Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: BPXYq9HMIEggI9A/oDv4b2SkAYFaProDaGN+So+MDL4=
Subject key identifier: 5E:18:7F:F7:C1:5B:55:45:7F:A2:C5:92:98:A9:06:8E:54:4E:65:53
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 0196C4CBDC6EAC42172886E8023734F0F52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 14:00:16 +0000
Manifest this update: Mon 12 May 2025 14:00:16 +0000
Manifest next update: Tue 13 May 2025 14:00:16 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: TYxB3M30XC42waVVev0fo6i4By7cKFRJIC3M/pvSe/M=)
2: TLZrPYGbv3OSz3l-n9m1uFTtYyY.roa (hash: BAfT0SDdeatk44A0MoM3KqLiELOkYEeVNpqrfHgFPvo=)
3: fTuGHUDbLXIf1K1JGZkDmgp4h30.roa (hash: CE5/seUejdLKBZqDs568ZVcYXPKEXW1OP4zxVz04Gmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cb:dc:6e:ac:42:17:28:86:e8:02:37:34:f0:f5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: May 12 14:00:16 2025 GMT
Not After : May 13 14:00:16 2025 GMT
Subject: CN=5e187ff7c15b55457fa2c59298a9068e544e6553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:c0:fb:b8:39:1f:07:dc:6e:37:eb:4a:8b:
ed:6f:f5:14:72:1b:a7:3b:fc:58:da:8f:3c:9d:a4:
ca:8d:fc:1f:7c:bc:64:60:74:6e:b8:25:a2:1f:9d:
9b:b4:fb:d2:99:d6:68:44:c6:00:29:96:51:90:15:
6a:38:38:5a:95:34:71:cb:9c:76:77:1d:c1:9e:5f:
43:04:84:a3:66:5a:5e:46:70:10:ca:79:0a:cd:d8:
f2:07:e1:fa:ef:c4:5d:ca:a8:8b:24:7f:aa:7c:1f:
1d:4a:5f:aa:b1:0f:ad:9e:18:ab:cc:95:81:b2:40:
c1:73:3c:3e:ab:ee:33:0c:7c:64:a2:3d:8e:14:0c:
04:54:36:bb:8e:83:d5:13:77:20:f3:d4:5c:ce:d5:
72:54:0e:df:39:e9:72:d2:7a:96:92:21:5b:8e:e9:
c8:5e:2a:09:1e:30:71:5e:4d:4a:0f:b3:96:91:8e:
0b:9e:4c:cb:dc:5d:ab:01:ef:6e:99:78:9d:5c:d6:
6d:8a:5a:48:20:bf:27:de:c0:d4:64:99:1d:69:05:
ea:06:5f:b1:61:42:b8:52:9f:e2:8c:dc:60:54:09:
8f:73:bf:41:c6:cf:9d:ce:ec:c2:6c:32:0d:4f:26:
de:31:bf:ae:31:2e:bd:9c:f8:ce:4e:65:f5:9f:b1:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:18:7F:F7:C1:5B:55:45:7F:A2:C5:92:98:A9:06:8E:54:4E:65:53
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6f:6a:b0:45:68:40:00:d4:bd:bd:cc:e6:63:4c:9a:d5:93:
51:87:64:cf:a5:c1:bc:bd:fd:c3:6d:7a:ec:1b:f3:dc:84:83:
5b:71:d4:20:06:58:45:56:83:d6:67:99:fb:51:d5:aa:20:61:
5c:fb:0c:9c:ea:f5:eb:12:b8:1c:fb:cd:38:2b:7d:60:2d:c8:
d7:c5:38:b3:29:f1:c5:e5:66:f2:11:2a:9e:0f:a0:52:f8:ac:
9a:5a:d5:24:6b:5c:cb:bf:14:fd:9d:29:45:cc:96:ff:b7:58:
29:7c:97:6f:9a:2a:f9:cd:35:c2:59:85:d3:91:b6:42:c7:cc:
c0:f6:47:56:11:7c:9d:ad:a8:9c:19:d5:49:26:23:f7:a9:10:
3a:a5:6a:78:a0:63:57:12:56:09:95:84:57:f8:17:21:11:77:
e6:5a:0d:65:86:e6:28:7e:cc:36:e8:de:d3:82:ff:1e:fb:da:
68:45:b9:4c:6e:f0:d4:d3:43:2c:b4:e1:a9:e7:2f:89:a7:df:
06:da:b1:b9:60:93:35:6f:e6:87:8f:13:30:7d:b2:b5:2e:fd:
ff:d2:c6:c9:42:fe:ec:66:3a:42:4d:21:73:a1:a9:9a:57:ca:
05:79:05:36:01:e6:5c:62:31:cc:c4:d6:4d:a9:0c:cc:cc:51:
55:e4:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:44:22 2025 by rpki-client