Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier: eYbf6BA52RRQIdEf4K1kJwADOVrr1g8qmavxBsEC0D0=
Subject key identifier: 39:E7:17:F2:BB:F6:96:0F:C3:E4:A4:1F:57:99:6B:D6:5C:8B:E2:BA
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 01951210BC8DA8A3FDD74B3CB63AD6750E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number: 0BCE
Signing time: Mon 17 Feb 2025 04:00:41 +0000
Manifest this update: Mon 17 Feb 2025 04:00:41 +0000
Manifest next update: Tue 18 Feb 2025 04:00:41 +0000
Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: 8n03N+snXQrxYHvDruxpFmzFR0UaSlEInPGPIU8rUxk=)
2: b7DEUQdG2oOvIJtycUpCy6AoF3M.roa (hash: k/+if+oSQ/fgX7WAcYydy6+lHJqvrrCdtod/PYV9DQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:bc:8d:a8:a3:fd:d7:4b:3c:b6:3a:d6:75:0e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Feb 17 04:00:41 2025 GMT
Not After : Feb 18 04:00:41 2025 GMT
Subject: CN=39e717f2bbf6960fc3e4a41f57996bd65c8be2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:7b:45:3e:6d:df:f0:c0:62:3f:bd:fe:f6:
67:74:89:45:31:ef:ed:9c:f6:f1:f0:dc:3b:4a:72:
2e:87:f8:d2:5b:4e:66:4f:f2:a0:3e:9e:79:b1:24:
8a:b5:a0:a9:77:86:1b:14:8c:f5:b0:26:04:d5:d8:
12:7d:c4:d3:b3:b9:d8:e9:93:45:a2:d4:26:21:4a:
e4:55:9a:42:44:9d:27:90:3e:57:09:03:6d:16:78:
3e:1e:fb:ba:bf:10:87:93:7a:d4:b1:3d:b6:7b:ef:
8a:50:bd:c2:36:07:41:f0:6e:33:56:72:f5:37:2b:
f9:ca:97:5d:2c:e9:27:07:e2:db:72:3c:f4:b3:08:
58:88:ec:9e:31:28:8f:01:51:0b:e3:0b:0b:52:80:
ef:65:98:99:83:ea:ef:f0:65:10:06:c4:12:b5:be:
a8:c6:3b:52:ab:67:df:9b:75:00:ae:74:e8:e7:06:
7d:75:5e:d0:67:42:5e:24:a2:04:89:d8:2a:56:42:
2e:50:64:67:9f:60:31:fe:a7:58:50:dc:2e:1b:41:
0c:21:d9:c7:1b:79:60:bc:69:80:3f:80:bb:4b:86:
b5:60:b1:b4:ad:35:34:a4:dd:9b:2c:c9:1e:02:30:
eb:4d:68:38:e4:f4:77:8e:e6:c0:d9:80:48:67:76:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E7:17:F2:BB:F6:96:0F:C3:E4:A4:1F:57:99:6B:D6:5C:8B:E2:BA
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:15:d3:68:d7:41:32:12:21:7a:ec:74:96:60:1d:b7:31:f2:
4b:99:08:37:f9:c6:0d:0f:d7:a8:73:38:f3:b5:68:67:e5:85:
40:1f:69:da:75:75:31:b7:4c:e3:51:b8:04:70:0e:ce:c8:4b:
cc:91:3b:e9:4d:23:eb:e2:e7:79:f9:56:a7:8e:97:cf:d3:bb:
55:4a:1c:49:e7:4a:f8:eb:3f:ca:59:19:3b:1f:3c:a2:b1:58:
8d:46:7e:9d:52:00:94:ef:ca:38:52:27:8c:21:f1:7f:83:12:
6e:06:33:7e:33:2e:2a:10:17:56:cf:84:2d:4f:66:05:5d:c5:
4d:e6:17:94:09:29:a3:e9:9c:19:64:9a:3a:af:de:68:d2:62:
5f:b9:c3:19:d7:9a:2b:a7:05:54:86:1d:df:0c:65:c1:24:28:
a1:09:79:00:ed:72:d3:54:c2:b4:6d:2f:9c:1b:d4:e8:b7:fe:
c5:4b:58:9c:b4:ed:d4:ae:4a:c4:a1:42:6e:8b:67:d3:a3:fb:
d1:9d:2e:5d:03:36:ef:13:7b:31:4a:19:7c:51:59:85:8c:d5:
a2:e0:ed:66:5b:b1:6a:1a:0a:a7:0d:cb:a3:55:9c:10:ba:07:
39:bd:20:98:39:dc:67:6e:b2:97:43:1b:a2:97:ee:35:a4:c3:
44:7d:3c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:01 2025 by rpki-client