Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: HYnFtOP9EvMxsWXFu4Rpsf/dS01hgwn1+QP87ozqRf0=
Subject key identifier: 7D:A5:85:36:2B:29:44:F4:E8:93:20:DE:64:4F:CA:0D:1B:D5:DD:D2
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 0196C9F229153F9EC5B81765FACFC897F68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 14:00:12 +0000
Manifest this update: Tue 13 May 2025 14:00:12 +0000
Manifest next update: Wed 14 May 2025 14:00:12 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: EPqxATcZPeX8YYAcGR2+To4bFhQ9v6Tztcivud5y3ms=)
2: mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa (hash: 4mDmX111g5PLlffQE3BOZIPTW2uYVk7yBC9oTl48FX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:29:15:3f:9e:c5:b8:17:65:fa:cf:c8:97:f6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: May 13 14:00:12 2025 GMT
Not After : May 14 14:00:12 2025 GMT
Subject: CN=7da585362b2944f4e89320de644fca0d1bd5ddd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:4d:0f:f9:f0:d5:ef:75:1f:8c:31:73:3c:
60:62:95:57:08:b2:df:c2:e7:47:c1:81:e2:62:a3:
07:09:45:c8:5a:34:0c:0c:f0:ab:51:c2:82:ea:4c:
dd:5e:b8:26:f0:a6:68:9d:b3:c4:02:8f:f0:0d:e2:
51:c7:a2:bd:43:8b:3e:33:3f:4b:e4:e9:5e:b7:eb:
a0:c3:a4:24:f3:d4:98:f2:ce:14:3b:3c:74:2b:3d:
29:ff:3d:3b:17:d8:00:48:32:39:c9:13:67:0a:60:
34:9d:1d:55:ee:5b:a5:07:4e:db:68:45:15:1c:8e:
73:a3:4c:91:df:de:46:68:ae:e0:2e:4d:ba:e4:79:
6b:d5:ad:bf:52:a7:bf:05:42:3a:a0:aa:2e:1f:50:
00:66:f3:0c:69:0e:19:32:b3:14:1a:c1:a2:92:9d:
4b:0c:ff:37:26:b6:38:c6:a6:92:a0:fb:cc:6c:23:
64:13:9f:0f:83:d0:08:4e:b8:fb:74:29:39:c7:10:
98:e6:51:df:9d:ff:42:46:5f:37:72:a1:fc:d3:41:
02:9d:56:a2:b0:1f:8d:b1:a6:8a:e2:3e:6c:67:b1:
5c:46:74:ba:92:12:09:0a:b4:91:87:0f:ce:9f:5f:
3a:d9:54:35:79:82:67:d5:41:d3:3b:1b:35:ed:ba:
8f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A5:85:36:2B:29:44:F4:E8:93:20:DE:64:4F:CA:0D:1B:D5:DD:D2
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:de:cf:f2:da:f2:c3:b5:b7:7e:24:02:36:a5:74:66:8a:38:
5e:94:dd:b1:17:bc:45:f4:df:30:c7:8c:6c:e3:d5:82:d0:d5:
9a:84:f0:1f:c2:fc:4d:7a:f3:b7:72:ee:2b:87:0b:f5:fc:cc:
8d:b6:15:d9:c7:20:2b:0a:16:47:21:4d:8e:18:dc:e2:7d:07:
1f:cd:f3:0d:b8:49:ae:a7:77:47:30:5d:01:64:ba:ef:4b:99:
9d:f9:67:82:6f:a6:21:a5:4a:aa:15:31:76:e7:f7:6a:93:e9:
e6:ed:ae:8a:7f:4b:fc:42:0b:76:69:ed:a4:7b:2b:4d:45:db:
80:4b:b7:c3:a0:ff:43:45:26:eb:63:67:92:0f:b6:79:17:2a:
50:0f:29:c8:ad:c8:87:5a:ca:e6:76:9b:98:c7:d0:9d:49:bb:
5c:89:5f:4f:c8:7e:88:20:74:ec:f5:29:41:43:1c:6b:a5:8b:
3e:19:11:10:da:bf:35:77:15:91:f3:e4:45:81:5b:b8:67:7b:
ef:da:1e:99:77:18:dd:3b:7a:db:9f:2d:9f:42:1c:79:4a:ea:
e5:7b:9d:3f:5d:aa:6b:ad:81:72:35:10:79:54:a7:b6:8a:70:
d8:e0:bb:65:f4:2f:0d:4a:2a:5c:ff:28:21:92:4e:00:85:43:
f0:d6:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:14:38 2025 by rpki-client