Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier: W7iSrCzgDY3WydOR2VirKE/SJIXMt9Gq8QpZti1N8BM=
Subject key identifier: 3E:F1:99:BE:D1:5B:37:62:43:E3:D3:18:56:4A:34:0E:44:D4:70:AD
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial: 019679444A3EA467D5B1D3FAC686163A047E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number: 0336
Signing time: Sun 27 Apr 2025 22:00:40 +0000
Manifest this update: Sun 27 Apr 2025 22:00:40 +0000
Manifest next update: Mon 28 Apr 2025 22:00:40 +0000
Files and hashes: 1: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: CXUs6ayRuWLqzWYBAclHLc5WuONmyNAengpajTLCX58=)
2: hr1FzTLzhvjdHRGQawXaK0XuGQ4.roa (hash: wRJW1xVVLpDSguuiY7y5qT4f4RgVOBoZp/PuXmFp+qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:4a:3e:a4:67:d5:b1:d3:fa:c6:86:16:3a:04:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
Validity
Not Before: Apr 27 22:00:40 2025 GMT
Not After : Apr 28 22:00:40 2025 GMT
Subject: CN=3ef199bed15b376243e3d318564a340e44d470ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:d0:8f:f3:68:fb:f1:88:9e:26:40:87:60:
3e:48:b9:e1:14:6a:4f:1b:49:59:a0:30:a2:06:ea:
40:0a:aa:f8:e3:64:b5:4a:73:5f:86:68:e2:4b:01:
d2:92:7f:12:00:31:9d:a7:c6:0a:d5:6c:7c:f1:fe:
ba:8e:da:18:43:af:b3:4f:c4:ba:00:de:4b:0c:fd:
47:98:b7:67:65:c7:d7:5c:f8:19:a5:30:aa:24:71:
90:c4:a0:41:63:2a:a6:98:73:0e:13:85:9d:13:c3:
71:8c:5b:4f:b1:8c:f9:57:bc:3f:67:2a:28:91:b4:
f4:ad:10:ee:92:64:4d:d8:ff:cd:c8:a0:ab:60:46:
b7:13:2c:ec:7f:6b:63:97:06:3a:07:29:2e:2c:91:
4e:8d:ac:8c:6c:b8:16:26:cc:ba:34:28:1a:74:87:
53:c3:58:f9:9e:1f:14:94:14:fe:1a:ba:cf:f2:f7:
a6:c9:3c:27:b1:8e:3d:6c:92:84:7a:7c:30:8f:c9:
0d:5c:0c:ec:1e:70:ea:37:7f:6d:a9:a9:0b:73:9d:
a2:78:cd:2b:53:89:f7:e8:83:3a:3a:8a:c7:37:3c:
88:76:47:a3:79:61:38:4c:55:b2:ad:d1:32:8c:ad:
dc:bd:b4:3c:a5:10:e1:6a:f4:08:f0:fe:a2:6b:bc:
21:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F1:99:BE:D1:5B:37:62:43:E3:D3:18:56:4A:34:0E:44:D4:70:AD
X509v3 Authority Key Identifier:
keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:08:b5:d8:a5:d4:4b:35:66:f5:6e:f5:d2:eb:ee:37:79:07:
a3:e5:1b:a6:20:27:55:80:d7:47:a8:01:55:fc:8a:d2:a1:ba:
ca:db:54:12:45:7a:16:42:62:1c:8f:fa:e6:15:0a:e9:f7:d4:
8c:6c:8b:db:8a:76:73:e1:07:99:97:a1:af:19:68:6e:97:ae:
e4:79:a0:78:58:80:26:af:05:93:06:62:58:07:20:f5:2c:da:
2e:33:e5:fc:c2:fd:30:e2:92:0e:87:8c:41:b7:32:d4:11:a2:
78:3c:78:15:c2:42:91:fe:ee:3f:1a:78:f2:69:bb:95:f2:aa:
c3:c6:98:a8:92:19:75:a1:28:64:35:8f:63:04:de:3b:dc:72:
c2:7f:7c:7b:26:04:99:1a:c2:ea:2a:5b:cf:81:b2:6c:c6:00:
e6:f3:98:91:9b:3b:f8:67:c3:ea:2b:bf:d2:d3:ef:ad:9e:4f:
63:d6:0c:54:50:32:ca:82:99:57:b7:2c:1f:0a:bb:b2:98:ca:
a5:5d:69:df:3b:7f:fb:d4:0a:56:42:fc:f1:94:8a:7e:ad:3e:
7d:e8:d7:e9:41:d4:34:91:16:12:24:28:bc:8f:ba:5b:26:ae:
7a:fb:50:bf:ff:09:65:0f:65:e2:81:0d:57:c8:32:0f:2e:17:
64:08:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:25:55 2025 by rpki-client