Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
File: n0XrWiiMaO1g29m4fk6CBsqckz8.mft (raw, json)
Hash identifier: YOq+ihJ+nGUtBg20F81Wgntwoo0n6DfcCI9qDTloyas=
Subject key identifier: 3F:4B:23:5A:62:A7:19:D4:B3:78:14:5D:92:0E:B5:42:C6:57:9A:7A
Authority key identifier: 9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
Certificate issuer: /CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Certificate serial: 0196D0D119EE1CDF75E184988465FED844A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
Manifest number: 0F18
Signing time: Wed 14 May 2025 22:01:26 +0000
Manifest this update: Wed 14 May 2025 22:01:26 +0000
Manifest next update: Thu 15 May 2025 22:01:26 +0000
Files and hashes: 1: n0XrWiiMaO1g29m4fk6CBsqckz8.crl (hash: DoOZ3NlYg25XXh4Rqqv77HVRnQCNNAP/5m3jHl59D9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:d1:19:ee:1c:df:75:e1:84:98:84:65:fe:d8:44:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Validity
Not Before: May 14 22:01:26 2025 GMT
Not After : May 15 22:01:26 2025 GMT
Subject: CN=3f4b235a62a719d4b378145d920eb542c6579a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:dc:82:15:d6:a2:40:ea:7e:b9:b1:16:07:
20:56:41:35:69:fa:bf:3b:69:df:70:60:6c:b8:9f:
af:cd:95:6b:92:d9:2a:d7:e0:f0:47:65:71:5f:ad:
ad:17:f6:a6:f0:d0:ec:6e:25:45:5d:e4:49:67:54:
5e:24:01:42:eb:9e:b2:0f:e5:c4:31:7e:01:53:00:
ed:5c:49:b5:ee:73:ae:71:4a:80:9d:cb:85:e1:e3:
7e:bc:00:39:0e:6b:69:91:b3:b9:4d:91:5c:ce:91:
b6:ed:53:ba:29:ae:8b:cf:db:1e:77:53:18:b1:0e:
50:90:7c:3a:48:f6:88:f2:ec:00:85:a1:70:87:05:
67:d8:68:24:89:ee:e4:92:62:0c:5b:e3:d3:3f:05:
8a:8e:c4:d0:da:e8:4f:fe:80:40:6e:78:8c:60:47:
bd:e8:33:5a:ce:68:df:53:a5:f9:b2:ee:5a:54:a5:
16:71:ad:6a:be:a3:46:99:8b:ef:50:09:ec:68:50:
b8:1b:25:e0:ab:cc:26:24:f0:99:f3:e0:72:be:46:
b4:c5:10:50:6a:b3:a6:73:6f:1c:7c:3a:ed:05:d2:
36:7a:d6:e5:d5:7d:08:2d:2f:17:62:89:fa:c3:b5:
22:68:1f:9f:65:01:4b:70:12:ec:e5:ed:60:ad:41:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:23:5A:62:A7:19:D4:B3:78:14:5D:92:0E:B5:42:C6:57:9A:7A
X509v3 Authority Key Identifier:
keyid:9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d0:8a:00:ce:ba:c5:5b:61:81:e1:ae:0f:c4:c5:2e:7f:00:
af:b9:6d:de:dd:2d:9e:a0:04:91:8e:4b:89:94:12:3f:40:6c:
71:2f:cf:2f:96:ca:65:7f:6f:14:ba:6e:0f:5d:79:60:07:c3:
9b:1c:b0:fb:35:fb:18:69:b6:04:d0:bb:95:74:17:aa:a2:db:
c4:dd:da:59:30:1a:2f:ea:03:d2:eb:41:0c:3e:8e:8e:ed:6a:
a7:8f:95:c3:c1:1a:16:ab:e4:55:63:fc:99:34:e9:2c:ed:3f:
5a:39:c8:5d:ba:27:9c:aa:ee:21:c6:8d:9d:dc:e4:aa:e8:af:
a4:6a:a4:92:e0:3f:85:e5:9f:c0:c1:bb:27:6c:f8:34:de:4a:
53:0b:df:26:18:36:0b:11:18:b9:8d:57:36:de:39:e0:42:3d:
db:5b:dc:13:f4:a9:5e:a7:14:52:56:2e:11:ae:0d:7c:44:6a:
4e:69:97:d1:ef:d7:1b:08:55:3c:a8:bf:ab:8a:b1:f7:2d:62:
a2:2c:ef:1b:c2:3b:68:6b:6c:df:08:6d:f0:3a:73:bb:70:67:
d5:cd:30:43:04:f8:1e:47:82:f3:49:d1:52:18:59:e9:44:a7:
80:ae:37:1b:40:fe:21:e7:71:33:86:bc:a6:84:39:03:2c:10:
c8:9a:7a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:07:10 2025 by rpki-client