Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File: Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier: UuxO8oIRO7T6grBwSX/6cI7RSrgA0jK2hfIFze3m66I=
Subject key identifier: CC:59:46:3F:31:D1:F1:7C:EF:0F:C4:E4:17:7D:4A:9B:F6:B6:98:D5
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer: /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial: 0196A8B077661C4CD38DECCFECCA0006C5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number: 1527
Signing time: Wed 07 May 2025 03:00:59 +0000
Manifest this update: Wed 07 May 2025 03:00:59 +0000
Manifest next update: Thu 08 May 2025 03:00:59 +0000
Files and hashes: 1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: gAvoVi4A63YhYdwf4PCIVJJKofOqqfBxlEKh6qhFlzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:77:66:1c:4c:d3:8d:ec:cf:ec:ca:00:06:c5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Validity
Not Before: May 7 03:00:59 2025 GMT
Not After : May 8 03:00:59 2025 GMT
Subject: CN=cc59463f31d1f17cef0fc4e4177d4a9bf6b698d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:23:c5:31:94:2a:54:8c:4a:28:bf:e1:e1:
85:db:8a:10:b9:ba:27:c5:6a:4e:23:0b:ac:6b:99:
0a:ab:a5:d6:f3:7d:43:0c:cd:16:e8:ee:61:22:d6:
c3:91:71:d5:ae:ea:7a:88:ef:6c:d6:cc:11:14:0a:
f4:b6:6a:b6:7f:a5:0a:30:13:77:04:ca:bb:31:dd:
38:19:2a:a6:74:6d:f9:31:a6:2c:ca:73:30:a3:31:
71:be:ba:fc:ee:89:ae:57:f2:d2:82:3a:db:12:91:
fd:ee:bf:72:73:d2:a8:0d:25:6f:74:73:3d:5d:b3:
a7:c8:b2:6a:ba:67:06:0a:5c:06:52:17:ee:e6:1d:
fb:34:71:39:07:87:2f:ac:a5:e7:c7:1d:89:6a:3b:
09:3f:cb:b1:45:81:c9:c5:ca:9b:0e:90:e3:94:f4:
30:dd:78:86:ca:66:46:6b:5c:e5:a3:bc:22:7e:d8:
63:46:68:27:43:a9:3d:5c:3a:d6:f9:f9:4b:ec:0a:
3f:e6:49:a6:27:6e:d6:7c:bd:f4:64:34:52:10:6a:
b4:43:67:be:42:e0:10:d2:d3:40:c5:09:ca:5b:05:
51:3b:f6:ec:e7:23:77:40:23:e3:bb:b8:08:03:1e:
0e:a6:41:6d:1b:cf:c7:88:c8:5a:71:a9:c9:e8:ec:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:59:46:3F:31:D1:F1:7C:EF:0F:C4:E4:17:7D:4A:9B:F6:B6:98:D5
X509v3 Authority Key Identifier:
keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:30:c8:ad:ec:67:de:8f:7f:c1:80:01:87:ff:e7:15:19:e2:
9e:9e:6c:83:d0:e2:e0:43:08:d1:65:94:ed:8e:36:0e:47:91:
30:8e:06:c0:ae:0b:e1:cc:2e:7b:a4:fb:06:6a:42:0b:0c:ca:
a8:3d:2a:3a:6e:87:4d:53:06:3b:72:e5:f7:a6:24:0c:d3:14:
69:06:82:64:e2:19:fd:14:71:ae:f2:08:0f:ea:86:a1:4e:29:
58:0f:bf:c1:37:25:c6:88:44:76:70:57:cb:f1:2b:52:3d:c2:
0d:13:ad:99:b6:6a:a9:1d:e5:f4:b4:fe:a7:9c:89:d2:94:4f:
85:ca:75:44:fd:5d:62:db:f9:44:d9:4f:37:e9:b7:7d:65:18:
87:d1:c9:29:4f:8d:6e:a9:26:50:87:3c:2b:28:7a:0a:2b:ad:
57:77:e3:f6:a6:e2:46:54:02:8a:05:e7:e4:4b:ea:82:11:04:
fc:53:5b:64:f1:9b:6f:5c:8e:b4:44:1d:b6:a0:2a:92:e5:54:
eb:a7:43:cd:5f:4e:26:21:59:98:d2:d9:c0:e4:78:4b:f1:83:
37:f0:6d:8a:1f:07:2f:98:2e:f1:61:c3:7a:9e:8d:50:5b:9f:
51:69:62:21:05:d9:7e:0d:b3:40:e4:4a:f3:6c:e0:2f:cb:bc:
de:4b:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:25:12 2025 by rpki-client