Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
File: nGCyJ8t1doofV4Vuw1M8loSCYZw.mft (raw, json)
Hash identifier: X+BWZ6isX4dqtQyeVCpxPRuE3ClsJ+m7Cvyoy8KL7K0=
Subject key identifier: 3A:B3:38:07:4D:90:80:B0:4A:56:68:B2:E3:B8:A9:84:54:5C:2E:43
Authority key identifier: 9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C
Certificate issuer: /CN=9c60b227cb75768a1f57856ec3533c968482619c
Certificate serial: 0196B069EC16504E1112DF8CE82F3797CAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
Manifest number: 13DF
Signing time: Thu 08 May 2025 15:00:53 +0000
Manifest this update: Thu 08 May 2025 15:00:53 +0000
Manifest next update: Fri 09 May 2025 15:00:53 +0000
Files and hashes: 1: nGCyJ8t1doofV4Vuw1M8loSCYZw.crl (hash: P7HIMk4erimTUdYIJuE7Vj6dw+Mqvr4npuuez3t9Zvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:69:ec:16:50:4e:11:12:df:8c:e8:2f:37:97:ca:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c60b227cb75768a1f57856ec3533c968482619c
Validity
Not Before: May 8 15:00:53 2025 GMT
Not After : May 9 15:00:53 2025 GMT
Subject: CN=3ab338074d9080b04a5668b2e3b8a984545c2e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:be:31:a0:42:43:8f:e4:13:94:15:cc:d7:
8f:ee:9d:23:ea:b0:b4:09:be:61:62:28:c0:85:de:
88:e4:b8:af:fb:92:09:62:dc:72:03:39:ef:50:d9:
dd:12:83:31:66:6b:90:1a:be:42:17:c3:19:2c:ff:
3d:b3:8d:3f:25:8d:a6:b1:f0:bd:44:87:25:e4:90:
e2:aa:53:97:af:7e:37:5a:84:58:27:34:82:b4:ee:
e1:45:ce:3d:9f:15:25:dd:ee:ec:ae:04:3d:c7:0a:
d9:67:e8:24:86:31:7a:9c:ea:7a:fa:2d:e6:d4:18:
83:a1:aa:e7:63:2f:97:23:29:fd:29:f4:86:39:1f:
26:76:24:2d:76:fd:a0:b8:33:01:7d:a3:ac:5d:66:
82:ed:8c:ab:78:60:f8:a7:0b:e4:b8:0d:f8:9f:3e:
4f:3b:84:87:ad:16:13:65:f0:b0:18:73:bd:ac:26:
dc:a7:fe:42:53:54:d7:9f:f2:d5:cc:89:6e:db:61:
f7:0f:95:61:3a:47:bf:77:3e:b8:6b:c3:8a:b7:7b:
c3:bf:68:a1:e3:f1:e0:12:44:96:99:5a:d9:56:70:
aa:1a:79:f8:60:5f:6c:6f:ae:f8:cd:04:21:ca:4a:
ef:7b:42:61:0a:d4:45:4d:f4:33:0d:83:07:3c:57:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B3:38:07:4D:90:80:B0:4A:56:68:B2:E3:B8:A9:84:54:5C:2E:43
X509v3 Authority Key Identifier:
keyid:9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6c:a1:46:ca:67:07:93:2f:5b:5f:4a:86:f5:97:3f:bf:d2:
b3:cf:68:ed:c9:16:91:c7:e1:bc:aa:44:1c:18:90:ad:8c:39:
be:7e:10:53:fc:c0:e8:b0:aa:09:fa:bd:6a:99:01:47:b5:1b:
a1:92:ee:d3:f7:72:cf:3c:13:24:3d:5f:df:f2:bb:dd:24:b4:
7c:d2:6d:b1:e2:4c:08:64:ae:26:cd:ff:dd:3d:a1:90:07:a9:
6c:48:2c:9c:e4:d4:e9:6f:49:ee:23:2d:0e:54:43:33:6c:52:
65:d7:e3:e5:40:a1:09:e2:eb:12:2e:74:85:0c:eb:a8:cf:15:
03:c7:a7:24:e9:4a:74:02:2c:fa:00:72:4d:5f:57:13:36:d5:
c0:04:a3:9e:15:69:8a:9c:35:47:c9:10:89:32:fb:fe:bb:c2:
01:93:32:0a:42:8c:c3:68:bf:1e:37:6d:70:bd:4f:ee:76:3a:
bc:36:e3:63:35:4e:03:a5:52:60:b3:53:cf:4f:0d:bc:5c:72:
73:85:00:86:34:7b:23:18:6b:b3:02:00:04:33:62:90:c0:27:
02:0b:52:b1:0f:41:df:2b:2a:be:12:d7:b2:b3:b4:19:aa:5d:
8b:83:ed:3b:24:46:d9:cc:05:4d:e1:ce:ef:db:74:e4:63:4c:
83:0b:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:46:41 2025 by rpki-client