Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: +wmhZVvpT7AxL3DuuExJPjNtqHgTNEAzB+0YgB6qyEg=
Subject key identifier: C6:78:F5:DD:6E:F9:00:22:9F:31:98:A1:E0:6F:2C:5C:67:F8:D3:B3
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 0194C42C7EBCE528DE9CF7F73F0E629067D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 0D5C
Signing time: Sun 02 Feb 2025 01:00:37 +0000
Manifest this update: Sun 02 Feb 2025 01:00:37 +0000
Manifest next update: Mon 03 Feb 2025 01:00:37 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: N5IbHGoAJKRvavz1DONhZPdIBR7bp3snyWWltt3ZyAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:7e:bc:e5:28:de:9c:f7:f7:3f:0e:62:90:67:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: Feb 2 01:00:37 2025 GMT
Not After : Feb 3 01:00:37 2025 GMT
Subject: CN=c678f5dd6ef900229f3198a1e06f2c5c67f8d3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:dd:88:93:9b:ea:24:c2:7b:c9:60:06:3e:
66:b9:22:00:31:db:7e:47:98:c9:03:e2:5d:9a:71:
6b:65:a7:e0:29:92:68:34:d3:a1:a0:e6:d1:3c:22:
8d:f1:a6:4e:b1:b9:4b:8e:a4:09:9c:04:f3:f2:69:
c6:7a:6f:f5:e2:8d:e9:fc:57:95:43:a2:15:89:10:
86:15:eb:70:d3:78:3b:8d:4e:02:55:28:54:4c:1a:
38:68:f0:74:c8:28:10:c7:6f:17:75:8b:97:44:a6:
95:1c:dc:dd:32:0f:82:5e:9e:c8:d4:64:3a:3b:a0:
2a:57:dc:ad:c7:63:7f:54:0c:fa:87:42:85:80:87:
b4:d5:24:d6:42:66:21:d5:40:82:6d:46:9a:56:0f:
60:54:6d:86:a0:59:fe:a7:3f:d2:eb:06:3a:a3:6f:
2b:e0:d7:92:39:28:35:17:be:0d:5c:6d:00:e6:4e:
b7:6e:c2:08:55:cb:9a:ea:46:05:84:db:31:88:76:
4e:05:61:d2:b0:10:50:bb:f4:22:9a:c6:76:5a:56:
7f:83:f9:fd:01:0b:82:d2:e5:4d:80:ba:7e:11:83:
4e:6f:dc:a5:ca:fb:b7:ef:97:09:01:67:d4:d9:7a:
80:2c:19:83:7d:67:a7:57:81:ff:3c:a3:25:da:67:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:78:F5:DD:6E:F9:00:22:9F:31:98:A1:E0:6F:2C:5C:67:F8:D3:B3
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:31:1c:75:7d:05:11:6d:8c:ad:b5:92:36:c6:f4:32:f8:4a:
ee:c5:be:6f:33:ee:eb:19:6e:0c:e7:9d:cf:c6:d3:20:ce:49:
cb:1d:25:56:43:f1:ec:ea:37:6d:eb:5e:f4:bb:65:4d:c8:c3:
ed:6e:1f:5d:8a:e4:42:77:18:9a:18:71:15:c4:15:5b:16:4d:
27:76:25:9d:09:81:03:bc:2b:13:47:48:78:5f:f7:7a:84:05:
11:55:b6:b0:c6:e3:b0:3f:4c:94:13:87:d6:69:0c:84:d0:4b:
0f:fc:fb:c0:07:ef:66:e0:0b:5d:ee:97:77:58:56:5b:c0:db:
6b:30:94:2a:d6:1c:2e:3a:6b:19:34:c1:ce:5e:49:25:4f:ea:
50:98:91:e1:3a:73:94:cc:86:fc:72:9f:96:8e:bb:5e:03:9c:
a1:68:c8:66:d5:63:b3:f0:0e:71:04:1a:01:77:29:d6:5b:e4:
df:6a:14:31:a9:e4:2c:4c:14:96:86:a6:ab:8d:68:ac:2f:38:
49:5d:f6:6b:e7:f7:3e:1c:ba:c3:1a:41:0a:b8:e3:9e:07:09:
75:d0:92:24:10:d2:dd:00:df:82:47:30:81:6a:72:3a:0b:44:
8c:df:b1:2c:e8:c2:af:fe:d5:a6:31:6d:27:44:47:18:f0:4e:
90:4f:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:22 2025 by rpki-client