Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
File: N-1J76yXlZh3cazcd6DiKJBCd60.mft (raw, json)
Hash identifier: XnGuYwNO+WFyegtd5T7UpRsjyrRXPTRwOAL6j0E9Z30=
Subject key identifier: B5:DA:48:4B:E1:AE:C6:74:15:4E:34:98:65:7E:37:3D:3A:83:7E:0D
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 0196BA7F3950919AD8398DC9964B045B3B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
Manifest number: 0D2E
Signing time: Sat 10 May 2025 14:00:22 +0000
Manifest this update: Sat 10 May 2025 14:00:22 +0000
Manifest next update: Sun 11 May 2025 14:00:22 +0000
Files and hashes: 1: 3R2oLYAWIxvU3vOCY9T-jGflBdY.roa (hash: 2FML5v0SfL1lum2iuE3qWeIT2u7iaV71VaL91S9NgIQ=)
2: CYs8Y4QkC6pLrRdUhQ8lF-crHv0.roa (hash: 2fQ0fJbFJmLOokw4tzaSLmT6+UmzzfHaw4FKPEJcqOo=)
3: N-1J76yXlZh3cazcd6DiKJBCd60.crl (hash: F3ypPUkflohHdSSXZqHO9EOuv+OJNl8p3EM9Owq1JHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:39:50:91:9a:d8:39:8d:c9:96:4b:04:5b:3b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: May 10 14:00:22 2025 GMT
Not After : May 11 14:00:22 2025 GMT
Subject: CN=b5da484be1aec674154e3498657e373d3a837e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:1e:6c:a3:e0:dd:e2:a5:de:73:1c:47:25:
ff:4c:15:0f:a3:a2:e5:04:72:8f:15:7d:80:30:54:
c9:8f:9f:90:ed:d4:2c:a8:d4:bf:c8:39:92:f6:0d:
bc:72:8f:59:f9:5a:53:4e:15:2b:ee:28:5a:a3:69:
be:35:68:6b:2d:02:be:d1:32:98:9a:08:86:fe:5f:
f8:ba:94:bd:34:5b:14:31:f0:6d:7f:53:08:ee:7f:
3b:ba:d1:04:ec:14:43:11:e8:55:04:56:63:19:de:
b5:be:c3:36:8d:c8:3c:d6:0e:c0:99:ca:e5:65:ec:
83:04:d3:2a:b0:a7:81:61:5c:32:0e:5d:43:d8:ec:
48:a7:27:34:31:9a:1a:3a:27:7f:62:85:b7:a1:2c:
92:16:cb:61:f7:98:65:8c:61:eb:aa:f6:c6:5e:79:
ee:cb:0d:2e:62:73:a6:a0:19:c7:71:75:41:a6:33:
f7:73:fb:22:4a:30:9f:9c:65:1d:6a:63:13:dc:21:
f6:30:ce:d9:e3:43:e3:b8:fa:53:cf:e5:2c:68:b5:
a4:70:ff:0b:27:a7:15:22:79:f0:2a:96:31:cb:3d:
35:14:30:94:e4:12:44:05:e4:f2:26:5f:6d:77:2c:
ad:c1:22:d2:39:3a:97:c2:90:dd:59:61:23:04:c9:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DA:48:4B:E1:AE:C6:74:15:4E:34:98:65:7E:37:3D:3A:83:7E:0D
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a3:53:62:b3:e9:d5:0c:44:9f:e0:e9:41:47:83:2b:17:62:
56:8c:9a:43:89:35:94:b1:7d:10:0c:d8:ca:ee:c0:f3:bb:8a:
b8:4a:fd:5f:ad:b2:eb:44:da:85:dc:23:b8:88:90:ee:c4:67:
18:d3:13:57:04:20:4f:e6:2f:10:dc:ad:a4:4c:58:2b:30:9e:
c0:ff:a3:51:5e:30:ff:82:ef:74:d6:94:09:4e:8a:4e:53:ad:
3a:4d:a2:be:5c:78:ed:30:f2:11:7b:3c:cc:bc:e5:07:38:1d:
85:86:03:ff:6b:e3:bb:96:ee:86:59:95:e6:bf:cf:3f:6b:45:
bd:35:37:af:1b:c5:16:5c:f7:9b:0f:f0:88:79:d4:03:a5:9b:
2b:63:f1:48:96:c5:9a:bc:d0:69:dc:04:18:6b:20:f0:4b:b4:
8d:a6:02:07:f8:a7:10:cd:28:ea:e9:72:ff:ed:46:6e:15:c2:
41:f7:a3:a5:0f:04:37:1f:fb:6a:13:98:0f:91:15:71:29:2a:
ff:d3:9b:6d:2e:29:15:90:2e:44:0a:c4:f9:cf:14:7a:e0:03:
0b:47:00:07:b4:fa:fa:e1:1f:fe:bc:9a:dc:b2:69:1a:f6:d0:
08:5f:a8:48:d5:ff:56:77:06:83:3a:84:18:e1:a4:ab:13:dd:
bb:99:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:18:46 2025 by rpki-client