Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
File: N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft (raw, json)
Hash identifier: i//kscDRXns2gURq1kKCcCiycW4c6MStYnP+2IdrHBI=
Subject key identifier: 0D:B7:13:81:FA:4E:57:B0:92:1D:12:85:B3:E4:9A:C3:9B:13:CD:A3
Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
Certificate issuer: /CN=377c264d388333d342372931aa0d192b0fba62c1
Certificate serial: 0196C201FECB1303C46BF23F15E602C49A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 01:00:32 +0000
Manifest this update: Mon 12 May 2025 01:00:32 +0000
Manifest next update: Tue 13 May 2025 01:00:32 +0000
Files and hashes: 1: N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl (hash: ggIiOA5TWZnIaKLvM4l+ptXUg5dffCfJWeILuFoFdH4=)
2: kDvrCZDJUN6ltTbVicwTRbgkORo.roa (hash: ZU7fz2rjwPLJnVqFmW3M/TsgnCWukDOaodixRDMDm4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:01:fe:cb:13:03:c4:6b:f2:3f:15:e6:02:c4:9a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1
Validity
Not Before: May 12 01:00:32 2025 GMT
Not After : May 13 01:00:32 2025 GMT
Subject: CN=0db71381fa4e57b0921d1285b3e49ac39b13cda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5f:04:56:b9:af:aa:d7:b7:f6:53:26:4e:18:
b3:b1:9b:af:b1:84:d6:64:de:b0:e8:8d:df:03:b2:
5d:c4:ac:14:8b:7b:c7:af:16:2f:df:f1:a8:ba:44:
fa:42:8b:f6:eb:a8:6b:db:88:2b:65:02:84:ae:da:
7a:a0:bb:c8:db:dc:d0:17:35:de:5c:d6:df:f6:9a:
3e:e1:f3:72:1c:26:95:06:31:3e:2b:cd:00:0f:23:
f6:2c:fa:87:9c:ab:a6:d7:d5:ad:88:6c:c4:80:41:
5f:5c:f2:b4:2e:48:08:df:86:dd:05:70:3a:c1:4a:
9c:b3:78:14:1d:2e:cd:f9:b4:2d:92:11:71:00:75:
2d:8e:08:92:c8:3c:09:ce:91:73:2d:01:5b:3c:3b:
00:86:13:33:fa:b5:7f:fd:f9:56:14:aa:77:6f:68:
f4:b5:0b:d4:fa:d9:13:fa:68:f1:95:22:2d:17:51:
35:37:b0:1f:22:74:5b:9b:f0:4a:cf:59:f4:44:f0:
45:4d:ad:62:1d:12:74:92:a6:f2:da:04:9a:e4:ea:
00:63:7d:bd:e4:c1:4e:44:2a:67:2e:c9:c2:5a:e9:
c9:ea:f2:d7:82:bc:86:ed:03:29:d6:dc:92:89:e8:
9d:7e:00:31:97:db:92:42:3b:5a:bd:92:a5:ce:76:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B7:13:81:FA:4E:57:B0:92:1D:12:85:B3:E4:9A:C3:9B:13:CD:A3
X509v3 Authority Key Identifier:
keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9f:5e:45:ae:04:63:9c:fd:bb:7a:19:d2:51:db:78:c9:c5:
76:83:2d:e0:74:90:c8:93:ca:b2:73:36:2f:dc:22:07:a7:44:
f0:15:15:1f:51:67:87:58:40:37:1e:da:db:88:99:d0:49:d1:
1f:36:61:7d:a1:b5:e2:ea:5f:c0:f3:8c:d9:7e:ad:84:75:c9:
d9:3f:ae:97:62:6a:40:ae:df:2a:c9:7d:7c:07:61:df:14:7f:
9e:ae:68:a1:fd:c0:91:13:96:a7:fc:05:78:46:1b:80:7d:51:
3d:21:f9:29:95:12:c6:64:b3:bd:6f:d4:e5:73:fd:87:fa:bf:
5a:1d:c3:b2:ae:53:f2:3e:23:ed:73:b7:b1:1d:bc:92:43:6f:
8d:83:ea:fe:25:45:c2:1a:2e:3f:c4:60:30:29:e7:b0:8e:49:
45:67:b7:db:7e:d6:3f:f8:47:d9:1b:ae:92:44:1d:dc:0d:3f:
be:c7:86:d5:79:70:c5:d1:86:07:a4:b2:a8:ed:c1:f5:f2:56:
72:f6:b0:58:62:1f:cc:69:00:7e:8c:a6:94:fe:b1:89:86:83:
64:6e:0d:10:da:06:4d:b8:bb:73:74:15:8f:ee:ef:5b:88:e0:
02:c4:64:dd:81:c5:5b:bf:95:5b:db:68:d2:e4:37:54:c7:a5:
cd:29:2a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:32:10 2025 by rpki-client