Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: 0Qqgk8WUYrrvQw17+0llkJsE7wx9VB517PUEsKrBvRg=
Subject key identifier: 62:08:A5:A6:67:16:CB:84:69:1E:5F:CC:06:94:49:F0:E1:73:8F:60
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 019511A2C55BEBCCFA19B3942A862B5F391E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 0840
Signing time: Mon 17 Feb 2025 02:00:34 +0000
Manifest this update: Mon 17 Feb 2025 02:00:34 +0000
Manifest next update: Tue 18 Feb 2025 02:00:34 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: xwuWcCIqvQTXwpLks3/893y+S0++lh/L3hxYNjVdOfk=)
2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:c5:5b:eb:cc:fa:19:b3:94:2a:86:2b:5f:39:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Feb 17 02:00:34 2025 GMT
Not After : Feb 18 02:00:34 2025 GMT
Subject: CN=6208a5a66716cb84691e5fcc069449f0e1738f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:10:a5:64:07:a4:11:7e:e9:49:b7:d0:e8:
12:43:ba:87:20:be:37:4c:6f:e4:50:c8:01:21:b8:
65:7c:1e:60:b4:d1:d3:d9:29:15:c4:33:7d:77:2b:
77:56:70:ef:a4:c1:46:9e:97:d6:0d:e8:bb:de:30:
4a:06:8d:7e:b6:59:9d:22:94:a0:19:5a:5f:a2:c6:
84:99:b0:19:b2:42:7d:f4:31:1b:37:9a:d6:61:b6:
35:25:c9:5f:d7:09:bc:5e:4a:4b:8d:e1:0e:a4:66:
85:ae:61:cc:09:65:b2:14:bd:b3:4e:95:01:e2:96:
44:a0:29:35:7f:0c:86:04:21:be:8f:c2:ab:6f:27:
01:21:e3:18:b0:fb:d4:cd:c2:0b:59:01:69:74:11:
fc:4e:72:65:c6:6e:3d:6b:2a:ed:47:14:73:36:32:
8e:d9:76:b0:fb:97:f6:13:a5:ad:af:96:8c:e4:1f:
f9:b0:5a:d9:fb:12:41:29:e0:af:9b:93:3d:82:5f:
ec:56:13:78:03:01:45:95:1e:d0:f1:69:f8:80:5d:
f1:2a:26:78:1c:ff:8b:fd:82:cf:09:71:9f:e2:12:
05:2c:60:d6:87:32:dc:a1:78:a5:14:28:de:34:99:
8a:cf:23:96:50:e6:0f:40:ef:47:67:bd:05:5a:c1:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:08:A5:A6:67:16:CB:84:69:1E:5F:CC:06:94:49:F0:E1:73:8F:60
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:71:97:33:0c:5f:c4:b8:57:20:d8:22:4b:e3:b7:8e:71:ce:
5d:d6:d4:78:b9:23:58:c5:91:6d:32:24:23:68:be:0c:5c:7f:
c2:0c:b8:6c:23:05:04:6c:c8:ef:1a:b2:ee:a6:99:3f:9e:31:
77:ab:db:88:82:4d:05:c7:c0:0c:bc:f0:7d:96:cd:bf:69:4b:
2a:62:3b:23:3d:21:1e:17:77:23:a9:fe:b0:cc:1f:fe:27:df:
6e:6b:29:fe:36:79:ba:1e:10:ff:1e:bb:62:5c:cc:f1:a2:3b:
db:7e:c6:89:71:06:22:8e:ca:52:19:35:c5:dd:2b:ba:29:0d:
f2:5c:be:a5:6f:78:ff:c5:f8:58:98:be:00:5e:a2:8e:c1:7a:
ab:42:c1:13:16:62:65:59:75:eb:65:9f:e7:a2:43:f9:fb:08:
6f:a6:d5:9c:3c:67:69:53:61:70:fc:0f:93:b1:4e:b4:51:dd:
2c:97:1c:01:07:32:60:87:94:2d:7a:e8:f1:bb:c5:dc:73:87:
e8:d8:34:d7:9b:8f:ed:03:fe:dc:b2:87:9f:c1:8c:67:6d:6c:
32:81:37:aa:44:9e:88:b4:01:3c:14:2b:89:ea:93:ed:d2:11:
87:c1:f0:19:e8:cc:1c:80:ad:1d:b9:5d:bd:77:0f:d3:c3:f5:
19:39:80:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:04 2025 by rpki-client