Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier: j2ZRNHeSVGGjkznpjVTgoG1WkU7IWVSPye3PgT9AOdo=
Subject key identifier: 7A:B6:5C:4C:BC:AF:58:9B:F1:90:A9:15:C6:24:9A:B2:C2:53:23:7D
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial: 0194C388549A45265327FD0B899EB63A68E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number: 0FF1
Signing time: Sat 01 Feb 2025 22:01:19 +0000
Manifest this update: Sat 01 Feb 2025 22:01:19 +0000
Manifest next update: Sun 02 Feb 2025 22:01:19 +0000
Files and hashes: 1: UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa (hash: hiy12f2VyI89A+R22FhEyFKlin2hs0EKoXos1apn778=)
2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: 26vOICOJVrTjtqtu/fS99tVZL53tFge/EnnJHNvhA8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:54:9a:45:26:53:27:fd:0b:89:9e:b6:3a:68:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
Validity
Not Before: Feb 1 22:01:19 2025 GMT
Not After : Feb 2 22:01:19 2025 GMT
Subject: CN=7ab65c4cbcaf589bf190a915c6249ab2c253237d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:ff:c2:85:b0:9f:6d:cd:ad:ef:aa:e2:cb:
8b:7d:ee:11:58:30:eb:54:5c:01:4e:e5:ac:80:7a:
33:12:0a:b0:05:86:2d:23:25:57:66:55:94:df:9e:
1c:c1:88:3f:43:21:e9:52:c0:96:a6:58:9d:c5:04:
64:31:46:d1:43:ba:04:13:01:1e:67:07:bf:3e:ab:
51:e8:bc:94:08:3d:1a:11:4c:1d:ff:6c:25:20:36:
f4:bb:1f:04:6b:24:36:c2:13:17:e4:14:be:5e:3d:
32:e4:83:91:25:56:76:89:de:f7:55:2c:92:cb:88:
3a:ce:8d:e0:dc:cf:2a:26:ea:d0:01:c1:27:ef:76:
2b:d7:3b:9e:ad:8f:f9:a2:b8:4a:e2:66:e3:63:3c:
cf:ae:8a:11:74:12:e0:c0:cf:b3:8d:21:1c:fe:28:
fd:8d:e0:75:6f:8f:d6:75:a5:86:50:89:f5:1e:95:
4a:1e:d3:16:9d:38:99:ad:97:7e:67:3b:10:db:69:
74:33:6e:4b:d6:43:8e:37:8f:0f:fd:33:52:66:c6:
a7:f5:37:aa:00:c5:36:07:3f:42:f2:83:b5:3e:6d:
bb:c4:2c:be:29:c7:af:53:f6:3a:5b:e7:a8:b2:f1:
7b:53:ef:78:2f:f4:54:03:fe:59:e8:aa:90:7c:cc:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B6:5C:4C:BC:AF:58:9B:F1:90:A9:15:C6:24:9A:B2:C2:53:23:7D
X509v3 Authority Key Identifier:
keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:74:4d:3c:0c:d9:49:34:c7:2f:dc:67:a8:fa:19:47:42:59:
2e:ce:e4:cf:00:fa:8a:09:2e:e2:8b:31:ec:ed:24:67:e5:41:
5f:e9:b8:2a:5b:10:2b:92:5e:b7:75:7d:eb:1f:92:bb:88:3e:
6e:13:f3:28:26:c1:1c:d6:20:5a:77:00:13:65:fc:bc:8b:47:
da:29:1b:bb:10:f6:a5:62:37:16:a2:2e:d4:35:a5:99:af:2f:
50:f8:41:bf:30:48:c1:da:d8:89:13:e9:6d:26:d3:1d:21:6a:
18:2c:bd:95:e1:3e:9f:36:b7:3f:bd:07:de:78:9b:06:68:53:
01:f8:1c:2b:95:c8:af:d5:fa:97:9a:0f:9c:37:83:3d:95:61:
a0:2e:f5:10:90:14:25:e6:45:ba:08:75:b6:71:42:ee:0a:f2:
f0:4a:7c:e7:82:c0:fe:cb:71:0c:3b:5e:f4:72:f5:f9:cc:5c:
5b:99:d0:dc:35:ac:7d:e9:12:55:1f:37:00:d1:5a:b8:1f:5d:
9c:8d:4f:61:dd:30:b4:b4:4f:86:15:d4:10:24:77:b0:c3:6e:
76:9f:ee:48:84:ae:f3:1e:c7:15:ac:7a:16:9f:21:f8:c7:07:
2b:c0:0d:ae:58:ae:b6:0f:b1:57:08:a9:7e:bb:f8:e0:a5:27:
c6:cc:6e:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDiFSaRSZTJ/0LiZ62OmjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYmU5YzQzZWU3NTk4OTYwMDM5MTk1MDg3MzQ3MjMzNDZi
ZjcwMTYwHhcNMjUwMjAxMjIwMTE5WhcNMjUwMjAyMjIwMTE5WjAzMTEwLwYDVQQD
Eyg3YWI2NWM0Y2JjYWY1ODliZjE5MGE5MTVjNjI0OWFiMmMyNTMyMzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRX/woWwn23Nre+q4suLfe4RWDDr
VFwBTuWsgHozEgqwBYYtIyVXZlWU354cwYg/QyHpUsCWplidxQRkMUbRQ7oEEwEe
Zwe/PqtR6LyUCD0aEUwd/2wlIDb0ux8EayQ2whMX5BS+Xj0y5IORJVZ2id73VSyS
y4g6zo3g3M8qJurQAcEn73Yr1zuerY/5orhK4mbjYzzProoRdBLgwM+zjSEc/ij9
jeB1b4/WdaWGUIn1HpVKHtMWnTiZrZd+ZzsQ22l0M25L1kOON48P/TNSZsan9Teq
AMU2Bz9C8oO1Pm27xCy+KcevU/Y6W+eosvF7U+94L/RUA/5Z6KqQfMwdzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq2XEy8r1ib8ZCpFcYkmrLCUyN9MB8GA1UdIwQY
MBaAFJy+nEPudZiWADkZUIc0cjNGv3AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgt
MWQxOTg5ZjA2NjE4LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgtMWQxOTg5ZjA2NjE4
LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnRNPAzZ
STTHL9xnqPoZR0JZLs7kzwD6igku4osx7O0kZ+VBX+m4KlsQK5Jet3V96x+Su4g+
bhPzKCbBHNYgWncAE2X8vItH2ikbuxD2pWI3FqIu1DWlma8vUPhBvzBIwdrYiRPp
bSbTHSFqGCy9leE+nza3P70H3nibBmhTAfgcK5XIr9X6l5oPnDeDPZVhoC71EJAU
JeZFugh1tnFC7gry8Ep854LA/stxDDte9HL1+cxcW5nQ3DWsfekSVR83ANFauB9d
nI1PYd0wtLRPhhXUECR3sMNudp/uSISu8x7HFax6Fp8h+McHK8ANrliutg+xVwip
frv44KUnxsxuGA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:47 2025 by rpki-client