
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
File: N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json)
Hash identifier: X6pQA5dqHx8PgweM/VkYwd+70J8zsz3tTC7Nz7YZVcc=
Subject key identifier: D1:B9:4D:EB:1F:5E:3A:CC:53:1F:B7:A7:C4:7C:D2:E3:4B:CA:BB:A3
Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
Certificate issuer: /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Certificate serial: 0196AD68E9BD74B8AFEDC6EE21F0B07A09D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 01:00:56 +0000
Manifest this update: Thu 08 May 2025 01:00:56 +0000
Manifest next update: Fri 09 May 2025 01:00:56 +0000
Files and hashes: 1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: PwqaNYni62hJalaqQH/7LE92J+GqMzGZIyHkNvDdNsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:68:e9:bd:74:b8:af:ed:c6:ee:21:f0:b0:7a:09:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Validity
Not Before: May 8 01:00:56 2025 GMT
Not After : May 9 01:00:56 2025 GMT
Subject: CN=d1b94deb1f5e3acc531fb7a7c47cd2e34bcabba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:16:9a:c5:65:1a:c5:bf:f2:37:d4:9c:05:
41:4b:04:3f:ca:51:1d:04:1d:33:9e:5c:4c:5f:6c:
44:f7:f8:b1:52:ec:57:7f:75:ff:f1:2b:9d:c0:1f:
d6:70:39:33:57:0f:e6:7e:80:45:18:fc:27:6b:be:
6f:f2:8f:b2:69:a7:e7:3b:26:ea:2a:68:c9:2b:77:
fb:85:30:48:4c:a7:21:1d:e9:3f:e7:6b:87:fa:06:
ad:16:fa:bb:d2:0d:1a:55:12:02:8b:91:3c:d6:f2:
54:7b:f3:b3:cc:eb:2b:8d:8a:98:27:e2:f9:5b:c4:
03:22:02:13:cd:8c:4e:d2:0a:c0:8a:09:d5:cf:7a:
bd:9a:9d:49:86:9c:b4:98:2e:49:7f:51:7b:93:79:
34:bd:fb:41:0f:d1:38:3a:85:d0:35:d8:ad:19:10:
29:ec:18:86:95:6f:15:c3:2a:0d:51:5b:a5:f1:8e:
3a:87:51:eb:fc:8c:b8:4b:e8:f3:43:58:95:6a:90:
dc:3c:4b:54:70:a6:e2:a3:6f:86:b6:7d:4f:a2:25:
d4:d1:84:0c:50:a8:95:c3:c0:49:31:ee:ba:83:05:
37:e3:a1:07:5d:ac:5b:f2:6a:7e:c1:43:23:ea:dd:
5a:2f:cb:21:b1:a8:3a:1d:cf:71:bb:41:39:c5:11:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B9:4D:EB:1F:5E:3A:CC:53:1F:B7:A7:C4:7C:D2:E3:4B:CA:BB:A3
X509v3 Authority Key Identifier:
keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b0:47:2a:78:9f:2d:04:c0:78:31:d9:f6:dc:65:c0:3c:fc:
c3:f9:70:73:3e:c5:81:07:99:f6:ba:40:f2:92:d0:75:e3:34:
56:6d:61:3b:98:23:3b:2a:0e:e7:67:28:21:33:d0:60:20:65:
c3:48:3a:b2:8b:c0:64:e2:87:ea:22:c7:93:58:3f:9c:92:c7:
30:97:52:fe:3c:48:b9:6b:e2:1f:1f:b6:97:c3:b1:5c:0d:d4:
56:63:50:46:47:a0:24:d9:c4:60:18:dc:05:9f:cc:ea:44:b8:
07:97:6a:f8:7a:b1:b1:b7:a1:a3:ec:52:82:9a:af:08:c4:63:
df:ad:ab:42:82:37:24:9e:8f:4a:0b:f7:5d:ec:f3:e8:bb:99:
bb:d1:a7:90:48:fa:65:d6:be:d7:b5:f7:d3:be:fe:62:23:93:
4e:10:cb:dc:80:f8:fd:60:19:82:26:2e:d3:d1:e2:50:e2:b8:
e2:83:4c:3b:e6:08:b0:f1:a0:4b:06:c9:20:03:b0:a6:9d:85:
50:5c:ad:86:62:97:bf:24:ba:2f:a6:68:35:8b:70:f6:21:b7:
29:e9:76:23:1e:eb:b7:6e:e1:2f:ea:88:f5:92:0b:90:a1:33:
03:18:e1:75:26:90:8d:f3:9a:c3:24:6e:19:2b:7f:cb:d0:c5:
eb:10:c2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:38:00 2025 by rpki-client