Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: BjNAmmQOcFsPz6M/KZEj0NwGidwHMRmWEBEhUUZgvQo=
Subject key identifier: E5:BD:51:15:A3:C4:83:78:91:55:BC:AD:50:DB:CD:B7:9D:88:96:80
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 0196B6A28116B63E27ED274C0F800ECCE006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 01F8
Signing time: Fri 09 May 2025 20:00:25 +0000
Manifest this update: Fri 09 May 2025 20:00:25 +0000
Manifest next update: Sat 10 May 2025 20:00:25 +0000
Files and hashes: 1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: KZaEO60VdRVSo7aNjOf7bbEiZhtKILErIFXq0SwFWmk=)
2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:81:16:b6:3e:27:ed:27:4c:0f:80:0e:cc:e0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: May 9 20:00:25 2025 GMT
Not After : May 10 20:00:25 2025 GMT
Subject: CN=e5bd5115a3c483789155bcad50dbcdb79d889680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:a6:35:df:77:ac:de:1a:7a:b4:77:65:9a:
ea:27:4a:0b:d5:a4:17:8a:94:68:ef:17:3c:10:f2:
db:5b:69:d4:d7:cc:6a:c5:72:33:69:1c:8d:95:7c:
31:15:35:a2:6b:4f:1e:4f:55:d5:1f:2f:83:f2:b1:
97:0c:12:b7:8a:3f:44:40:81:9e:33:e1:8a:8d:cc:
d2:0f:8d:a7:9f:02:b6:65:8a:1c:8c:cc:ef:33:5a:
54:17:66:d6:ea:78:f2:51:30:da:4f:bb:15:70:66:
78:79:79:fa:7d:f9:bf:58:2a:f8:07:5a:21:a5:5b:
e8:30:d0:52:14:78:14:93:d0:e8:7c:e1:4b:10:4f:
0e:08:a0:bd:6e:7d:96:3f:6a:4c:7a:d1:5a:47:68:
10:99:34:c0:ec:ba:7d:80:46:24:7f:f1:4a:e6:04:
e8:68:f6:fc:03:03:90:08:30:a9:15:95:e6:0e:d1:
2c:82:5e:38:83:be:37:67:04:ce:37:c0:8d:aa:a7:
b6:5e:72:b4:ca:8c:2f:de:c6:8f:b4:c4:cf:d4:5b:
a2:df:59:1f:3b:56:b8:e0:e6:2b:e8:6c:60:e4:bb:
28:b8:d0:2c:7d:d8:86:1d:de:55:a2:03:e7:c7:0d:
42:9d:dd:1f:6c:e5:4b:8f:85:ba:fa:4c:6d:63:37:
78:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:51:15:A3:C4:83:78:91:55:BC:AD:50:DB:CD:B7:9D:88:96:80
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:40:a3:d5:6c:a1:6e:44:71:b3:b8:06:46:79:c0:99:12:a3:
8e:de:b5:bb:cd:67:57:ed:6b:67:f4:78:c4:b7:f7:cd:e5:42:
5b:e0:94:a3:c7:c9:04:04:69:99:b3:af:f1:40:57:37:68:86:
ea:0f:dc:31:51:4b:71:e2:36:1b:6d:37:a6:48:e6:87:51:cf:
f2:95:48:53:7f:3f:d0:af:b2:1d:93:37:0e:c9:9a:26:04:bc:
1d:3d:2e:5c:cc:b3:9a:9a:c8:7a:29:6a:10:00:12:ae:ca:29:
3f:80:ef:f2:2e:43:b5:d2:46:5a:2b:15:53:62:1b:69:e4:28:
ca:60:79:0d:eb:62:16:9e:fa:c9:f9:d6:0d:11:f3:20:c2:47:
99:ba:f2:11:ec:08:9f:bb:65:5a:5e:e1:f8:c1:59:df:c9:85:
53:c9:cf:b9:07:1f:ce:e1:86:0c:6c:12:92:b3:bf:d1:8a:b6:
36:b1:d1:35:9a:40:b1:8a:5a:e6:9e:2c:47:a9:d4:16:4f:d1:
e6:10:84:37:c0:1f:87:c7:b7:70:52:73:a3:82:d5:e6:a7:2c:
d9:fe:0d:23:d5:05:7a:51:6e:10:28:b5:d3:63:c1:9a:79:8d:
47:23:00:c8:86:52:59:d3:5c:88:af:0a:ea:e1:8e:50:db:f1:
c8:67:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:05:40 2025 by rpki-client