Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
File: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft (raw, json)
Hash identifier: 1+VN09STXgarUhdwqtEtEpig1q3DKIQjplgu8xpIytQ=
Subject key identifier: 0D:0E:5A:E7:36:6C:3A:B8:65:72:7C:9B:52:A3:B4:A0:E6:AE:38:73
Authority key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
Certificate issuer: /CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Certificate serial: 0196C728AD6EDE1E75FA8EBD30E7A2C5F6A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
Manifest number: 0A7D
Signing time: Tue 13 May 2025 01:00:53 +0000
Manifest this update: Tue 13 May 2025 01:00:53 +0000
Manifest next update: Wed 14 May 2025 01:00:53 +0000
Files and hashes: 1: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl (hash: 4ZHrSshSELWRf4bORPb3+Kjtf3WJRtMrxRhOAVfp9F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:ad:6e:de:1e:75:fa:8e:bd:30:e7:a2:c5:f6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Validity
Not Before: May 13 01:00:53 2025 GMT
Not After : May 14 01:00:53 2025 GMT
Subject: CN=0d0e5ae7366c3ab865727c9b52a3b4a0e6ae3873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:48:d1:e2:f3:2f:ec:2f:f0:71:7f:da:51:
a3:c2:53:1d:61:b2:2e:cb:d4:22:a9:42:ba:8e:5e:
1c:4e:f9:67:e5:38:fe:22:73:16:a9:5a:ed:85:4b:
65:4c:dc:0c:29:13:68:fa:83:3e:31:35:ac:0f:90:
f4:d6:0f:a6:00:07:0e:e2:69:fa:21:9e:3b:83:10:
eb:4e:6c:7d:e1:bd:72:0a:c1:7f:7e:8f:fd:26:b8:
6f:34:d4:76:16:4d:a5:72:16:77:d4:63:47:47:43:
f2:f3:70:87:89:2e:ef:66:5c:51:00:d5:6d:f1:d2:
6f:fe:ea:ca:23:ae:38:67:11:21:1d:5c:27:22:87:
bb:d7:4d:a1:76:39:68:48:20:56:64:ba:c2:32:54:
4b:50:95:b1:1e:a1:dd:81:a6:c9:9b:dc:e6:ae:15:
3e:79:60:6c:1a:f6:a7:d3:2e:88:c7:9e:a0:f6:3c:
64:e9:6b:b9:41:db:32:78:1b:71:19:1b:c9:da:d9:
b2:f1:e6:f5:c6:bc:f8:25:2c:de:9e:19:5e:72:09:
4c:7b:5f:87:84:fb:94:1e:1b:bd:3f:bc:7d:49:41:
94:d7:6e:dd:4d:03:cb:39:17:f5:b2:c1:97:43:72:
c9:b6:65:4e:d9:0d:4b:c7:9e:d5:4f:27:03:13:5f:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:5A:E7:36:6C:3A:B8:65:72:7C:9B:52:A3:B4:A0:E6:AE:38:73
X509v3 Authority Key Identifier:
keyid:9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7b:ab:53:88:fe:d6:76:2a:39:76:94:21:f9:b8:ce:43:3a:
c9:c7:aa:a4:d2:ef:db:9f:8b:57:64:f3:2b:da:74:59:7e:bd:
16:10:03:5d:6e:cf:de:75:e4:d5:b2:d1:c1:88:56:9f:89:dd:
2b:a1:04:6e:02:93:b8:c8:29:fb:88:84:0d:59:2d:dc:b6:16:
ee:fe:53:15:41:03:18:8f:cd:79:3b:eb:1e:8b:a1:67:5b:a4:
bf:81:97:0a:35:b7:bb:74:cb:72:14:ac:5f:ae:2c:94:f7:08:
91:d9:40:00:79:17:aa:94:d7:a2:49:66:67:61:9b:fd:10:a4:
34:75:3b:b2:9e:30:f2:9f:03:32:d5:2b:da:84:da:b4:f3:d4:
cf:ee:d6:fc:40:28:4f:f4:aa:f0:1a:c0:9e:89:65:87:c7:3c:
72:8f:e0:14:d2:c9:18:16:4a:9d:f6:d3:30:8e:01:6f:f9:81:
ef:e3:96:e1:36:90:62:9b:d3:09:8c:30:d5:8a:db:23:05:85:
42:1b:9f:fb:46:d4:40:7c:29:11:c1:b4:00:5c:72:f2:00:d4:
d1:ae:f1:e2:07:42:0c:7c:35:2a:27:1f:16:6b:b8:de:5a:ca:
b5:a0:bf:1f:f2:e5:9a:ad:41:3e:6f:43:76:05:e8:33:a4:0e:
d0:65:d6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:20:29 2025 by rpki-client