSWuGbD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:fc:96:eb:dd:d7:a6:af:00:59:1b:14:ed:84:50:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Validity
Not Before: May 9 03:00:20 2025 GMT
Not After : May 10 03:00:20 2025 GMT
Subject: CN=28e3dbefcb5f6dc80a71113bd4631ade15eb868f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:1c:69:a4:fa:43:3c:32:66:94:64:b8:f1:
89:9f:14:f2:b1:51:49:8d:bb:6f:15:84:3d:2a:0b:
71:18:9c:e6:e5:a6:ea:70:5d:48:8a:1b:0e:29:f7:
a5:07:a8:8a:dc:79:57:df:90:e3:73:65:59:c2:03:
f5:91:4d:36:a8:6c:3c:70:fb:4e:12:af:2a:ee:e8:
cd:c5:20:d3:b7:3a:a3:a5:5b:ba:3a:89:f3:b7:a7:
c4:23:ef:df:69:c6:4a:9a:39:ea:27:7e:c6:d7:56:
f1:bc:09:d7:74:aa:93:ab:f7:f9:d9:2c:cc:aa:73:
36:15:86:c9:d3:bd:d0:86:2b:59:1c:d8:c5:62:09:
d2:c5:1b:d0:f5:5a:9f:0c:b4:be:9c:cc:5a:b8:e4:
41:68:d3:2f:16:4b:94:93:15:4d:b5:cf:4a:38:92:
9a:db:0b:14:29:e3:29:cc:ff:9a:32:a2:7d:66:23:
f9:38:39:34:d0:eb:ca:ba:ff:62:db:3a:18:01:af:
ba:cf:17:b3:2d:80:1a:21:ae:84:ae:5f:da:2b:12:
5e:c1:4f:94:1b:83:a5:c8:07:9a:f1:12:6e:51:87:
6d:45:26:ab:9c:62:df:74:a9:48:f0:85:08:fe:ea:
0b:0c:74:e6:3f:3f:ea:b8:c7:77:50:d5:3b:ab:b1:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E3:DB:EF:CB:5F:6D:C8:0A:71:11:3B:D4:63:1A:DE:15:EB:86:8F
X509v3 Authority Key Identifier:
keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cc:86:2e:66:27:a0:85:0a:e3:e7:7d:9c:7b:27:4a:11:a5:
4c:1f:c8:75:98:1d:f7:2e:ed:89:0d:9b:9b:fa:6e:0e:de:4a:
91:8f:b9:68:f0:c6:52:d4:90:5e:b3:d2:93:a6:e5:08:10:96:
6f:bc:f3:91:53:97:7a:26:b4:52:42:cc:4c:0e:e1:0d:3b:50:
2f:fe:96:5e:52:67:67:56:46:5f:24:d5:a4:84:ec:2a:57:31:
8e:d1:ee:66:f7:87:5d:43:c7:33:85:c3:3e:3b:93:4f:6b:d2:
b7:cb:88:d8:4b:21:da:5d:60:fa:21:1e:20:c9:e3:60:e9:44:
80:d1:e4:75:0b:a8:81:2c:f2:af:bc:ab:40:fc:05:6d:75:ea:
57:ad:f7:87:55:e1:97:07:9c:fd:9a:73:df:44:72:34:e4:3d:
a1:73:64:b9:5e:d3:9d:3f:a6:5d:0f:72:38:b0:84:f3:b0:8f:
fd:e2:a8:d7:2d:9b:f8:74:69:81:56:59:6e:de:f5:a7:04:ef:
0b:d7:18:64:00:dd:62:5a:3f:83:9e:58:cf:8e:fd:5f:97:a1:
d8:6f:d4:c4:1d:1a:53:83:85:e1:7d:e1:eb:12:fa:11:88:57:
aa:c9:9c:09:6f:a0:1c:2c:1c:23:86:c8:10:a4:3d:67:f2:b1:
f3:b1:c5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:43:09 2025 by rpki-client