Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
File: NDez9zdtPvHNqLyWbxOXCFnPeW4.mft (raw, json)
Hash identifier: I/xCAtJBGndmttQHN1QkJVOhBO/pK7GMYK7oaj8pu8I=
Subject key identifier: 24:64:CD:00:D6:F3:D7:A5:49:EB:29:FE:D6:3F:8C:53:0B:3A:1B:87
Authority key identifier: 34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
Certificate issuer: /CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Certificate serial: 0196C9170CED51EFA746F4AB5708703E7276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
Manifest number: 0636
Signing time: Tue 13 May 2025 10:00:52 +0000
Manifest this update: Tue 13 May 2025 10:00:52 +0000
Manifest next update: Wed 14 May 2025 10:00:52 +0000
Files and hashes: 1: NDez9zdtPvHNqLyWbxOXCFnPeW4.crl (hash: vMOK5x3so6OMv2DsRkASoGofRS+ynVhyc5cRid0iyzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:0c:ed:51:ef:a7:46:f4:ab:57:08:70:3e:72:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Validity
Not Before: May 13 10:00:52 2025 GMT
Not After : May 14 10:00:52 2025 GMT
Subject: CN=2464cd00d6f3d7a549eb29fed63f8c530b3a1b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:87:76:4f:9c:a2:6b:7a:d7:46:48:53:9a:
3f:90:e1:ae:c5:af:1b:05:46:4e:73:95:d6:cb:cd:
d7:90:be:1d:9a:a0:1b:d6:48:65:ee:8f:e2:94:67:
ce:ec:9d:10:67:88:01:57:2d:b4:8c:af:ca:96:9a:
ee:b2:59:f2:ca:e3:7c:46:12:4e:09:e9:de:38:f9:
bd:6f:79:00:5b:93:af:2e:a6:66:a9:d2:2e:5a:45:
d0:29:2b:dc:bb:b7:92:95:5b:76:a7:63:2f:6d:af:
22:01:56:3f:0a:23:b2:ee:1c:23:b9:c3:2a:8d:a3:
0d:9b:20:4b:80:1a:b1:6c:7d:eb:d0:e3:a5:1c:5b:
f4:01:f6:32:e5:16:7a:d5:f3:26:5e:f9:61:14:ff:
7a:a7:cb:bf:22:f3:b6:45:e0:11:0f:5d:88:a2:51:
25:bc:a5:3d:36:9a:8f:00:f2:46:0b:61:08:a6:39:
64:75:e6:f5:92:15:0b:67:6e:a1:de:4c:c3:0d:0a:
e7:ac:33:81:60:1c:fe:95:0b:25:09:c6:4c:00:a6:
f9:0d:bd:e0:3f:84:a6:81:c7:1d:29:1d:13:03:eb:
32:5f:aa:4f:bf:47:d8:b0:16:72:4d:be:04:42:8f:
28:8d:e3:c4:68:93:24:cb:4a:25:54:40:21:e1:d3:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:64:CD:00:D6:F3:D7:A5:49:EB:29:FE:D6:3F:8C:53:0B:3A:1B:87
X509v3 Authority Key Identifier:
keyid:34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c0:4c:6a:57:75:21:b8:77:94:91:5c:f8:e1:26:42:37:be:
3f:76:ea:99:f3:43:ad:36:02:da:ad:12:92:01:3e:f0:ca:e3:
bb:de:92:c5:01:7c:e7:c4:0e:38:4c:7b:ca:17:fc:e2:0e:ff:
8d:c1:a8:db:a3:6b:54:e7:3b:8f:59:9c:d4:5c:ba:91:b5:91:
15:e5:2f:46:a0:33:85:24:8d:2a:56:25:dd:4a:b6:5d:e0:0b:
19:48:3a:7a:09:f4:e3:9c:e5:96:15:ca:27:de:0e:0f:8b:78:
03:c0:9a:49:e8:28:cf:12:c3:75:4f:aa:27:10:18:bf:37:93:
e9:0b:ce:50:8c:33:1d:97:39:95:c8:b4:2b:dc:6d:e1:44:04:
d5:34:83:63:c1:f4:4d:e3:79:a6:85:d9:89:0a:cc:0b:97:c2:
ad:e4:25:98:59:5e:7b:fd:c8:9a:80:d4:73:4e:a4:34:69:5d:
2c:aa:2f:82:e4:a0:5c:3d:a2:cb:83:2f:17:08:f5:2a:b6:45:
84:4f:ba:85:4d:a3:09:5f:a4:21:e4:c0:39:7e:8b:7e:50:62:
b0:9d:6a:81:0b:11:74:96:84:c9:0c:eb:6d:29:39:ec:a9:e1:
5d:03:27:d1:62:72:c0:9b:8f:19:84:36:3d:4b:0e:d0:8a:b8:
38:ff:b8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:29:18 2025 by rpki-client