Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
File: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft (raw, json)
Hash identifier: disLhJxsEVQi0Bneet26eSg6AhzUizdv4XJN8NU29uQ=
Subject key identifier: 3B:7E:A8:1C:E6:CC:45:D7:74:19:6D:BE:07:EA:2B:F4:82:76:E9:9A
Authority key identifier: 36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
Certificate issuer: /CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Certificate serial: 0196BA11F205848F6F7907496C1C87F8E388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
Manifest number: 042F
Signing time: Sat 10 May 2025 12:01:00 +0000
Manifest this update: Sat 10 May 2025 12:01:00 +0000
Manifest next update: Sun 11 May 2025 12:01:00 +0000
Files and hashes: 1: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl (hash: THeaBH9lbyBN7KkJ/NpImOidjIII05Z0II0WQGmkjBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:f2:05:84:8f:6f:79:07:49:6c:1c:87:f8:e3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Validity
Not Before: May 10 12:01:00 2025 GMT
Not After : May 11 12:01:00 2025 GMT
Subject: CN=3b7ea81ce6cc45d774196dbe07ea2bf48276e99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:82:8c:c8:e1:a8:3d:34:8f:9a:1c:67:b9:
8e:37:da:c5:bd:75:09:b7:66:1a:91:4e:cf:cb:68:
f1:a0:86:de:c8:51:75:df:4a:68:08:cb:63:8f:35:
c7:38:e3:40:10:a3:dc:6b:00:d1:14:70:99:75:b6:
81:41:cb:7c:1a:f2:24:37:9e:26:11:70:56:5e:25:
16:d1:0a:c1:c4:0a:2c:ee:a6:c2:92:89:5d:81:3e:
5e:83:21:76:cb:d2:62:c7:b5:e6:34:9e:09:0c:40:
e8:55:a6:9a:a9:28:51:57:12:96:5f:70:fe:66:56:
88:ee:69:1f:83:46:ac:f7:1d:0a:92:39:5e:cd:e5:
c5:73:b5:fe:15:9c:a5:6f:e2:97:42:70:8b:1a:e8:
49:9a:32:65:a4:dd:33:38:5f:8c:33:1f:1d:6c:7d:
c0:90:18:cf:92:de:dd:48:3d:12:46:6b:66:9c:9a:
24:24:85:bb:5d:79:79:1a:2e:a8:86:2b:32:2d:2b:
05:a1:c8:e0:e5:3b:de:d1:94:dd:75:f1:48:f7:1a:
f1:bb:fc:f0:1a:2b:14:21:e8:84:a0:e4:21:81:80:
ae:35:26:91:00:80:4b:4b:04:23:c3:c5:94:ab:fb:
8d:78:c0:85:2b:b0:e1:1e:37:f3:c4:e4:f5:09:44:
5c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:A8:1C:E6:CC:45:D7:74:19:6D:BE:07:EA:2B:F4:82:76:E9:9A
X509v3 Authority Key Identifier:
keyid:36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:18:14:10:67:d2:b4:e0:02:0b:89:ad:14:c4:4d:15:34:f7:
a6:73:a9:0c:c9:b5:ca:c0:d7:48:e8:1d:91:f6:2b:7e:bd:d9:
f5:d7:2d:67:84:af:5e:20:1c:f5:1b:d3:96:a2:fa:2c:d3:6f:
84:49:18:bf:2d:54:b2:4b:0d:9e:67:8d:20:27:f2:29:a7:b7:
df:9d:6f:f6:53:d0:54:3b:66:2b:c5:33:4c:4e:1c:ab:cf:1b:
26:15:54:74:12:d6:bc:f2:0b:43:9f:b6:d9:be:1c:b5:8c:2a:
f7:38:d9:35:23:11:09:7a:b8:15:cc:5a:b4:40:99:a8:ac:f7:
b6:bd:cb:1e:14:07:5d:63:85:14:47:ea:18:84:e7:d5:26:20:
cc:6f:84:cf:14:8e:26:97:7e:85:65:ee:00:0e:d7:09:fa:09:
d7:4d:87:93:53:b4:d3:68:3c:ba:05:06:c5:b4:f0:29:63:b9:
91:34:eb:6c:14:f1:ec:b0:52:f6:37:37:5d:2a:8a:04:bf:45:
34:2b:17:8a:31:b1:17:fd:ea:d1:01:b1:ac:8f:e5:8a:e2:7b:
dd:df:2b:f8:1f:7b:39:7f:85:1e:54:86:30:7c:2d:93:7e:91:
6b:af:ad:b9:e8:0e:4f:b9:6d:37:19:93:52:27:15:68:39:a4:
b8:33:dd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:56:21 2025 by rpki-client