Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: 9Gz/QMAkX+p8FmqWmIxEN/2s0FAIemtJSeIlT0K24h0=
Subject key identifier: 1E:BF:CB:77:E2:A8:10:0F:B8:81:9E:A5:CD:82:2E:4D:1B:E6:71:7C
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 01969D1A519A210667DB226A23F7A319BE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 1526
Signing time: Sun 04 May 2025 21:01:09 +0000
Manifest this update: Sun 04 May 2025 21:01:09 +0000
Manifest next update: Mon 05 May 2025 21:01:09 +0000
Files and hashes: 1: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: wvyfEr/Vnly4MVCS8I2tZtN+Ip/HjL08anwAEVMmsoQ=)
2: PSL2OSxsoutF8sVX_uvIaiWUApI.roa (hash: IoDHAxb+U2Gaz8HUwj/mdMtnodnlu8iYqMMfCwQw35I=)
3: t0FWDnJPs6XvZokHfTcCnjKRaeE.roa (hash: Aou1i/O3zguK2P9WdtUpbw8G9iRuYff1/7SNrw+Pohw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:1a:51:9a:21:06:67:db:22:6a:23:f7:a3:19:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: May 4 21:01:09 2025 GMT
Not After : May 5 21:01:09 2025 GMT
Subject: CN=1ebfcb77e2a8100fb8819ea5cd822e4d1be6717c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:77:62:0b:3f:eb:2b:4e:58:04:dc:d1:61:
e7:34:09:ef:da:0f:bf:f1:eb:c5:ad:13:e0:89:98:
76:32:f1:6f:12:c7:48:26:55:41:bb:cd:28:4d:ca:
af:52:cc:fe:c6:04:fb:4b:a0:98:bc:08:4d:8e:4f:
44:4f:e6:fc:1d:36:9c:7a:8a:1a:42:ae:67:96:da:
9c:34:a3:db:e1:10:cb:a8:71:73:e7:80:13:ae:60:
0b:2b:d5:2e:dd:cb:5a:8e:0b:4f:2a:f0:29:b1:74:
b9:45:b2:35:36:53:e5:0c:e3:6d:54:0f:b6:d1:6e:
2a:df:9d:80:ce:cb:68:5b:92:e8:be:21:fe:b3:f1:
19:52:96:86:7f:0e:05:c4:5a:46:eb:c7:82:d9:f4:
8c:cf:0b:f7:57:30:34:0b:db:ed:04:0d:b0:22:99:
78:a3:81:44:c5:6f:87:56:9d:6b:34:6f:b6:66:c0:
ad:a8:f3:28:63:86:b8:21:0d:7f:ca:12:40:f5:df:
cd:f7:aa:8b:0d:af:6e:ea:0b:fe:da:06:f9:69:e0:
b6:d3:b5:6c:26:46:9d:52:a8:89:88:49:95:b6:0f:
fa:57:5d:f5:db:a8:91:67:e4:1f:f6:47:0b:68:b5:
cf:de:98:04:34:57:ba:d2:67:72:51:3f:a7:06:ad:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BF:CB:77:E2:A8:10:0F:B8:81:9E:A5:CD:82:2E:4D:1B:E6:71:7C
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c4:19:00:c8:98:82:5e:b2:64:9e:a0:dc:34:c5:cd:68:04:
af:67:24:7d:3a:a9:a5:e4:f4:96:ac:03:32:8d:61:ef:f6:7b:
0b:cd:67:95:bc:6f:7f:07:93:a8:4c:f9:10:1b:f8:c7:f2:1d:
ce:d0:17:a8:ae:08:b0:18:87:00:a8:e8:e0:34:e6:f7:ac:c0:
6b:fc:0f:fa:65:7e:63:44:0a:47:cf:7c:c5:dc:93:67:d3:ae:
5a:68:b0:5e:c4:94:a5:39:68:a7:22:74:d8:6e:e5:91:3e:92:
e6:c2:a4:bf:94:4a:a9:59:20:3c:a4:88:92:2d:f8:f7:2e:3b:
61:10:e1:25:02:6d:d7:65:fc:30:77:cc:b4:fb:ad:6a:e6:ed:
2b:5f:7b:68:2d:3a:5b:26:0f:51:51:77:1e:b1:8b:fd:55:ff:
4c:7f:5a:1c:26:ac:d2:d4:f0:ca:26:a2:c8:08:d7:76:7a:a0:
e8:42:03:65:cf:cc:54:3e:6c:ef:72:49:71:f6:0d:63:73:b8:
3e:c9:33:9b:af:3b:5e:80:ad:d6:1e:a2:8d:cf:4c:02:f1:85:
63:8b:6c:e2:b5:7a:40:ce:2b:78:33:0b:a9:eb:99:82:5c:b8:
b9:a5:52:b0:2a:ce:d8:6b:73:21:8d:b4:f5:2f:51:15:15:e5:
95:6b:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:30 2025 by rpki-client