Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: JKFfcUgdcsjryIArnBe1Xk9bzpfyKX/8fVf3F92ezsM=
Subject key identifier: 80:C7:43:5A:CA:98:C7:D4:4A:9B:30:DD:BF:DA:CC:5F:F7:D0:09:1A
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 019512106AB3B5F397563FF1013F40689428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 0EA1
Signing time: Mon 17 Feb 2025 04:00:20 +0000
Manifest this update: Mon 17 Feb 2025 04:00:20 +0000
Manifest next update: Tue 18 Feb 2025 04:00:20 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: hxVSrFB0SqbHMuBgcLwO34G3jblfi+D40r84/hmg0wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:6a:b3:b5:f3:97:56:3f:f1:01:3f:40:68:94:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: Feb 17 04:00:20 2025 GMT
Not After : Feb 18 04:00:20 2025 GMT
Subject: CN=80c7435aca98c7d44a9b30ddbfdacc5ff7d0091a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:61:25:6f:58:48:d9:be:e0:f8:11:da:01:
64:20:d5:53:01:a3:9f:6d:61:17:f2:bf:af:d4:49:
a4:30:13:d8:96:29:a9:77:4e:df:34:55:b9:a3:21:
c3:01:48:fe:84:73:67:10:d9:7f:a6:77:57:e0:67:
ae:e9:65:29:23:cc:df:72:ba:82:51:cc:c7:b6:1f:
0d:1d:e6:88:1e:e4:11:c4:80:2d:8d:ed:d2:48:ac:
bc:9b:5a:74:35:6c:de:f2:c8:f8:11:30:be:a7:44:
25:71:52:99:5b:46:28:0d:46:77:2d:1e:10:12:f2:
39:d8:40:a3:ac:bc:32:f4:a4:17:62:cc:e9:e5:2c:
e5:ed:04:d3:81:ba:e2:14:90:d6:e3:56:d0:e9:d5:
55:7a:14:44:d7:ed:8a:0d:eb:04:39:b5:5a:86:c1:
52:3e:c1:d2:ac:21:eb:b0:4e:44:8e:48:a4:5f:e1:
fc:f7:b1:8e:b8:91:c7:ab:0a:2f:be:96:5a:cc:21:
c3:a8:ac:3c:b2:87:fc:78:3f:9b:db:7b:ef:94:fa:
de:33:92:d1:a2:06:e5:29:86:2d:de:dc:4a:44:83:
09:c6:21:f6:3a:20:26:e7:39:ad:7d:17:c4:53:19:
c8:0a:43:59:ba:c9:ac:dd:76:e5:5d:0f:9a:09:e9:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C7:43:5A:CA:98:C7:D4:4A:9B:30:DD:BF:DA:CC:5F:F7:D0:09:1A
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1f:a3:90:7f:1a:49:69:5c:23:97:a0:84:41:2f:86:e0:d1:
4a:aa:89:da:47:63:bf:73:49:79:a9:08:34:58:80:51:d1:c0:
c4:f2:98:ce:f1:3d:ab:6e:03:12:3c:6d:ed:94:f9:44:0c:4c:
95:7c:67:97:b2:5e:bd:6f:73:f9:1c:61:f0:f4:7b:cf:2b:99:
21:f3:9c:5f:96:33:24:9d:78:b0:f3:50:04:e8:86:07:46:62:
62:d2:64:aa:fb:7e:d5:ec:df:06:0e:4c:98:05:69:b0:84:24:
97:8d:7d:24:26:cc:7a:64:91:ca:e7:4a:d3:cc:81:cf:04:d3:
82:13:81:da:70:26:cd:39:11:13:a0:a3:49:e2:14:34:d8:97:
2b:d9:51:05:fd:a6:8b:58:bb:bd:94:16:0e:f8:54:30:b5:0b:
76:86:f5:18:d8:6a:e8:81:45:4b:b0:c7:ef:17:5e:23:cc:48:
d4:99:72:ca:e3:08:a3:fd:03:ff:50:ac:78:3f:fc:1b:15:b4:
12:57:df:43:4f:61:be:a0:0d:61:fd:45:55:59:01:71:5c:45:
74:7e:2f:11:44:ed:69:27:2e:55:c8:ee:af:e8:37:cf:26:d2:
df:b0:d5:25:e2:2a:ae:76:c9:3f:52:05:25:80:f6:56:25:99:
5b:44:d9:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEGqztfOXVj/xAT9AaJQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllM2U0YTMyZTA2YTE4NzIzNGUwMTc3ZjJjYmEwNTU2NGNk
MWZiNTAwHhcNMjUwMjE3MDQwMDIwWhcNMjUwMjE4MDQwMDIwWjAzMTEwLwYDVQQD
Eyg4MGM3NDM1YWNhOThjN2Q0NGE5YjMwZGRiZmRhY2M1ZmY3ZDAwOTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuBhJW9YSNm+4PgR2gFkINVTAaOf
bWEX8r+v1EmkMBPYlimpd07fNFW5oyHDAUj+hHNnENl/pndX4Geu6WUpI8zfcrqC
UczHth8NHeaIHuQRxIAtje3SSKy8m1p0NWze8sj4ETC+p0QlcVKZW0YoDUZ3LR4Q
EvI52ECjrLwy9KQXYszp5Szl7QTTgbriFJDW41bQ6dVVehRE1+2KDesEObVahsFS
PsHSrCHrsE5EjkikX+H897GOuJHHqwovvpZazCHDqKw8sof8eD+b23vvlPreM5LR
ogblKYYt3txKRIMJxiH2OiAm5zmtfRfEUxnICkNZusms3XblXQ+aCekRLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDHQ1rKmMfUSpsw3b/azF/30AkaMB8GA1UdIwQY
MBaAFJ4+SjLgahhyNOAXfyy6BVZM0ftQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYzM4ZmItMmNjNi00NTUxLTliZjMt
OGM3OTNjMDYyYTQ5LzEvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zYzM4ZmItMmNjNi00NTUxLTliZjMtOGM3OTNjMDYyYTQ5
LzEvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmx+jkH8a
SWlcI5eghEEvhuDRSqqJ2kdjv3NJeakINFiAUdHAxPKYzvE9q24DEjxt7ZT5RAxM
lXxnl7JevW9z+Rxh8PR7zyuZIfOcX5YzJJ14sPNQBOiGB0ZiYtJkqvt+1ezfBg5M
mAVpsIQkl419JCbMemSRyudK08yBzwTTghOB2nAmzTkRE6CjSeIUNNiXK9lRBf2m
i1i7vZQWDvhUMLULdob1GNhq6IFFS7DH7xdeI8xI1JlyyuMIo/0D/1CseD/8GxW0
ElffQ09hvqANYf1FVVkBcVxFdH4vEUTtaScuVcjur+g3zybS37DVJeIqrnbJP1IF
JYD2ViWZW0TZvw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:21 2025 by rpki-client