Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: EE4GY5f7TeqDpHCsF0MAc29FeyeQD78mb1XZ0qD7e6w=
Subject key identifier: 5A:52:30:B4:ED:C0:F9:24:42:63:54:E3:31:73:EA:B0:82:70:26:E9
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 0196CA6077E900FC8AECBFF92654241FAF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 0CC1
Signing time: Tue 13 May 2025 16:00:41 +0000
Manifest this update: Tue 13 May 2025 16:00:41 +0000
Manifest next update: Wed 14 May 2025 16:00:41 +0000
Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: 3DZ3g7TEtYmYWE7JK8NiVltGkLK6XF9/OmZqrnKh8Ek=)
2: OMa6gi_iwh1hBu7tbqj9s02UqHs.roa (hash: MtN6hH7mkES8J6BxizWre+aErU3W714/kzoONVlpny4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:77:e9:00:fc:8a:ec:bf:f9:26:54:24:1f:af:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: May 13 16:00:41 2025 GMT
Not After : May 14 16:00:41 2025 GMT
Subject: CN=5a5230b4edc0f924426354e33173eab0827026e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:fc:8e:d7:18:6e:df:05:d3:7b:7e:ab:06:
0c:44:99:e8:ee:da:f3:40:62:09:39:22:51:ff:07:
2a:15:06:35:18:1d:96:d7:5b:b8:e9:aa:45:e1:0d:
54:e4:3e:5c:a1:d6:5a:63:c8:82:ae:d7:db:2d:81:
61:39:62:37:f0:f7:2b:af:2b:43:fb:03:b9:f5:0e:
1a:bc:d4:db:c2:62:58:1a:71:de:0c:37:a6:7d:ea:
45:3f:ff:36:96:34:cd:5d:68:30:3a:de:c4:d5:95:
c2:a8:b8:03:d8:c9:e6:fa:2e:af:6a:4e:f6:7f:14:
0e:69:50:83:76:63:a7:18:46:d9:d5:b0:a2:6d:4c:
79:3c:93:1a:41:19:d8:c6:d9:e4:bd:33:cb:64:bc:
e3:34:2e:37:9c:6e:b5:e6:70:61:52:e2:ce:b4:0e:
ff:3f:9b:2f:8a:f7:5a:3f:6f:09:e0:00:73:cf:0d:
83:06:cd:45:d1:14:68:a6:63:c6:c9:42:1a:55:b0:
44:e7:19:a7:0a:19:b7:79:6c:04:32:a4:44:db:68:
2a:e8:d4:c3:5f:6a:0b:8c:c2:84:f2:fa:9e:dd:1d:
eb:ea:85:2b:9c:d0:c7:ad:e9:b9:2a:38:6c:e1:d4:
03:24:a6:80:c2:d8:ff:96:49:94:77:34:b9:bd:55:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:52:30:B4:ED:C0:F9:24:42:63:54:E3:31:73:EA:B0:82:70:26:E9
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:01:d7:5f:49:e1:1b:c7:09:f7:8f:4c:01:1b:79:32:67:cc:
2c:77:7a:77:7a:93:03:72:a6:9b:10:3a:ad:d0:da:bc:c2:12:
92:33:c4:aa:46:6d:6d:66:ae:32:49:55:d3:05:d8:ff:6a:fd:
a9:64:df:8b:e0:1a:da:53:f7:bb:ac:b8:40:50:5b:0e:56:1e:
1c:f2:8e:2b:ea:33:3a:8f:bc:36:e9:8c:52:ef:c9:fb:8e:af:
05:57:aa:e3:b5:36:23:25:20:04:45:7e:3f:53:b2:61:3e:c9:
23:39:01:79:14:3d:65:05:e2:a4:ea:17:98:fd:ce:b8:52:8c:
ae:dd:05:53:71:ff:06:ed:2a:0b:b1:b1:c4:f4:74:89:ff:ab:
6f:94:07:85:67:ec:9b:cf:a6:7c:7a:46:79:85:e9:32:0d:03:
88:e0:1c:22:02:78:8f:de:48:1c:90:08:59:d9:98:1d:3c:1c:
a1:2b:32:20:ab:da:53:cc:e0:e3:fa:6b:2d:35:64:08:e2:97:
c6:3e:f4:eb:67:7c:47:f4:eb:6f:56:43:9b:fb:ab:83:a2:ed:
29:a3:c3:f4:e5:dc:50:1a:3b:79:ee:d5:ac:79:5b:50:e2:3d:
e4:f7:ed:34:5f:70:88:97:25:38:48:74:17:dd:0f:9e:74:ef:
a8:6c:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:48:41 2025 by rpki-client