Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
File: N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json)
Hash identifier: XONra/tdRqnjY6mRews1AcJtqQoR3+PpvCHrCPnrHZI=
Subject key identifier: C3:2A:B1:6E:61:8C:9E:53:48:3F:20:41:81:B7:D7:73:9E:D0:0D:82
Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
Certificate issuer: /CN=374083af0fff1768a07c655f1fe386009c522ccf
Certificate serial: 0196A12D2E7800D43FD884B58515C4CA0147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
Manifest number: 1109
Signing time: Mon 05 May 2025 16:00:14 +0000
Manifest this update: Mon 05 May 2025 16:00:14 +0000
Manifest next update: Tue 06 May 2025 16:00:14 +0000
Files and hashes: 1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: 4j2YX8ZoT4OFYoKb6dvtRytGAo3TUZj8ixFACQyBaGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:2e:78:00:d4:3f:d8:84:b5:85:15:c4:ca:01:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf
Validity
Not Before: May 5 16:00:14 2025 GMT
Not After : May 6 16:00:14 2025 GMT
Subject: CN=c32ab16e618c9e53483f204181b7d7739ed00d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0a:e2:a9:5a:74:31:9f:91:f0:8a:11:91:82:
c0:dd:ff:87:89:a9:0f:0a:8f:22:99:5b:e7:85:d7:
c5:5a:17:64:4e:ae:ac:d7:3e:cc:ef:52:dc:ee:fa:
46:9f:f9:bd:0a:3e:d0:97:7f:12:94:b8:fe:61:bd:
0a:83:b1:5b:77:08:f5:ff:99:45:0a:60:0f:cf:63:
29:ee:b7:db:8e:51:1a:0d:b0:88:11:23:60:d1:3b:
56:42:2f:ff:74:b6:75:df:81:9a:66:1c:27:ba:ed:
d1:e7:0c:cb:a4:99:e4:dc:74:67:a2:c6:5a:74:27:
72:c2:01:4b:32:a6:8b:eb:20:ae:05:eb:ab:b1:dd:
be:79:77:f2:95:b1:67:0e:61:d6:ed:6a:f7:5c:42:
b9:ab:a2:d8:a4:32:3b:f1:b9:e2:7c:15:62:b1:ba:
40:d6:49:ef:fa:e2:cb:16:da:3c:71:5e:e8:67:be:
72:31:ac:41:e3:9c:5d:6e:f6:e7:b4:57:18:29:6a:
ba:9f:d6:1f:72:4d:8b:80:75:ca:a7:65:74:c5:7d:
b8:60:ad:7b:8c:35:6c:8d:e4:8e:0c:d7:64:0e:56:
5f:bc:e3:1e:93:98:46:8a:93:6d:83:73:c6:71:69:
f7:68:08:03:d3:0f:39:6b:e6:5c:e2:40:49:74:65:
b5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2A:B1:6E:61:8C:9E:53:48:3F:20:41:81:B7:D7:73:9E:D0:0D:82
X509v3 Authority Key Identifier:
keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0c:0f:1b:8d:59:38:0d:28:10:60:14:9a:79:ea:bf:9c:58:
45:89:a1:f4:a5:f1:6f:3d:07:6d:08:e4:0b:04:b1:a2:0e:2b:
3f:1e:36:29:93:17:02:66:3c:e9:cd:69:8f:14:0f:16:44:94:
c6:1f:46:85:d0:47:93:96:8d:14:2d:d8:b7:c0:ee:67:98:a0:
13:13:e6:a1:db:1a:8b:fb:42:ac:5e:2f:0a:0c:a1:89:7b:8c:
f0:6e:67:a7:9c:d7:15:2d:db:f5:fa:5d:bb:dd:12:4d:96:f9:
1d:f2:76:1e:23:c3:e0:23:64:24:bb:9f:42:53:82:60:31:ba:
ce:69:52:db:5d:5f:7a:bc:71:fd:de:02:fb:49:fc:0b:50:e7:
25:f8:9d:cf:ee:07:04:2a:2c:05:83:c5:bf:25:e6:27:77:11:
2c:c9:82:37:f4:0e:8a:49:a9:c3:24:79:80:b3:0b:58:e1:fb:
fc:8f:21:4a:72:62:2a:e0:eb:06:88:b4:bd:fd:59:da:14:e3:
4e:a7:8e:2a:96:78:98:e8:a7:2e:99:97:8b:86:d6:b8:19:73:
11:84:53:68:ab:a0:28:b8:65:ab:9d:c2:27:2a:0f:45:7d:e0:
7a:c1:f4:ab:b3:3b:5e:39:30:0c:6c:8a:82:ad:88:46:08:33:
64:ea:5a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:20:34 2025 by rpki-client