Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: oTRQ84WxBhlyGVCuNTuQF7i4loeYgwCdSwAaKxnfe+c=
Subject key identifier: 2B:66:FD:C7:67:9A:5F:EA:A1:F9:E8:64:1E:67:C5:2C:88:BE:25:BC
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 01951247A35A67271A61116F187958E09C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 07C9
Signing time: Mon 17 Feb 2025 05:00:39 +0000
Manifest this update: Mon 17 Feb 2025 05:00:39 +0000
Manifest next update: Tue 18 Feb 2025 05:00:39 +0000
Files and hashes: 1: JY_1PGRtW2cwmX0NWILz4PaMA8o.roa (hash: AxD4kbD5rAUUpHE8TMidnBB9N4smWhsO8xiIIFzpjU0=)
2: Vsn3jYRWMir2G2-W8jrydR_iJwk.roa (hash: +JLCfjRT9K7qAkhsFi/9o8pUTPcML+dFZemwYUpHZ7U=)
3: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: nEV/DlOs6n0jHKSejkW3D01fYFVtQbniPQ8N6kaWmuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:a3:5a:67:27:1a:61:11:6f:18:79:58:e0:9c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Feb 17 05:00:39 2025 GMT
Not After : Feb 18 05:00:39 2025 GMT
Subject: CN=2b66fdc7679a5feaa1f9e8641e67c52c88be25bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:14:ff:6e:70:b8:7b:cb:46:64:42:14:32:
a0:a9:a3:f8:ac:f8:14:ab:b3:7a:60:8d:59:f9:32:
50:0f:51:41:87:49:5f:7b:38:fd:19:b7:f6:a0:20:
20:b9:11:2f:c4:fe:c9:78:06:8b:b8:ee:55:0f:19:
c4:fc:ac:b8:0e:28:4e:e7:32:d6:f5:92:4e:5d:ab:
97:2e:11:88:31:aa:8a:65:8a:c2:58:95:47:be:06:
12:03:11:8a:49:ba:e0:46:26:85:63:e3:df:dd:af:
87:24:57:d3:c2:b1:25:c5:54:19:9d:33:e8:a1:0c:
2f:a5:29:a1:44:b7:5e:8d:37:96:56:b1:ab:d2:ce:
59:37:9e:33:ea:31:47:07:bf:eb:4c:b0:e8:5e:c9:
39:ad:e2:f2:33:b5:e7:a5:33:4a:46:81:ff:3f:d6:
7a:91:d5:6d:22:a9:6f:65:97:55:52:7c:48:11:78:
bd:78:8f:dc:aa:d5:d4:fc:5d:c6:84:a3:3b:0b:1b:
95:5b:30:d7:e3:26:d0:30:6f:cd:b5:66:0f:f2:a1:
da:5a:d7:db:77:5a:3c:69:ca:d4:83:f2:2d:73:15:
04:ea:9e:99:84:9c:99:73:20:6e:40:c4:54:04:4c:
2d:d2:d3:55:87:1f:2c:c8:f9:9c:b3:ab:2d:b3:24:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:66:FD:C7:67:9A:5F:EA:A1:F9:E8:64:1E:67:C5:2C:88:BE:25:BC
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:52:06:4f:53:0e:8b:90:06:03:4c:e2:cb:35:90:0b:96:29:
63:fd:b3:2d:3d:e1:f9:e1:97:74:6a:c7:5c:37:16:6f:17:cc:
af:5c:69:8e:93:ae:97:25:df:33:53:60:6c:cb:c8:98:1e:c8:
dd:45:65:67:7b:ef:c6:db:cb:0b:f5:b9:77:49:8d:c2:6c:01:
48:c4:d0:f5:d3:5b:a2:ba:28:9d:a1:6f:4d:33:b1:d2:27:26:
c0:2b:b8:84:1b:06:cf:dd:53:db:f9:f1:d9:de:59:bc:a8:a3:
da:da:23:da:1b:2b:88:1e:f9:5c:0d:70:88:a4:12:d9:ac:66:
49:45:c9:fe:13:41:b4:f4:3b:42:1d:32:04:a2:66:ef:f8:0b:
e2:97:be:5f:cf:43:7d:fd:a5:35:cb:72:85:b1:4d:d9:75:44:
f5:0c:db:45:e2:ed:de:67:96:b6:b0:3a:4f:16:96:f5:d6:dd:
0d:56:d8:28:f8:2a:9b:7f:2c:a9:09:1a:0c:7c:30:bf:e3:d1:
59:d8:fd:15:a7:bc:d7:d2:1e:33:6f:39:a0:09:98:d8:c7:45:
d4:93:f1:3f:0a:54:b2:47:ef:09:d8:c8:51:6b:86:96:ce:85:
5f:cc:57:af:34:1c:fc:a2:0d:03:ba:b7:86:07:cf:da:17:ef:
2d:04:90:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:19 2025 by rpki-client