Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: vBCXY4bf5aUMm2Nig7ew6u+Y7UpNIea7hx3ZcDSoE3c=
Subject key identifier: E7:C9:E8:36:D6:59:04:36:F4:8F:88:15:A3:4D:F5:7C:BE:5B:CA:2D
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 0194C3BE993D36BA0487C08025CB383FB6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 02AE
Signing time: Sat 01 Feb 2025 23:00:35 +0000
Manifest this update: Sat 01 Feb 2025 23:00:35 +0000
Manifest next update: Sun 02 Feb 2025 23:00:35 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: vGu2l6dM2C8gwL5qKgXpS2DaakGjEiyWt844lcTAm2Y=)
2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:99:3d:36:ba:04:87:c0:80:25:cb:38:3f:b6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Feb 1 23:00:35 2025 GMT
Not After : Feb 2 23:00:35 2025 GMT
Subject: CN=e7c9e836d6590436f48f8815a34df57cbe5bca2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:cc:1c:4c:d8:bb:f1:74:38:30:98:a7:4e:
21:a7:a4:8e:97:e5:be:88:04:27:71:5f:57:48:61:
1d:59:48:b8:3e:1b:9d:91:b5:60:85:72:60:5d:8a:
09:97:16:5a:e7:09:c9:cd:35:c3:1a:6a:e1:54:7c:
52:52:7c:19:c8:b2:e0:7f:d4:95:2d:b1:cb:62:32:
b8:f5:80:99:a5:f4:96:30:4c:e4:75:bc:2b:81:81:
c0:c9:d6:57:31:f2:23:f5:f5:d1:0e:02:3a:60:84:
1c:98:c1:2c:7d:6d:81:15:7b:0a:87:27:a2:78:eb:
51:03:e7:bb:09:84:26:e5:9c:3d:a9:dd:c2:2e:6d:
51:0a:22:30:49:7b:20:76:e6:4f:5e:91:f6:d7:70:
1b:1f:dd:42:a0:9a:43:ce:b8:76:d9:e3:79:88:68:
b3:d8:12:c9:0b:90:24:21:86:15:a4:0b:9b:e4:89:
d4:0e:b1:dc:0b:c0:33:6c:2d:b5:d8:fa:97:4b:51:
66:71:e3:7d:29:6e:cb:51:f1:a8:cc:cd:d6:f9:cb:
05:43:ca:57:2c:7c:78:13:7e:67:1b:87:72:ea:2b:
83:db:95:52:45:78:a4:84:01:e3:26:5d:3b:2e:17:
e8:8f:5d:19:94:46:41:67:74:b5:a0:be:63:97:00:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C9:E8:36:D6:59:04:36:F4:8F:88:15:A3:4D:F5:7C:BE:5B:CA:2D
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6b:34:18:4a:f1:b2:88:75:86:4e:43:93:ff:90:fd:98:84:
40:e5:84:4f:c1:d7:49:f0:a8:dc:cc:16:eb:78:17:0b:55:74:
ab:27:e9:a7:20:ee:46:6e:27:f7:c0:39:97:da:5a:26:98:91:
11:df:7b:03:4e:25:30:5b:e7:a4:e6:e8:0e:f7:04:84:e3:44:
cc:6c:c9:5c:58:14:44:f2:da:ac:0b:7a:f5:65:65:53:05:56:
df:af:57:eb:dc:d0:1c:d1:6a:13:16:4c:37:0f:d4:95:dd:8e:
49:4f:8d:e2:e2:89:f7:e6:0d:b1:7c:30:9a:62:5a:94:f2:bf:
d1:64:4e:6d:7b:5b:51:44:d8:85:61:31:0f:e8:03:ac:54:10:
29:47:6e:0c:9a:49:c5:fa:8f:7c:aa:68:ae:e3:76:95:10:f7:
3e:fe:e3:3e:5d:4a:6b:8f:a5:bd:3b:72:4b:13:96:ae:b5:c9:
40:f5:7b:aa:6c:f8:24:8d:99:1f:a5:01:3c:8a:99:e2:f4:32:
82:32:c3:00:d6:d0:69:82:ba:db:ff:df:93:76:cb:92:d3:78:
94:e0:06:a5:4c:73:b4:21:9e:8e:33:63:93:ae:20:e7:36:4f:
06:79:b7:b3:d9:eb:c1:1c:17:15:eb:2c:32:7b:01:34:ba:4d:
32:20:dc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:13 2025 by rpki-client