Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier: cvPxJtGL0+WagYb3CsKZovaQQjGX+OsyA35Q+Ff+NZk=
Subject key identifier: AF:EC:DA:76:8B:83:96:AC:8D:CB:AC:19:14:12:59:3A:5F:B8:28:57
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 0196A9F9756F5E933F1F2D1698382E84AAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number: 0F23
Signing time: Wed 07 May 2025 09:00:20 +0000
Manifest this update: Wed 07 May 2025 09:00:20 +0000
Manifest next update: Thu 08 May 2025 09:00:20 +0000
Files and hashes: 1: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: wz/SkAIM4hWD0EdFrEaLHuInvOR711Jvf7W/q9j92rs=)
2: cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa (hash: VnVBSnuyvJSL8u2y/xmozn76q7jfteZhwwoJt7Qqpuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:75:6f:5e:93:3f:1f:2d:16:98:38:2e:84:aa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: May 7 09:00:20 2025 GMT
Not After : May 8 09:00:20 2025 GMT
Subject: CN=afecda768b8396ac8dcbac191412593a5fb82857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:e4:89:f9:97:2b:ea:6c:bc:74:28:3d:6c:
c2:c6:a1:3c:e8:3e:6f:ca:35:b1:12:21:dc:ed:6e:
7a:ec:9a:dd:1b:11:57:15:00:36:0a:59:71:7a:7e:
52:ee:bf:b9:cc:97:47:13:80:d4:7c:30:99:3c:99:
27:4c:9a:d0:db:95:2a:d5:0c:66:c4:a1:bb:9d:25:
34:06:d4:79:e7:dc:19:3e:67:8c:42:a5:92:a9:7f:
fd:ee:de:59:fa:5e:07:ff:e3:37:58:ee:b8:33:08:
52:7c:2d:80:a0:56:31:e5:c1:06:8c:48:ab:70:33:
73:bb:c0:45:05:3c:36:90:ca:94:97:23:94:7f:7a:
de:01:e6:57:34:25:0d:d8:e4:f1:d8:55:81:ab:1b:
c8:a8:a3:20:1c:3c:74:3f:79:48:b3:46:a0:ea:9b:
6e:7a:1c:a7:ee:6c:26:68:ab:d3:30:5f:33:37:9f:
1d:04:d8:87:91:cc:3a:d3:24:5d:06:06:0a:96:6d:
54:08:af:37:d2:d2:52:47:68:1e:29:f0:d6:77:bc:
b4:35:04:11:10:19:20:bd:8f:85:a4:e3:21:d4:c4:
9d:43:a6:9c:13:48:26:ad:26:dd:96:a8:04:e7:a7:
c6:3a:b5:92:cf:ab:0b:ef:16:65:36:7e:3b:e5:6a:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EC:DA:76:8B:83:96:AC:8D:CB:AC:19:14:12:59:3A:5F:B8:28:57
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d5:d3:2a:77:8b:e4:61:71:d0:40:c6:2d:08:1a:2b:da:4b:
ae:1b:83:6c:de:df:98:b8:51:8b:1a:25:3d:ff:fe:c3:99:b0:
05:92:7d:01:74:5e:81:91:ba:46:b4:35:2f:68:fd:8b:86:63:
fb:4e:b5:f3:12:cc:d9:e3:8a:c1:5f:dd:b9:dd:af:ce:4f:26:
5f:8f:00:fc:47:c3:3a:01:5a:13:d5:d9:bd:c1:42:94:09:40:
3b:d3:ba:35:bd:68:51:1d:b0:4a:ad:1f:7a:bc:15:4a:e6:e6:
32:d1:3f:a8:f6:1f:54:1c:ce:d2:90:ea:c4:5b:1d:4d:db:f5:
76:98:df:f9:13:52:21:b2:e8:27:f3:7a:62:56:49:c1:65:7d:
dc:35:19:be:df:40:fa:a8:cf:54:72:c3:37:54:da:1f:6a:73:
31:92:e9:da:5f:2e:97:27:fc:27:a0:a3:55:3f:9c:81:fd:42:
b7:0a:d1:da:67:8c:b9:28:ee:08:ec:a4:ef:77:a6:00:d0:d9:
94:49:e9:f5:96:ce:94:c6:58:20:b0:ae:60:7c:21:99:3c:0c:
82:4b:42:fe:f7:59:d8:e2:6c:3e:1e:27:98:cf:87:2c:77:f5:
07:ab:49:51:21:da:d6:a5:7c:ae:21:ac:71:37:c0:5f:f2:b3:
79:81:97:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:42:00 2025 by rpki-client