Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier: bKcRgSaSzBjIM30QrmBii98xQLxlTglo0yZG4z6G0MM=
Subject key identifier: 6F:16:F5:F4:BB:2B:B4:D2:7B:3E:85:2C:05:4A:AD:6D:55:5A:1E:7E
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial: 019511A2D4EE9BBBF0B49A2C644EB6632F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number: 04EF
Signing time: Mon 17 Feb 2025 02:00:38 +0000
Manifest this update: Mon 17 Feb 2025 02:00:38 +0000
Manifest next update: Tue 18 Feb 2025 02:00:38 +0000
Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: mBL2W8OZba4Yf0idpcofzzCAfCPghDLSQUrTW0cOwjE=)
2: jCF0UZxubcg2boAXKn66J2n2ZyE.roa (hash: Jnz70fxzRetWB+WwfJpKB4S2++FXBxK+gp589kR2o6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:d4:ee:9b:bb:f0:b4:9a:2c:64:4e:b6:63:2f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : Feb 18 02:00:38 2025 GMT
Subject: CN=6f16f5f4bb2bb4d27b3e852c054aad6d555a1e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:1a:f8:cf:2a:e0:6b:54:4d:d0:ee:d1:6f:
32:92:80:2c:e7:7b:f2:ae:43:af:4a:7a:2d:9b:5d:
6d:bf:42:19:f2:b5:5c:5c:27:7c:04:38:68:61:3b:
02:a9:68:35:0f:dc:bc:8e:59:af:2a:38:18:a5:15:
e5:fd:be:25:dc:10:28:43:2b:98:74:13:81:28:b4:
67:76:52:d9:54:e2:96:7b:c5:17:be:42:88:3b:99:
7c:1f:1a:fd:b7:8f:04:68:09:95:49:7b:82:2e:af:
16:ca:0c:4a:db:2c:bc:d2:1a:17:a7:87:d5:ba:b6:
e8:ab:55:ca:be:2e:74:06:47:cc:f4:06:f7:93:26:
07:6a:b4:c1:e4:10:b3:3d:8a:6e:8d:59:07:c1:fc:
89:9a:89:6e:22:e8:9f:8d:1c:e8:f0:4f:65:e7:0c:
ba:5e:39:93:57:8a:36:79:02:f6:a3:c4:a2:9c:d8:
43:46:b8:b6:13:4e:45:16:1c:f2:32:d8:c8:12:df:
3d:9c:80:7e:ca:53:2e:ce:ed:8f:ee:d1:f2:92:70:
4e:0a:b8:63:c8:d8:59:eb:27:d4:9f:b8:be:57:d9:
cb:eb:5a:d7:d1:7f:3a:c4:1e:82:69:2f:72:a3:cc:
17:c3:ad:47:18:3f:67:ef:91:10:82:60:76:70:1a:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:16:F5:F4:BB:2B:B4:D2:7B:3E:85:2C:05:4A:AD:6D:55:5A:1E:7E
X509v3 Authority Key Identifier:
keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:26:cc:af:d8:d7:9d:ad:33:cf:63:9d:44:b4:fd:f1:4c:d1:
dd:12:d6:02:0d:cd:96:f3:64:d1:30:68:1f:cc:68:cc:c8:07:
5c:9d:ff:7c:2e:a2:bb:52:e6:9b:cb:c6:e8:bb:32:b1:76:ed:
97:c6:ce:ef:f6:ad:8d:74:0d:f5:e9:4b:27:c9:cd:27:cf:1b:
78:f7:ec:e5:2b:a8:54:6f:66:c3:b9:da:68:e3:ee:d7:01:48:
36:ba:03:10:67:06:f6:d9:af:58:38:d4:b3:02:a0:f9:e5:ee:
2d:d2:58:4e:0e:f7:e6:f8:f4:47:b2:56:49:af:88:0f:0f:03:
2c:47:86:c6:9c:e8:64:f1:f4:13:92:27:75:e5:ea:82:1f:97:
7d:f3:62:cd:ca:c1:33:84:13:54:90:52:39:4a:05:fd:70:e6:
34:0b:9b:94:73:13:20:e2:34:c1:e1:9c:b2:1e:3e:28:ac:ab:
48:66:c4:9a:40:9c:69:61:4a:af:9b:38:01:e2:f2:e1:6f:cd:
7a:22:d6:82:f6:86:52:c0:15:3d:05:bd:90:ca:35:9e:0c:98:
ee:3d:1a:a5:67:96:70:e8:33:ec:83:35:32:0e:a6:9a:a0:79:
df:df:04:22:3c:23:b0:d1:68:d0:6d:f5:7b:48:1d:21:76:d3:
7d:db:55:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:58 2025 by rpki-client