Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: tquhzrdlz9J8BkxtHXf2DvBkJkfc6GSlOk78GW1v6cg=
Subject key identifier: 2A:B6:9C:A8:C8:08:31:75:DD:79:01:94:1D:DC:94:77:F5:4E:A6:4F
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 0195116BE40EDCF792DF30B2B9BF4CDE0779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 0C8A
Signing time: Mon 17 Feb 2025 01:00:38 +0000
Manifest this update: Mon 17 Feb 2025 01:00:38 +0000
Manifest next update: Tue 18 Feb 2025 01:00:38 +0000
Files and hashes: 1: 1wC6QLmrFyKOInRDcmow-XqW0-M.roa (hash: Ps6eQ5zeLE+JiNNmSXdT1CgRZlmqpZpw99jqTkN18/0=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: nRBPoegJGHlIuz3Sy2FJ60JK9nkXo5+at0fwLTHo01w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:e4:0e:dc:f7:92:df:30:b2:b9:bf:4c:de:07:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Feb 17 01:00:38 2025 GMT
Not After : Feb 18 01:00:38 2025 GMT
Subject: CN=2ab69ca8c8083175dd7901941ddc9477f54ea64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:8d:7b:84:a8:22:3d:36:8a:de:56:66:e0:
62:0d:74:97:64:09:4a:f5:3a:f7:f9:75:84:d9:02:
ce:09:55:a3:9c:36:67:89:0a:a0:d5:86:63:b5:c5:
61:a4:59:0e:03:05:7f:f9:9e:70:f2:e3:fb:89:3f:
47:cd:5e:c1:d2:c7:fb:62:de:2c:33:95:c4:a5:fb:
fb:0e:d3:e0:cd:88:5c:f4:e5:39:29:90:75:12:ec:
22:0d:89:89:89:31:ed:9c:09:5e:19:54:96:70:68:
80:96:92:74:d4:9b:d7:4c:82:48:17:c6:68:26:55:
2b:e9:b8:a0:16:82:7b:c8:cf:56:cb:cf:16:27:95:
93:40:a1:ab:a8:7c:e5:1e:3f:c8:04:43:7b:4f:e6:
65:73:47:46:91:28:e7:0a:7f:13:83:f7:e8:99:8a:
bd:2a:21:af:f2:22:41:0f:4c:0d:05:e9:a4:4c:79:
68:7d:77:4c:12:2c:04:a4:e0:bd:59:66:88:db:db:
24:be:8b:9c:9d:a5:4c:da:6d:6b:e7:bd:18:52:92:
7b:7e:9e:27:59:4c:4b:01:87:4e:4b:35:36:40:c6:
d7:a9:09:a6:78:6c:15:93:3d:ad:8b:39:8a:56:6c:
10:f3:75:b0:e8:46:0c:1b:67:fa:36:8e:cb:6d:2b:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B6:9C:A8:C8:08:31:75:DD:79:01:94:1D:DC:94:77:F5:4E:A6:4F
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f1:b0:61:92:f4:a6:29:4f:71:41:1b:2e:fa:48:ae:79:c4:
55:8e:59:e7:d8:49:b4:c0:ad:ca:0d:54:92:a6:7f:69:e8:22:
e2:d4:74:d3:1b:34:dd:f9:5a:7d:85:3f:dd:7c:9e:20:b6:c4:
ce:29:94:6e:84:95:81:3f:ca:66:3b:cf:f3:fa:62:b1:0a:13:
ff:5c:ab:c7:8f:72:70:92:21:9c:dd:bd:ef:a7:82:ec:47:1a:
6a:60:31:1b:9a:6e:b6:0b:94:d2:6e:43:b4:65:ca:1c:af:b8:
60:8d:09:39:66:04:7e:5b:c7:8c:c6:4a:2a:aa:2b:ad:87:be:
fd:47:45:00:63:97:a1:cb:e6:49:fb:33:62:ea:c3:d4:fc:6c:
5b:61:ce:10:ea:fc:e8:f5:b8:27:65:dc:14:3f:d3:51:38:08:
6c:ea:73:a2:57:02:b9:e0:68:52:11:f2:92:39:01:8c:f0:d5:
c4:2b:50:98:fa:8c:e7:cf:5a:87:9c:83:94:84:41:1e:a6:55:
16:a1:f6:36:1b:46:d1:58:ef:ee:60:d4:89:26:22:aa:17:67:
da:c6:3e:2e:76:a7:95:8d:df:f7:c7:8a:03:e1:a4:0b:81:02:
d1:11:85:ca:05:e0:dd:a9:e5:27:62:37:5d:8a:d8:07:a6:c0:
a5:fe:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:40 2025 by rpki-client