Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: 2GPIjiSr0ePlMAIMjJgMc7Cfh5pMjRTN8HU0pwDMmTs=
Subject key identifier: 5E:18:DC:20:30:22:0D:0C:CB:7D:FA:E6:C7:AB:69:95:28:85:71:51
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 0196D4E3FB0B114ED03D7AE80ED97D0AC0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 026A
Signing time: Thu 15 May 2025 17:00:32 +0000
Manifest this update: Thu 15 May 2025 17:00:32 +0000
Manifest next update: Fri 16 May 2025 17:00:32 +0000
Files and hashes: 1: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: CTpefM8ckhRCf7V2EL9/TPsPjiazCVsrhrHEhQ9jksU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:e3:fb:0b:11:4e:d0:3d:7a:e8:0e:d9:7d:0a:c0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: May 15 17:00:32 2025 GMT
Not After : May 16 17:00:32 2025 GMT
Subject: CN=5e18dc2030220d0ccb7dfae6c7ab699528857151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:69:f3:74:44:64:76:ea:25:75:a4:a2:d6:
91:d8:be:26:9d:d7:f8:1f:4a:c5:bd:35:5a:d9:ec:
75:9b:82:ae:51:03:7a:48:6b:6e:74:da:98:3c:15:
78:05:5b:91:1f:b0:01:29:b2:6a:62:79:75:19:b9:
57:36:e3:4d:e3:a6:75:d4:27:f2:68:d8:7d:41:6d:
8b:66:44:6b:8b:2f:57:ff:85:55:37:bd:95:3c:2b:
99:ae:bf:95:56:66:ff:e4:e3:93:be:e1:d8:79:af:
a0:b8:e5:90:ac:26:b1:6b:79:dd:2f:33:2f:64:c9:
c7:61:c5:26:07:d7:95:6f:0b:e8:30:63:96:d0:16:
0e:06:91:b9:86:1e:66:e9:c9:e3:73:2e:7f:12:6a:
db:0c:07:32:66:a5:1d:9e:b9:3e:d3:f8:31:26:87:
d1:69:36:6c:e9:00:00:4b:d1:c7:3d:15:bb:3d:8e:
bc:63:83:ce:89:7a:dd:b3:f4:2a:f0:17:a9:9d:22:
4d:dd:8e:2a:d0:8a:31:05:a4:23:a6:8a:7d:e9:b6:
64:2e:b4:e9:ff:15:2c:5a:4b:92:51:cc:c7:3c:8c:
02:da:96:1d:d6:51:98:66:5f:39:a7:bd:04:88:d0:
a2:28:10:02:c9:27:fb:64:97:d4:6d:79:ba:2d:e0:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:18:DC:20:30:22:0D:0C:CB:7D:FA:E6:C7:AB:69:95:28:85:71:51
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:64:23:98:d9:48:ab:43:b9:90:70:ec:4b:d3:e6:5f:c9:a7:
32:0d:05:f2:dd:e4:2d:dd:eb:85:01:28:d8:5e:fe:29:ed:a3:
99:ac:ab:73:b5:b5:d2:9b:64:50:49:5b:0e:6a:0e:0f:58:d7:
08:a7:59:85:a3:15:df:50:88:88:79:86:c3:ac:03:d0:9d:21:
ca:78:af:14:ba:b1:67:46:43:68:d9:eb:e4:b7:d3:4d:99:e0:
db:9b:e9:b7:2e:3f:6b:11:c0:ca:08:a1:92:61:9f:37:04:3c:
2b:bb:73:5a:5d:76:c6:1c:5e:04:96:c1:f5:0b:eb:ad:48:21:
cf:3e:56:85:fe:68:b4:e8:4a:8f:0e:32:f6:14:db:71:63:8a:
5b:33:d1:bd:12:83:48:30:d3:c6:f8:13:42:b5:87:76:a3:81:
8b:16:e0:9a:74:90:57:83:21:e7:22:bf:20:36:93:0b:f6:86:
3b:59:aa:6d:01:f0:08:c3:d8:e2:56:82:88:66:b9:bb:55:ff:
83:97:06:e8:3b:7b:0d:85:3e:62:00:51:a1:23:3f:45:25:71:
70:05:b1:76:51:59:1e:af:90:60:e5:c0:da:12:f7:8d:43:34:
5c:03:e4:7e:b0:63:d1:5e:70:15:47:84:bb:b0:88:4d:58:41:
b9:3d:a6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:49:16 2025 by rpki-client