Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
File: N6VPsHvqPfVW41k0VNMg5PAO7yw.mft (raw, json)
Hash identifier: Nn6bAsRkRtJeUZidfSMReihnOVJimKBI+xFEN/Qkv0g=
Subject key identifier: 47:F4:01:A1:4B:0F:0E:2D:89:D8:2E:40:D7:34:73:BA:EA:02:D2:D1
Authority key identifier: 37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
Certificate issuer: /CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Certificate serial: 019677559FC9E12C30DD969D5A727A33C12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
Manifest number: 0327
Signing time: Sun 27 Apr 2025 13:00:22 +0000
Manifest this update: Sun 27 Apr 2025 13:00:22 +0000
Manifest next update: Mon 28 Apr 2025 13:00:22 +0000
Files and hashes: 1: N6VPsHvqPfVW41k0VNMg5PAO7yw.crl (hash: pvyzukx6ktkd626pslpMKOBUJo5lNbwqqu9Hm19S4lY=)
2: Z9jKPG-aJrl0Zezz0qMB35u4yX4.roa (hash: 2A8HZxxRaB1bgoi8TMjFDPNN3FGgJuX9XCmcDH5eYKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:9f:c9:e1:2c:30:dd:96:9d:5a:72:7a:33:c1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Validity
Not Before: Apr 27 13:00:22 2025 GMT
Not After : Apr 28 13:00:22 2025 GMT
Subject: CN=47f401a14b0f0e2d89d82e40d73473baea02d2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:12:fb:fe:a1:f7:5f:db:fc:ba:56:62:5d:
e6:34:97:6e:bb:21:9e:d2:33:64:92:e5:dd:32:94:
71:7f:54:8e:6d:8a:35:02:eb:94:1c:22:16:7e:1b:
d7:9d:ab:ca:4f:8c:5b:de:bf:0f:53:92:f3:46:96:
a0:a4:69:9b:28:7e:30:82:92:f0:30:36:26:7b:72:
05:0f:3f:85:cb:e0:1d:12:b9:99:55:80:a6:53:07:
6d:c8:18:0e:91:c9:e2:1b:94:fe:f8:0c:86:49:03:
6f:b7:54:6d:1b:92:ef:05:95:08:7d:4e:4b:dc:e3:
63:bc:b0:43:7d:0f:8b:a6:7f:41:e0:c9:42:bd:1c:
eb:a6:ce:de:78:c7:3f:ca:3a:a6:27:bb:6a:ef:95:
67:24:e5:7a:54:38:9b:68:94:e0:16:13:06:3b:50:
1c:b5:68:cb:20:7e:4d:90:b3:cb:c2:32:3e:aa:18:
10:78:ce:e4:d9:06:b0:fd:6f:9c:72:0f:2f:47:e5:
c8:b4:7d:0d:bd:80:fb:f8:42:5f:c9:36:6a:63:2f:
0b:96:08:c2:62:2b:18:15:40:a5:e0:fb:18:3c:64:
11:b3:77:d5:d4:c2:8f:89:d7:f0:e6:37:ff:93:d6:
31:31:a1:91:70:89:49:6a:d6:e3:78:54:9d:0f:5c:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F4:01:A1:4B:0F:0E:2D:89:D8:2E:40:D7:34:73:BA:EA:02:D2:D1
X509v3 Authority Key Identifier:
keyid:37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cf:30:9b:49:b0:25:44:22:da:b3:37:23:a8:34:78:f8:95:
4a:28:6f:c8:e8:ea:7b:51:77:3c:67:8f:a1:93:c9:19:6e:dd:
3c:67:54:ec:21:78:58:3f:c4:db:b9:c5:19:8f:f1:c2:2c:de:
9d:f4:21:3f:30:4c:e7:3f:2f:52:f7:b1:97:b6:4c:f5:78:09:
23:60:1f:f1:1a:b7:ef:13:43:58:21:89:21:3a:34:41:39:a6:
27:a5:97:2b:f8:a1:a0:8e:9b:b3:bf:5a:21:0e:7a:2c:82:c4:
ef:f3:ba:30:5a:61:cb:b6:c0:14:24:ce:83:63:bc:83:fa:34:
52:7c:f0:23:00:4c:05:42:07:cd:dc:c5:1e:4b:a3:81:39:a7:
a5:b1:c3:42:68:12:69:84:ab:e7:8d:35:d5:ef:81:26:fb:e6:
4f:6a:f6:ab:d9:7c:a3:4b:8d:42:34:06:dc:80:c3:a3:08:1d:
77:45:ca:3f:1a:ec:05:66:16:54:6a:c6:88:f1:ed:48:06:34:
72:8e:f9:1a:0f:1b:ab:b2:19:a5:ee:b9:20:16:15:66:27:8b:
6f:54:df:b9:68:71:ea:69:85:14:de:7b:7a:aa:06:19:44:51:
56:b5:02:bd:53:05:4e:c1:7c:a5:24:87:18:9f:c1:cc:d3:f4:
57:12:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:14:33 2025 by rpki-client