Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File: N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier: eLeBi44JoyB/9n01uVg0iNuZrl+gQ8bWc0WmfEb/FvQ=
Subject key identifier: 57:4D:FB:EE:D9:8F:07:A0:E4:01:74:48:E8:81:BA:E7:25:28:D5:34
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer: /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial: 0196A051A6DCC53DD2BB53ACEFFA07C24A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number: 0BCF
Signing time: Mon 05 May 2025 12:00:27 +0000
Manifest this update: Mon 05 May 2025 12:00:27 +0000
Manifest next update: Tue 06 May 2025 12:00:27 +0000
Files and hashes: 1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: 6qzdJ6AIKYywmL3wGh8fbcamNZJo2gihWrLv8Abazww=)
2: cNzBuZews7ZdR62Aog1WuWIa_Vc.roa (hash: QJxazJXAbp+Y08ZTXOoocYGXg/oCHOcrCqlhmHqJgf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:a6:dc:c5:3d:d2:bb:53:ac:ef:fa:07:c2:4a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Validity
Not Before: May 5 12:00:27 2025 GMT
Not After : May 6 12:00:27 2025 GMT
Subject: CN=574dfbeed98f07a0e4017448e881bae72528d534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:f7:6d:85:98:cb:35:7c:35:95:b1:5c:8e:
85:7e:6e:8a:12:9f:a4:1c:a1:ae:69:ff:b5:1e:26:
08:f4:41:bb:48:30:3e:60:d5:f5:6d:61:2d:ff:e4:
09:f0:8a:7a:dc:1d:0e:52:36:6c:ae:72:00:b0:83:
1e:0d:5f:68:b5:72:75:cc:29:f2:00:89:d9:9b:70:
24:8f:79:83:83:d6:76:c9:ff:e3:33:bf:72:1d:77:
78:8f:e0:ae:29:48:94:5c:87:3a:c8:0a:96:3d:e7:
60:a1:12:aa:32:af:e9:cf:5e:00:23:54:d5:9c:67:
18:68:03:b4:bb:3a:a5:df:7d:f0:85:2e:54:de:bc:
2a:a1:6a:de:e0:e4:10:c7:7c:14:dc:ae:58:75:da:
20:0e:bd:b7:d8:9a:1d:2d:a9:db:96:67:ab:22:f4:
64:33:7a:d6:39:9d:cb:98:35:08:64:3d:ac:86:e1:
a8:22:be:6b:a9:56:8b:72:d2:1f:c6:cd:68:26:39:
e9:12:84:db:5d:d8:96:08:e0:4e:c8:cf:ed:f4:a2:
0c:ee:1d:61:c0:2b:fd:b4:9c:59:59:59:40:de:7f:
41:49:70:15:34:52:5e:2c:4d:7b:38:f2:b4:6d:cd:
85:73:dc:02:af:37:1c:a6:af:a2:47:6c:8b:00:8a:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4D:FB:EE:D9:8F:07:A0:E4:01:74:48:E8:81:BA:E7:25:28:D5:34
X509v3 Authority Key Identifier:
keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:24:6c:7e:58:eb:60:0e:37:63:89:26:5c:dd:f4:ea:e3:b5:
b1:4d:fd:e3:12:56:fa:18:de:42:e3:3d:81:0b:d7:c2:4a:27:
fe:c5:c0:bf:40:d3:50:57:4f:ac:d7:eb:c0:2c:49:af:54:d5:
c5:60:ff:f5:e9:57:b6:59:be:dc:80:8d:d0:61:93:5c:67:7d:
a0:9d:29:86:73:0c:dc:10:b2:d2:df:2d:62:29:79:ee:70:35:
e6:3a:2e:bb:e0:b4:0c:bd:bd:4b:e1:27:f9:45:22:6c:8a:eb:
56:64:0c:92:24:84:d4:26:01:d8:66:fd:1b:83:9d:d4:b5:2e:
d7:88:72:82:48:54:e2:9f:73:78:10:63:70:1c:ec:4b:b5:91:
96:83:77:e1:9a:5c:0d:07:8b:98:7a:55:f3:57:67:bd:c7:e1:
4f:ae:a8:85:1c:b5:0f:fc:9d:27:be:35:ca:19:c8:c6:0b:f6:
76:5f:c3:71:35:1b:64:65:52:d7:da:e1:76:9d:d7:7a:30:b1:
ca:4f:fc:46:ca:5f:c7:33:7d:e2:6c:c8:c7:57:1e:c6:f4:97:
e2:1c:d3:64:d6:ba:6a:56:fd:a5:0b:90:de:81:eb:76:cc:0b:
38:52:e9:c6:59:b9:bf:07:6b:ab:5d:65:a1:83:b3:8d:a1:f7:
96:c7:67:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:08:49 2025 by rpki-client