Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: LmTxYBom+LMfVTk8lNw/TeSFz3PntSys8qR/jVBnm0w=
Subject key identifier: A1:59:E2:0B:B9:14:0B:55:3E:68:CE:F4:92:52:A2:F6:58:93:C6:F2
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 0196B47D4E5F6D0D6E59A31539423FFFCC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 8E
Signing time: Fri 09 May 2025 10:00:33 +0000
Manifest this update: Fri 09 May 2025 10:00:33 +0000
Manifest next update: Sat 10 May 2025 10:00:33 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: bqyWaWlUAsNmsgbKcxnZbPwOxJYoxFTba7Y0804XdTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:4e:5f:6d:0d:6e:59:a3:15:39:42:3f:ff:cc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: May 9 10:00:33 2025 GMT
Not After : May 10 10:00:33 2025 GMT
Subject: CN=a159e20bb9140b553e68cef49252a2f65893c6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:2e:34:34:dc:31:d8:1f:49:b5:bd:d1:cd:
42:70:99:3b:f1:e6:bc:b4:1b:df:e5:a3:63:97:2c:
26:a0:dc:64:5b:cd:6e:5f:42:11:62:4f:e1:0d:2e:
02:d1:cb:b4:42:75:e3:da:27:a5:ea:d4:6c:51:a6:
6e:c1:dc:7a:98:b5:f4:42:63:c9:7a:70:d0:77:b0:
4b:7d:14:b1:ee:2e:b5:c4:c2:c8:56:69:b3:be:61:
be:28:60:f6:e8:2e:58:b8:c8:6f:04:5d:21:47:d0:
db:01:c2:4d:7f:9f:fd:42:97:58:08:f0:51:19:5e:
b7:31:65:dd:9b:e7:8f:10:ba:ba:88:6b:56:d5:62:
2d:88:be:f2:e8:eb:be:3c:14:c3:7e:9d:ec:1a:b4:
92:b7:9d:96:b3:dd:73:fc:04:50:1a:35:23:c0:58:
40:3f:d9:a2:5d:e4:a4:1e:2e:af:40:e1:22:2a:c5:
0f:22:01:cc:89:5a:31:77:e3:6f:d2:e6:b9:87:29:
73:7b:05:b5:bf:7c:8d:da:a2:a3:38:3d:5d:72:e8:
54:d6:ff:af:c9:9d:e8:64:e6:1c:31:07:e7:7d:80:
21:0b:3e:9d:48:7c:0f:83:a1:1e:97:11:36:9f:5e:
ca:86:65:7b:7e:4f:2e:dd:f0:22:67:1a:45:eb:17:
6e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:59:E2:0B:B9:14:0B:55:3E:68:CE:F4:92:52:A2:F6:58:93:C6:F2
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0e:2e:f8:a9:51:a1:f0:19:46:ef:90:df:45:84:a7:e4:3c:
ce:90:ad:81:f8:b1:26:54:0a:33:41:3b:3c:9e:0a:d0:1b:1d:
54:da:72:ac:96:7d:a8:85:84:56:da:af:06:92:e1:bc:34:d3:
2a:6b:c3:0b:31:3c:c7:96:f2:69:3a:69:f9:b4:c0:b2:ac:3e:
19:1d:91:fd:70:61:de:59:e1:f3:f6:e5:22:dc:4a:a8:fa:ff:
f8:45:d4:9b:c9:15:12:cf:35:a5:92:44:82:99:4f:2a:b9:aa:
f5:5f:a4:02:97:13:5a:a1:4a:35:65:e3:f1:2c:7f:dd:92:bf:
60:ee:f2:06:73:53:03:c3:66:3c:6c:38:86:21:6e:56:ee:11:
38:ed:6c:85:7d:96:ce:a3:23:75:d1:83:2c:5f:ce:af:fa:56:
41:3f:0c:cc:00:4a:8f:a2:55:0c:3f:be:df:84:cd:33:76:55:
07:92:20:89:c3:2c:e2:18:d0:73:b8:7d:9a:9c:d9:f3:62:1a:
db:da:09:f0:8f:a6:cf:a1:f4:4e:df:5c:72:8d:00:7f:84:f7:
e1:09:f0:66:ab:52:2c:2f:55:86:61:49:5d:e5:a9:97:cf:08:
fb:33:f3:c9:1c:be:90:01:84:89:d7:08:30:48:7a:01:ce:3b:
a1:e6:d1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:59:01 2025 by rpki-client