Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
File: NO2iVBz8z2guKd2uYx7cjR57b2A.mft (raw, json)
Hash identifier: N7KtxNpzu+RS7Y+bAXzELfsfiQB+uZ3Od+R+KsjElcU=
Subject key identifier: 15:11:BB:48:47:E8:66:66:77:1E:B7:E4:9A:10:4D:CB:82:A2:74:7A
Authority key identifier: 34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
Certificate issuer: /CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Certificate serial: 0196AA30778E844C1129C3C747CD892BD8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
Manifest number: 05D8
Signing time: Wed 07 May 2025 10:00:25 +0000
Manifest this update: Wed 07 May 2025 10:00:25 +0000
Manifest next update: Thu 08 May 2025 10:00:25 +0000
Files and hashes: 1: NO2iVBz8z2guKd2uYx7cjR57b2A.crl (hash: 1aZFmmWDstJXlZfi71GbLEwT5Bp/95YTe3pMz5kdVG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:77:8e:84:4c:11:29:c3:c7:47:cd:89:2b:d8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Validity
Not Before: May 7 10:00:25 2025 GMT
Not After : May 8 10:00:25 2025 GMT
Subject: CN=1511bb4847e86666771eb7e49a104dcb82a2747a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:af:56:6e:a0:62:8c:e7:6d:52:f6:84:5a:
37:7a:0f:76:4c:d7:d9:29:ef:a2:48:9a:4f:05:fc:
74:a9:38:7c:c4:c4:59:ad:1a:45:a9:70:11:10:8d:
f8:db:a3:22:75:89:cb:81:a3:cc:14:a1:67:87:7f:
d4:c1:79:60:c3:64:e6:c1:1d:a0:ae:bd:db:bb:00:
24:21:6d:fd:db:41:5f:43:8c:4d:da:55:af:b8:e8:
d2:18:db:88:7c:24:f9:2e:27:49:e9:44:84:e8:47:
3e:99:0f:d7:69:5c:bf:ef:7f:bb:3e:fa:22:d5:0c:
27:b9:79:e9:bc:40:b8:7b:74:7a:e6:73:e0:fe:5c:
63:11:d7:b1:94:8c:9d:d8:59:06:cc:b8:02:fd:89:
62:58:c0:8f:a6:1f:36:d2:ad:56:38:ee:02:c3:61:
c6:fc:b0:51:df:88:54:e4:23:e0:85:02:d8:42:5a:
95:1e:6d:97:84:71:76:87:c5:a2:a1:19:e7:4b:5f:
e5:7e:08:67:89:40:0b:bf:cc:83:a3:d1:b2:05:b6:
e8:01:72:f9:ba:8a:de:59:21:e5:d0:0d:78:58:b7:
90:26:8d:cc:d4:4a:0a:13:6b:55:96:a3:c2:71:ae:
fb:35:11:1c:32:ad:c0:df:35:64:7a:f7:7b:b3:02:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:11:BB:48:47:E8:66:66:77:1E:B7:E4:9A:10:4D:CB:82:A2:74:7A
X509v3 Authority Key Identifier:
keyid:34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9a:07:30:37:ae:2b:39:99:f1:11:89:c4:18:04:e3:f3:bd:
94:42:44:cb:12:65:58:ed:b2:35:aa:09:9b:27:b0:9a:57:f6:
21:0e:93:59:88:4e:d3:b0:6f:0a:09:f3:f0:23:55:b8:dc:59:
2d:a6:18:6a:06:98:d6:7f:d9:27:cd:b2:d2:0f:d0:2d:2d:23:
ef:a8:48:52:6f:76:db:a0:ca:f5:c2:f1:ed:d0:ab:8d:28:0a:
65:10:24:b2:49:d0:a5:b2:3a:38:c6:a7:3e:f9:a3:ea:1b:fa:
df:dc:e8:c0:7d:fd:67:4e:9d:76:f9:8a:ca:e6:99:35:3e:07:
d7:d0:d8:94:50:31:a9:1b:60:92:df:33:b0:32:63:e7:eb:17:
d5:ca:07:5b:29:4b:b1:c4:56:2b:2c:ec:b7:25:a7:f4:74:9a:
b8:b8:3e:fb:8c:54:99:2f:52:f7:f1:08:cc:5f:94:d7:8f:cd:
07:47:37:4e:bf:7e:a6:7c:d2:3e:98:33:08:17:8d:a4:d6:10:
f3:9a:47:43:1a:3f:61:73:c9:b6:e4:18:5a:6c:21:b6:c1:77:
3f:40:d6:12:62:06:62:3a:6e:7a:e2:61:2a:c3:e2:be:be:2b:
6d:8c:fd:e1:f1:ae:eb:ca:b8:55:04:2f:55:8b:e6:60:f4:b1:
52:a8:e7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:10:22 2025 by rpki-client