Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier: rJ9Ve15Kpo0VNMU64U1JIDAcglUP0JRx9cA1YWnjPv4=
Subject key identifier: 23:D4:FA:F0:51:2F:FC:FA:60:0B:39:27:23:04:42:B2:45:B3:7E:36
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial: 01951247996CD4095DC8153D7CE15F88FC7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number: 0D55
Signing time: Mon 17 Feb 2025 05:00:36 +0000
Manifest this update: Mon 17 Feb 2025 05:00:36 +0000
Manifest next update: Tue 18 Feb 2025 05:00:36 +0000
Files and hashes: 1: Symg0jAPVS-ti1ruCDzymyj_CR0.roa (hash: GUIXVLB8gdm1fu+e7gBbFfA+4MoEzWz7SkljoSB1b/4=)
2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: V+HJ2MoqhBJDdRfdic/gNifyuNv0CEmSOdqaF+KcWb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:99:6c:d4:09:5d:c8:15:3d:7c:e1:5f:88:fc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Validity
Not Before: Feb 17 05:00:36 2025 GMT
Not After : Feb 18 05:00:36 2025 GMT
Subject: CN=23d4faf0512ffcfa600b3927230442b245b37e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:84:49:28:e6:20:3b:03:c2:4e:f7:96:b0:
82:7c:c2:11:18:df:50:e7:d8:8a:e3:ff:d8:b0:38:
52:fe:20:04:4b:53:89:77:91:02:d7:3b:90:87:a4:
6a:2a:52:d8:96:2b:37:8d:89:0c:8e:71:80:e2:87:
1f:2b:74:cd:48:e2:ed:8a:bc:99:82:60:b0:ad:69:
63:3f:2e:32:10:54:71:16:7b:9e:88:5c:d8:c2:4b:
41:fa:69:fd:6e:8b:e3:d8:b0:f4:7a:18:b5:e7:5b:
8b:42:4c:b4:1d:a7:9a:c4:69:8d:f3:6d:a2:d4:71:
09:d0:8c:2c:80:ba:cb:56:ee:e3:00:93:5c:6b:85:
d0:ba:bb:d6:2f:28:b0:a2:5b:61:7b:05:8a:da:94:
62:41:d3:f3:83:3a:4e:f4:a9:40:0e:fa:70:21:c9:
41:24:00:09:de:70:49:90:87:49:c1:ab:b1:26:ed:
94:46:5a:35:17:9e:19:4e:de:d5:fa:35:72:00:d3:
3e:db:7c:7a:b6:c7:93:4f:f8:6a:1c:73:d8:4b:0e:
54:ff:cc:14:eb:76:c2:c3:ef:60:17:03:f4:e7:d4:
1d:7b:f6:40:54:a1:34:4c:43:d5:1d:6e:46:ea:ab:
93:fc:8c:66:81:3d:30:49:62:38:7a:1f:52:da:c1:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D4:FA:F0:51:2F:FC:FA:60:0B:39:27:23:04:42:B2:45:B3:7E:36
X509v3 Authority Key Identifier:
keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:95:73:64:5a:8c:17:36:db:32:87:0a:d1:7d:52:f1:15:e8:
0f:be:60:36:f1:60:25:8a:03:93:9c:9a:e1:43:19:e3:fd:5e:
48:8c:ab:db:80:02:f6:1e:51:a6:d5:d1:ff:19:62:df:5e:0c:
91:5c:00:1a:65:2e:77:e0:b2:f3:ed:7a:23:e4:c2:f0:ba:d6:
ad:06:cc:fa:3f:c9:c6:36:62:07:91:2c:5c:52:ba:69:56:29:
e6:ba:5b:63:71:08:a0:ad:22:a7:ef:22:10:8c:ac:4d:63:47:
5b:ba:ee:76:c4:9d:50:ee:58:68:50:47:6e:5f:2c:db:0d:1f:
f1:11:3f:07:34:5d:dd:8e:50:6d:08:2e:3d:72:17:df:46:e2:
8d:c6:da:14:b7:83:55:e8:6e:53:8e:02:5a:67:b9:6d:5a:a2:
e4:1f:be:86:75:cb:3f:f6:90:9a:1c:2b:c4:00:f5:46:6e:15:
27:9b:68:b9:2e:90:88:5d:a2:05:0a:02:e2:d2:84:d2:d7:55:
ec:9e:77:f0:40:98:26:48:3d:2b:63:86:80:a9:46:20:8e:7e:
fa:a4:8b:91:2d:47:7b:8d:ee:d5:af:9b:f2:73:6b:c5:d1:0c:
a9:89:c2:8d:54:43:75:2c:d8:cc:cd:12:dc:4b:e0:69:63:c8:
d5:1c:e8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:43 2025 by rpki-client