Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
File: N28vTtsjIwxkt5O0GVfvSjI-PFM.mft (raw, json)
Hash identifier: G6Xh9Qk/lZXBVvxv1QiBuNrYgjJyhVnCRUy4pDf6EdI=
Subject key identifier: 9C:CA:B3:30:8B:21:7B:F2:0D:97:8A:A2:5F:32:C5:49:71:B7:63:5A
Authority key identifier: 37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
Certificate issuer: /CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Certificate serial: 0196AB7A3F57EDDA9A7F3166833496F22174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
Manifest number: 0FD6
Signing time: Wed 07 May 2025 16:00:37 +0000
Manifest this update: Wed 07 May 2025 16:00:37 +0000
Manifest next update: Thu 08 May 2025 16:00:37 +0000
Files and hashes: 1: N28vTtsjIwxkt5O0GVfvSjI-PFM.crl (hash: CHoYJKjF4mDkVfdndEHOezGwa7QNz2gD0qs113bp7o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:7a:3f:57:ed:da:9a:7f:31:66:83:34:96:f2:21:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Validity
Not Before: May 7 16:00:37 2025 GMT
Not After : May 8 16:00:37 2025 GMT
Subject: CN=9ccab3308b217bf20d978aa25f32c54971b7635a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:aa:05:41:78:ce:df:33:77:c2:dd:72:fb:a2:
79:74:5c:73:3d:97:68:af:43:da:45:73:4a:13:28:
c0:0b:33:5e:d6:08:54:94:c9:20:df:8c:cb:d2:44:
7f:cb:25:41:6c:7e:4d:7e:eb:9d:fb:f5:db:f6:2d:
eb:ab:10:53:61:5f:ad:99:75:f9:c4:33:ce:3e:31:
59:06:4c:93:ab:3b:f3:39:4d:45:a1:fc:27:4b:8a:
3d:e5:69:56:a6:c2:b2:d0:46:c6:c0:63:e9:cf:76:
8a:d2:d0:70:2e:b7:da:90:64:13:e8:05:b1:e0:c5:
d9:73:69:d0:60:7d:db:74:95:60:41:83:84:79:fd:
96:c6:d3:e9:fe:87:d2:a7:00:77:5c:f5:3f:4f:cd:
5d:a0:be:44:02:64:f8:36:7c:e7:d7:8f:76:42:13:
5d:fe:e1:0b:3a:cf:0a:09:08:db:59:43:d4:3a:6c:
ef:11:d8:d5:56:2e:b1:2b:56:e6:2b:72:07:af:90:
18:b0:f1:20:a1:8f:37:10:c6:a4:5c:ae:aa:ba:82:
33:98:01:a0:03:0a:d6:4c:ef:ae:88:9d:e6:f6:6b:
b0:02:dd:a1:47:cf:5d:7e:b4:ea:f8:4d:31:c8:bc:
c8:93:97:e3:75:22:f4:f8:ad:0b:f3:c6:fe:e8:da:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CA:B3:30:8B:21:7B:F2:0D:97:8A:A2:5F:32:C5:49:71:B7:63:5A
X509v3 Authority Key Identifier:
keyid:37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f1:0c:2f:0a:4e:a3:58:99:11:eb:ad:19:2f:b6:8d:7e:59:
2e:c4:c7:5a:dc:4a:30:b9:78:3d:9f:a0:79:01:51:97:c0:c6:
77:9d:47:62:d3:9a:60:fa:69:d5:c2:b4:27:04:7a:53:77:d9:
37:df:db:a2:78:81:8c:b1:71:07:fc:f1:88:00:1e:6a:45:d7:
37:1f:13:58:de:88:ec:b2:43:33:7d:8a:49:be:b1:6f:ac:6a:
eb:17:b5:9f:af:86:75:c9:a1:5b:ac:4d:f7:c8:fa:fd:77:56:
f5:bb:ce:e7:64:23:e0:2a:79:c3:dd:dc:fc:12:87:c2:0e:6f:
19:49:f0:3b:b8:a3:1f:fa:6c:91:1d:ba:8a:fd:6c:0d:0d:58:
3c:94:a2:9e:bd:d4:a2:65:16:c7:a5:80:74:ae:6d:8f:86:94:
85:d3:78:e9:35:29:ef:c2:06:0a:f6:86:38:c5:21:27:ab:1e:
08:cb:66:d2:1c:d6:b6:c6:d2:b3:f2:e0:2a:a2:2a:fd:96:73:
3f:59:99:b5:9b:d1:42:5a:22:0e:4d:e6:e4:c8:c4:f0:12:fa:
02:73:08:c5:8f:0e:77:ef:46:be:7d:a5:f3:4a:4b:42:72:4a:
92:3b:3c:80:ea:33:60:70:1e:94:16:54:1e:74:84:0a:75:8a:
65:12:3b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:34:57 2025 by rpki-client