Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier: AtUoBpWm1Y1C4vLQbqmkut+44rU5oljq/GeQnhIiI7o=
Subject key identifier: 74:FF:63:FC:C5:B3:2F:E2:0E:FF:F6:AF:87:C7:3B:EE:3B:AF:80:35
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 019681D992611704781D47DCA170E6638852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 14:00:41 +0000
Manifest this update: Tue 29 Apr 2025 14:00:41 +0000
Manifest next update: Wed 30 Apr 2025 14:00:41 +0000
Files and hashes: 1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: ar82qwDIqLneHLfY0f9/O/eXtBavOQ2gX1InNAh8p98=)
2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:92:61:17:04:78:1d:47:dc:a1:70:e6:63:88:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Apr 29 14:00:41 2025 GMT
Not After : Apr 30 14:00:41 2025 GMT
Subject: CN=74ff63fcc5b32fe20efff6af87c73bee3baf8035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:5b:95:44:4b:fa:3e:52:7b:98:c6:66:c9:
60:0b:ba:fc:94:dc:da:43:ae:81:b2:e6:56:f8:2b:
35:b1:39:4b:c9:da:5e:36:1b:20:b6:a0:7b:ca:20:
51:9d:8a:c9:28:08:44:db:3e:52:7f:ca:a9:3c:17:
18:6a:af:64:af:5d:26:bc:39:96:9e:6a:ba:ea:9c:
b1:c6:3d:59:44:67:b5:22:1a:ca:0a:67:50:68:b5:
e5:aa:1a:2e:02:a5:1a:ae:f9:fd:c9:be:d5:22:a1:
0c:8a:1a:19:a4:a0:d8:4c:ee:20:85:8c:ba:ea:f9:
a7:99:29:fd:57:d7:61:f6:bb:eb:d8:4c:c6:9c:1f:
fe:8c:e5:37:1c:51:2a:95:33:5b:b0:98:d1:c6:4f:
b4:f9:4c:68:80:d6:fe:2a:cd:bd:50:bb:a7:9d:8f:
24:1d:e9:76:39:86:f5:6f:43:84:ce:65:1b:4e:71:
aa:03:e3:40:83:f8:cd:84:0c:72:83:87:62:8d:31:
52:c8:ab:88:d5:47:b6:9b:09:95:40:8e:a2:55:6e:
3f:a6:00:7c:12:0e:52:5a:59:90:69:9f:93:87:81:
8c:41:14:7f:f0:80:b9:30:bf:2a:8b:fe:7a:3e:4f:
20:5f:9b:24:b7:13:1f:ad:f3:00:0b:3f:b5:98:a9:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FF:63:FC:C5:B3:2F:E2:0E:FF:F6:AF:87:C7:3B:EE:3B:AF:80:35
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a0:a5:0c:3a:d1:aa:b8:b7:58:17:b3:42:6c:42:df:41:44:
ba:31:42:5f:cd:cb:d9:71:02:77:6f:fe:b8:7b:bd:ca:a4:57:
d9:96:57:ea:0f:aa:78:de:ad:ff:72:a1:a8:a7:84:2b:8c:98:
a6:32:14:cf:28:d2:3a:32:86:de:48:c9:07:0a:96:6a:15:d9:
64:12:4f:b3:63:42:79:55:fd:03:4f:08:f1:08:4d:08:c6:cc:
ef:0a:16:38:ea:70:41:4b:67:ad:ad:e5:a1:ba:d0:a6:3c:b0:
1e:25:92:d0:8a:be:6d:96:c3:e2:e0:fa:32:64:fe:45:5d:72:
d7:75:d4:a1:68:51:af:af:7f:c9:04:2e:a6:22:25:9d:e0:a4:
a7:e7:49:79:8f:ee:ae:23:96:5a:a9:4d:6f:e2:24:c3:78:79:
c0:78:b9:fb:21:3a:82:4d:c0:c8:11:d7:a3:4d:42:65:8d:e3:
77:33:3c:fc:cc:db:a7:c5:85:ff:f0:f9:52:e5:ab:ac:b3:a4:
ff:36:5c:4d:fa:fe:76:8d:16:57:13:54:f4:f0:cb:da:63:63:
f6:a2:66:62:c3:62:dc:cf:02:cb:3c:19:7a:b4:f6:e6:68:e5:
48:8f:74:49:d7:38:30:d7:11:58:1e:ac:ea:39:9e:c9:e7:ca:
75:8f:bb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:13:11 2025 by rpki-client