Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
File: N5FWc7KL362ywgGaxo0EZP0htxo.mft (raw, json)
Hash identifier: zKeBnhU9IHDqjWddnz31yNTLZZ7EbXPlnIrO//zuJFo=
Subject key identifier: 41:EC:04:95:2B:2B:CF:57:B5:C8:FB:66:2D:15:E1:C8:45:85:E9:B3
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Certificate issuer: /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial: 0196C1CABA6B0F99E2BB008FBB9E04E920CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
Manifest number: 14CA
Signing time: Mon 12 May 2025 00:00:10 +0000
Manifest this update: Mon 12 May 2025 00:00:10 +0000
Manifest next update: Tue 13 May 2025 00:00:10 +0000
Files and hashes: 1: DH9htlq0hiwldp4q07DNTkVZOf8.roa (hash: J0KU22uieTNYBq4unRpzKgHyqTQbyJRKS4kqQcbzVVo=)
2: N5FWc7KL362ywgGaxo0EZP0htxo.crl (hash: vUdqRxsCO9YhheKKWitAcRED/bIGgTHUUTFsNfEsoKk=)
3: jeU3xqGrcmxdIS4lfaliQojmUd4.roa (hash: WoVvfzkH0PYO9V3NP53Pv15mZRXcsOzFbw+RGpI6V54=)
4: mbXBHvnDkr71szR1uqXUf3o_CNU.roa (hash: gBt+bTGYlOGXiT5DEgI8/fzoH444V5sSGRbb6v+iHAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:ba:6b:0f:99:e2:bb:00:8f:bb:9e:04:e9:20:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Validity
Not Before: May 12 00:00:10 2025 GMT
Not After : May 13 00:00:10 2025 GMT
Subject: CN=41ec04952b2bcf57b5c8fb662d15e1c84585e9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:16:7a:ed:d5:a2:1e:b4:a0:ce:7d:f7:6b:
5c:01:11:74:40:67:61:14:b4:3c:97:59:a5:4c:56:
ea:3c:58:b1:b2:93:2f:ba:86:a8:51:18:7b:7c:af:
d0:94:75:2a:07:f1:e2:d3:ca:51:ba:ad:b3:e3:da:
8c:82:2f:49:af:fb:72:c1:66:47:d2:16:c2:ea:cf:
46:91:20:34:43:53:d7:05:47:54:37:24:e3:e3:fe:
a4:36:d6:6a:2e:53:21:7a:ec:ab:ef:57:a5:15:f8:
64:fc:d1:af:e3:95:9e:62:a0:35:78:3c:e1:22:46:
cf:ce:92:af:f8:bd:41:a3:7b:e3:49:0e:ce:1a:a8:
7e:b7:41:36:03:44:c0:06:db:9d:50:a3:97:9a:15:
f2:f1:10:b5:83:d2:21:c2:33:bb:dd:92:58:2f:ba:
69:4f:b5:40:80:d3:66:84:cb:d3:6c:78:19:82:d9:
37:36:c0:69:da:77:43:49:e0:d7:9c:32:9c:3e:9f:
01:18:64:88:dd:c5:af:65:cb:1a:ed:b7:84:1e:58:
64:22:e1:17:02:24:8b:1f:6d:40:3a:7d:a0:f0:9c:
cb:94:d6:2c:a5:9f:4a:f7:75:46:7c:5a:c5:cc:c3:
7b:dd:b4:b8:69:1d:f4:13:ad:8d:6b:56:b7:27:70:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EC:04:95:2B:2B:CF:57:B5:C8:FB:66:2D:15:E1:C8:45:85:E9:B3
X509v3 Authority Key Identifier:
keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2f:29:bb:a7:ee:4e:d3:01:2f:6e:b4:ce:5a:f1:d6:ab:bd:
ea:22:c7:25:06:16:24:4c:5e:5a:a6:b5:09:a6:b3:9e:66:80:
e3:14:fc:b5:40:61:3a:d5:35:f2:1e:4e:66:3e:3f:48:ce:1c:
9a:7a:dc:13:1f:f8:68:60:6e:91:7a:1c:09:15:12:5a:be:e0:
d5:ce:82:95:d7:da:f0:66:41:1a:62:7c:59:ee:89:28:ba:d6:
af:23:fa:a1:20:90:15:9d:84:f1:f5:c7:5f:c6:28:c0:6a:ba:
56:2f:0c:79:a3:04:fd:6f:ef:70:c2:a1:05:56:51:38:cd:ee:
f3:4f:38:21:45:ea:c3:05:ca:37:bb:5e:3a:76:bd:a2:d0:46:
be:3f:ed:c9:de:ec:04:af:ed:55:f0:cf:85:f5:28:cd:c8:ef:
1a:83:15:3b:50:c6:5a:a4:65:0b:5e:a7:d8:0f:6e:ef:a1:72:
02:22:b6:a1:a6:e8:8b:c5:c6:02:63:30:a3:b1:90:00:9e:6f:
ed:1a:93:01:9e:e6:41:d8:24:74:1c:6e:a8:cf:01:b0:d2:23:
54:e9:43:85:e5:e8:77:96:0f:d3:a7:0c:ee:e8:76:ee:78:18:
c7:4b:4a:15:63:af:ae:b6:82:86:0f:0f:38:31:39:7c:4f:46:
d9:3f:8d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:17:24 2025 by rpki-client