Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
File: npzXqbifTgVovUoLbCwRzRfn8OE.mft (raw, json)
Hash identifier: AAJ75va/SaPGenlkb1gUEsGFGpGLVythQ7E9P73LYLY=
Subject key identifier: 27:72:A1:BE:DF:9D:57:23:3C:EF:AA:F1:33:80:20:86:FF:A5:7D:BD
Authority key identifier: 9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
Certificate issuer: /CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Certificate serial: 01969F0803F641406B6545B5D6B1C5BE4B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
Manifest number: 02D6
Signing time: Mon 05 May 2025 06:00:24 +0000
Manifest this update: Mon 05 May 2025 06:00:24 +0000
Manifest next update: Tue 06 May 2025 06:00:24 +0000
Files and hashes: 1: npzXqbifTgVovUoLbCwRzRfn8OE.crl (hash: KtEr5AmZdI+rbEoFRNX2vPqQguZ5xNChECxDzDXt/Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:03:f6:41:40:6b:65:45:b5:d6:b1:c5:be:4b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Validity
Not Before: May 5 06:00:24 2025 GMT
Not After : May 6 06:00:24 2025 GMT
Subject: CN=2772a1bedf9d57233cefaaf133802086ffa57dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d2:7c:ce:c5:fe:88:d8:fc:53:fe:b6:ca:80:
34:7c:74:de:d4:7c:a9:6c:c7:f5:73:27:55:23:ae:
ff:13:7e:0c:b6:32:b0:1d:32:a0:6e:04:b7:a5:37:
42:9b:70:db:a0:de:cf:43:2b:00:0d:ea:5d:b5:68:
36:f7:78:3b:62:d6:16:38:7b:94:c0:3f:f3:5e:4c:
20:d1:64:7d:b4:0a:da:27:f3:1c:2a:2f:8e:a7:e1:
93:06:3f:b1:fd:55:7f:53:79:f9:e6:c4:7a:09:8a:
06:de:c6:16:53:34:59:ad:3c:8f:be:18:40:0c:47:
ce:4c:2c:2d:c7:6f:58:49:ce:9f:78:c3:da:bb:32:
ad:fe:ae:ab:d3:83:84:ff:a4:25:ab:e6:fb:b2:f8:
57:04:ca:9a:1b:b6:a0:34:0c:bc:78:15:d9:01:12:
e7:00:26:07:52:36:be:9d:57:8c:a9:a9:fe:da:32:
72:77:c0:6f:32:6c:b2:b5:fc:af:7b:e4:69:0a:a0:
96:0c:93:a9:01:01:54:b1:b7:10:b5:e8:5f:c7:7a:
ca:cb:6f:65:00:85:20:60:c7:71:49:3f:02:a3:5b:
c5:e8:a8:de:aa:09:53:7d:2d:3d:f4:5b:1b:8e:da:
aa:2a:35:1d:4e:b4:7b:bd:92:2f:55:2c:cd:25:72:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:72:A1:BE:DF:9D:57:23:3C:EF:AA:F1:33:80:20:86:FF:A5:7D:BD
X509v3 Authority Key Identifier:
keyid:9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e2:ba:f4:e2:16:b9:ab:b3:c6:fb:47:a0:79:6f:64:85:93:
e5:79:7c:e7:9b:7d:df:0b:d3:a9:83:fb:a6:e8:6f:6f:1e:53:
c1:2f:a2:ff:93:17:51:7a:d1:43:08:12:8c:d2:4e:14:34:80:
c4:f4:ad:58:46:31:5f:74:fe:13:ff:cf:cb:30:55:bd:9c:a1:
d9:a0:f3:02:6d:b8:a7:d3:7e:89:ba:22:d3:ba:bb:67:09:b1:
f1:f8:7e:93:da:d6:d4:6e:e7:e0:1b:9f:4e:5e:36:4d:98:15:
a8:ab:2f:f6:60:06:56:0f:96:56:aa:6b:6f:f9:b9:08:f3:eb:
6f:06:77:36:d1:16:d9:16:08:69:50:56:b1:07:0b:51:b6:50:
f7:6c:01:ae:0a:c5:6f:22:e1:25:b1:9a:2d:e2:0f:0e:c0:9d:
67:c1:5c:78:90:d5:e9:81:ca:98:28:28:9c:0a:79:16:b0:ac:
2f:77:99:5e:99:1c:23:45:9e:96:4c:ad:41:72:ac:0e:e0:23:
e6:c4:a6:f4:46:a5:41:38:7d:dc:7d:cb:1f:81:f4:70:d8:24:
3f:57:3b:fe:fe:d7:fe:3b:18:3e:4b:ab:ed:5c:dc:77:9b:ae:
2d:80:57:96:c7:59:79:39:f0:20:fa:f5:8b:ee:1d:3c:42:46:
b0:b2:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:17:16 2025 by rpki-client