Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
File: N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json)
Hash identifier: PpZdQNelg6llgXD9pB6fgn5uoA/T7lUneJJws1n+/O0=
Subject key identifier: 20:76:00:FD:11:15:A1:45:9A:35:25:8F:78:78:4C:09:8B:EE:F9:E5
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Certificate issuer: /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial: 0196C2A69B15A161AB7134124E9A457F9A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
Manifest number: 0AE3
Signing time: Mon 12 May 2025 04:00:20 +0000
Manifest this update: Mon 12 May 2025 04:00:20 +0000
Manifest next update: Tue 13 May 2025 04:00:20 +0000
Files and hashes: 1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: KST+4rHH5KcIPwNtpQ7d72XCzxmWif52X0FD3+UG3LA=)
2: vmuvpxt5NWFRchGpjymjM-OTFyk.roa (hash: xudIwgzuBx5c488Lg5NntvMmtHShvLXZUS8ATmxeVvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:9b:15:a1:61:ab:71:34:12:4e:9a:45:7f:9a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
Validity
Not Before: May 12 04:00:20 2025 GMT
Not After : May 13 04:00:20 2025 GMT
Subject: CN=207600fd1115a1459a35258f78784c098beef9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:d9:0c:1a:31:02:49:f9:d0:60:58:14:26:
6d:33:8c:09:76:2b:4b:6e:9c:9c:2e:16:8a:f5:b1:
7e:27:73:d7:78:3c:dd:78:9e:fd:d2:f3:2e:0e:1f:
1b:e0:68:97:0b:dd:e5:c2:e7:68:0c:6e:29:76:cb:
59:45:03:a6:a3:84:71:2c:e6:6b:3f:4a:56:c3:1e:
b2:49:16:db:90:e4:68:65:bb:05:3a:85:8d:c7:7b:
a6:51:22:c4:99:93:f1:ae:cd:c3:4e:d4:93:b6:ae:
10:b9:35:ac:a1:49:9a:8b:6b:8b:db:a8:61:cb:8f:
0b:88:d3:3e:c3:49:fc:89:70:a2:a9:f2:ea:6b:da:
34:a5:71:25:ec:c1:b7:04:ff:80:a9:12:dd:ba:8e:
e0:45:09:74:cd:3b:3d:68:0e:17:64:c2:bb:c1:1b:
b7:dc:3e:67:5b:1f:ae:b9:32:67:ae:10:74:aa:2c:
7c:9d:de:42:60:87:49:d9:c2:3a:9c:d3:48:8a:13:
31:b9:30:5f:16:94:00:a2:f2:d0:f5:95:0e:2e:d6:
fe:8c:0e:17:e0:89:05:5c:bd:fc:ac:09:c3:c7:33:
1a:ad:02:e9:55:16:cd:11:13:bc:38:bc:5a:33:8a:
a0:cb:16:c9:60:00:cf:aa:dd:25:dd:de:25:91:29:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:76:00:FD:11:15:A1:45:9A:35:25:8F:78:78:4C:09:8B:EE:F9:E5
X509v3 Authority Key Identifier:
keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:76:6c:b1:d5:4f:85:b3:63:e5:4a:bc:16:8b:4c:c1:b5:42:
f9:83:67:81:35:64:f3:68:6e:e4:77:ff:5d:d6:80:22:f4:01:
27:86:c1:fa:38:c2:f4:15:e5:6a:c8:97:0e:7b:d4:8d:7d:ce:
5c:26:fd:62:c8:03:6a:f4:cd:0c:20:df:4f:ea:5a:3c:30:d5:
8f:91:5e:58:6b:89:a0:06:5c:3c:0f:9e:31:6a:2b:8c:b8:4a:
68:10:97:05:ed:12:87:7b:93:6f:41:ff:14:2a:da:7d:d8:c8:
89:e9:89:b7:aa:0f:40:25:44:53:6d:ca:12:41:57:c7:0b:7d:
de:b4:b0:f2:3c:70:57:c3:d4:b1:2e:ea:08:2a:56:d4:3b:4d:
3c:99:97:0f:a3:3d:ba:9b:4c:aa:0c:83:de:e0:b0:c7:22:8d:
47:e8:e2:8a:d8:0e:5c:ea:d4:de:97:5d:96:99:ee:ba:44:a9:
69:f8:7d:1c:72:00:bf:b4:95:c2:fb:b0:a7:3a:4a:fc:de:f6:
9b:1b:8f:ad:2a:af:a4:99:10:34:51:a5:65:27:7a:f0:43:aa:
cb:e8:6e:0c:70:42:db:fe:75:08:ba:ae:13:66:59:8b:30:d0:
33:ed:25:44:77:92:b7:ed:07:36:54:12:a4:9a:06:d2:de:47:
8e:68:dc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:22:01 2025 by rpki-client