Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
File: N5fgOfAlolqm6ZI5HZJCYGmbpns.mft (raw, json)
Hash identifier: +AyoAr0BwBn41cAkh0PErTUfMtK6ZRyN+D/lkXvfzmM=
Subject key identifier: 3C:B4:3D:71:08:D2:DF:A9:0F:E4:69:0D:09:33:FA:30:8E:73:67:C3
Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
Certificate issuer: /CN=3797e039f025a25aa6e992391d924260699ba67b
Certificate serial: 0196C0B83EE3BCCFE1999D49283AE1146D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
Manifest number: 0EB0
Signing time: Sun 11 May 2025 19:00:22 +0000
Manifest this update: Sun 11 May 2025 19:00:22 +0000
Manifest next update: Mon 12 May 2025 19:00:22 +0000
Files and hashes: 1: N5fgOfAlolqm6ZI5HZJCYGmbpns.crl (hash: LJ3y8UVeY36X/3Ykc60DmHuzceO9NeeQnNunUSzyAjw=)
2: sVzqlUVXrHqVsVw4yhzSu1oYIjM.roa (hash: HaD8do3X9duYtx96VIyzNjLwjQlO2MrTlBSjfqbB5ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:3e:e3:bc:cf:e1:99:9d:49:28:3a:e1:14:6d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b
Validity
Not Before: May 11 19:00:22 2025 GMT
Not After : May 12 19:00:22 2025 GMT
Subject: CN=3cb43d7108d2dfa90fe4690d0933fa308e7367c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:88:05:ce:c1:42:c8:d0:4c:be:95:50:cc:
1a:f1:a5:d6:87:f5:19:78:96:49:1f:ec:14:59:4c:
b3:5b:22:69:3f:ad:f4:4a:ac:e9:fd:14:3c:5a:cf:
54:01:b4:af:ee:bd:f8:63:26:26:3e:d9:49:91:ea:
e1:07:5f:9e:12:7a:26:6e:ad:14:ba:7c:6b:b9:24:
62:0e:47:26:ad:f9:7c:30:a1:80:53:01:9a:f7:67:
00:65:9c:61:3e:12:53:cc:7f:63:95:0e:a9:de:d4:
eb:05:f0:85:1c:da:e9:09:e0:83:d7:38:42:f2:ca:
84:02:08:b4:f9:b1:99:ef:02:43:5d:38:87:59:69:
3c:49:98:06:b9:c1:55:b2:84:b5:16:92:5f:1e:df:
31:62:21:01:35:20:d1:98:31:e7:13:6d:4d:93:f0:
d8:67:d9:b8:15:1e:a8:ea:82:df:c5:2a:56:67:8a:
14:58:7d:af:57:6b:6b:21:04:e7:18:61:ce:5e:37:
40:55:d5:eb:1d:39:55:c4:99:ec:21:1b:f4:6c:77:
06:8f:09:0f:07:21:11:53:58:76:7d:61:19:d8:8f:
86:c3:75:e1:72:c7:dc:a7:71:2b:85:d8:a3:f3:7f:
b9:98:15:63:0d:b7:5b:7a:0c:4f:ae:85:0f:e8:80:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:3D:71:08:D2:DF:A9:0F:E4:69:0D:09:33:FA:30:8E:73:67:C3
X509v3 Authority Key Identifier:
keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:61:0a:52:84:a5:30:95:dd:31:67:91:11:11:9a:72:e3:72:
12:a8:fc:63:df:ff:b7:50:86:19:ed:d4:57:32:33:43:e0:b2:
e5:de:da:ca:71:b6:6b:f1:07:2c:f5:6d:30:03:3c:b9:2e:44:
cb:4b:54:39:18:7c:83:20:85:5e:e2:18:6a:82:35:34:d8:7d:
45:88:a2:e0:bf:ce:bd:e0:9a:db:dd:89:b7:32:66:81:52:17:
f9:83:15:c4:ac:01:f7:76:02:bf:d8:8c:3f:cf:a2:c6:32:0d:
98:25:0b:be:7b:87:b7:60:37:ba:77:a0:46:69:95:1f:36:ab:
d6:83:3f:26:ef:70:5b:11:f1:8c:22:62:65:df:3c:43:fa:2e:
eb:7d:58:ed:97:7c:d7:48:8c:ef:cc:e6:b1:63:6c:e9:61:3d:
c8:fc:36:a3:cf:2a:71:be:5a:7f:15:cb:c1:aa:9e:1a:45:77:
c2:2d:8c:5e:90:7e:b1:b6:5b:a0:30:16:a2:fb:19:e2:3d:65:
c5:e5:af:2b:f5:04:a7:27:de:98:24:4c:0d:40:39:92:01:73:
81:6a:25:40:49:a8:12:c0:ac:bc:e8:cf:78:f8:b5:09:7a:f4:
8f:1f:c7:26:09:00:a2:c1:ed:85:24:96:42:b4:a8:48:b6:ff:
c4:13:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:41:36 2025 by rpki-client