Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
File: nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft (raw, json)
Hash identifier: fhiKfaPy2bmc1iiqOqiCmo/DqwnJxZb/8onmAH6vWnM=
Subject key identifier: EB:3A:2D:AE:C9:D6:CA:FD:E7:09:C9:4B:95:64:C9:1A:5D:57:00:09
Authority key identifier: 9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
Certificate issuer: /CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Certificate serial: 0196C0B81F8F77B053DB49B07EB356E1A946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
Manifest number: 151C
Signing time: Sun 11 May 2025 19:00:14 +0000
Manifest this update: Sun 11 May 2025 19:00:14 +0000
Manifest next update: Mon 12 May 2025 19:00:14 +0000
Files and hashes: 1: nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl (hash: DLa7qDRIlTThAP6qFZFW4nOeBcEArzKvdBFn3Cun4us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:1f:8f:77:b0:53:db:49:b0:7e:b3:56:e1:a9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Validity
Not Before: May 11 19:00:14 2025 GMT
Not After : May 12 19:00:14 2025 GMT
Subject: CN=eb3a2daec9d6cafde709c94b9564c91a5d570009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:c1:2e:19:f2:6b:a2:b6:f6:1f:4f:e6:5a:
2e:82:02:76:59:ef:90:d1:0c:7f:05:ec:dc:09:26:
2d:10:9b:5f:25:b7:7e:70:a0:00:43:be:76:43:a6:
46:57:99:9d:17:4d:5f:74:6a:70:92:d8:a5:4e:8d:
d5:83:64:be:d9:af:0d:85:91:9c:9b:e0:83:08:aa:
52:10:c4:32:dc:71:a2:b1:0c:02:21:04:f0:22:df:
26:e8:50:f5:26:50:fd:12:3a:15:11:75:63:09:6c:
6b:5a:c5:3c:35:4d:21:1c:c5:65:87:6a:76:fa:d5:
16:14:99:d1:80:19:6a:a0:a6:9b:53:86:6a:91:18:
91:37:f7:34:75:17:c2:5c:29:6f:67:a9:a2:59:bb:
f2:28:7a:d1:92:57:29:19:22:50:40:1b:8b:1a:4b:
f0:d2:98:22:2f:5b:c4:57:0c:ed:15:43:ae:24:e7:
82:6e:96:44:7b:20:ab:d3:7a:1c:7f:bf:5b:8e:d9:
31:04:b5:2b:87:f6:77:a5:e7:09:0a:da:6d:7d:e3:
31:84:2c:b9:3d:32:77:29:6f:ea:76:64:6a:77:13:
dc:76:01:7d:98:0c:35:42:bc:97:c9:18:f1:fa:98:
cb:b0:48:d1:c0:7a:ce:dc:af:a6:e7:17:7b:a3:19:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3A:2D:AE:C9:D6:CA:FD:E7:09:C9:4B:95:64:C9:1A:5D:57:00:09
X509v3 Authority Key Identifier:
keyid:9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bb:e9:27:ca:a5:c0:b8:92:a3:8d:23:52:3a:16:71:e9:87:
b5:ec:ac:16:00:1b:ac:65:3a:d5:4d:cf:85:04:4f:b5:8b:8f:
d6:c5:5f:94:3f:2c:71:64:e7:77:0c:d5:98:2f:34:71:dd:43:
51:10:37:6d:e9:73:70:2d:26:f3:88:f9:47:4e:6f:f7:e4:3e:
1d:ba:56:15:d0:0b:0c:b4:d7:da:95:ae:3f:5f:be:b8:e9:a4:
d4:68:ab:e4:03:e9:f7:b9:58:02:7a:94:58:a2:e6:da:77:35:
9a:47:f1:c9:a2:2e:c2:67:36:28:8d:99:fc:82:e1:e9:eb:3c:
3c:81:6b:c5:09:e9:29:70:4e:d7:fc:37:b9:12:9e:37:89:b1:
9f:e3:93:e3:c2:c8:67:d9:8a:27:11:e4:4d:49:88:c2:de:39:
fe:19:97:f5:66:27:00:c5:87:f9:68:95:85:dc:b8:ec:3e:27:
b5:d6:88:20:d4:8a:02:dd:5c:c9:55:be:3f:42:21:6a:bf:b5:
17:f3:ca:5e:f7:37:b2:ad:eb:02:cb:5c:19:1d:45:e9:ee:ee:
97:e2:24:c0:2b:78:b9:09:b4:0c:16:c3:9b:63:e9:a7:f2:c8:
66:d1:1f:42:5b:f7:8a:53:63:cc:ff:79:46:99:9b:6d:05:68:
03:28:5a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:15:53 2025 by rpki-client