Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: 84C4mjtMprC+H1XXPd9M9Vp9lxHVG9ZS9zQ95c8yyC8=
Subject key identifier: BA:A2:6A:EF:01:6D:08:B7:3D:D6:23:23:C9:5B:57:D4:5A:33:9B:70
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 019511353FA50E752045865BBD35DEE20A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 074F
Signing time: Mon 17 Feb 2025 00:00:57 +0000
Manifest this update: Mon 17 Feb 2025 00:00:57 +0000
Manifest next update: Tue 18 Feb 2025 00:00:57 +0000
Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: P4p+V17J3aPe3J5TmJ2AzFJ4HgHisHPmv2gQrvKsYGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:3f:a5:0e:75:20:45:86:5b:bd:35:de:e2:0a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Feb 17 00:00:57 2025 GMT
Not After : Feb 18 00:00:57 2025 GMT
Subject: CN=baa26aef016d08b73dd62323c95b57d45a339b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:c3:2c:c0:d2:13:d1:4b:e3:e2:b3:ea:16:
3b:88:95:30:ee:cf:38:cd:e8:0e:5d:4e:ed:98:cb:
1a:0c:b5:45:d0:50:cd:79:b0:5d:72:c5:9e:33:b4:
f2:c5:33:ea:b2:6b:60:f1:8a:17:d5:64:52:63:3b:
61:38:42:76:da:d9:fc:e7:13:7f:8f:d0:98:92:af:
6b:61:e9:9a:fe:50:1f:0b:84:a2:f7:0b:ad:99:9c:
53:1d:bb:b4:ae:19:81:fe:85:78:00:81:11:b1:0f:
e1:4a:01:aa:85:45:c4:77:16:ca:91:87:17:48:8d:
af:08:99:82:f9:0d:d2:cc:32:90:72:f2:cd:cb:9c:
3d:bd:27:3b:b3:6e:2b:01:6d:87:59:8d:a2:29:a4:
6a:18:88:29:24:36:fb:f9:6d:9d:4b:da:ac:6a:20:
7c:9a:d5:9b:5d:80:26:23:a6:52:03:8b:75:04:13:
6c:a9:04:7c:ae:0c:73:9d:6c:32:46:16:ce:8c:f1:
da:ce:c4:38:83:59:4c:31:bf:8f:95:6c:3a:95:2a:
73:bb:32:bd:c6:7c:a1:a5:c4:ff:aa:a6:3b:4b:97:
72:09:0c:28:b1:f0:61:ac:dd:a6:cf:74:a4:41:b5:
ff:7a:c4:a0:7d:c6:ee:ff:73:73:54:62:ce:35:e0:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A2:6A:EF:01:6D:08:B7:3D:D6:23:23:C9:5B:57:D4:5A:33:9B:70
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5c:a4:a5:8f:4d:81:fb:71:42:b9:a3:c9:ea:eb:a7:50:cd:
c6:75:3c:ad:1c:af:98:3e:d5:71:6e:9c:9e:19:14:58:3b:7a:
2e:3d:0c:ea:85:5b:5e:e5:2c:42:b0:17:c5:c2:5e:ab:4c:f6:
5e:6e:32:d1:57:32:72:70:5d:71:02:d0:e0:d4:a6:3e:7a:fd:
33:f0:11:fc:ac:94:99:fa:39:03:91:3d:11:1d:87:03:41:37:
a8:05:f5:d0:9f:d1:83:8f:51:d0:9c:fd:64:6c:26:4c:26:d5:
e0:f9:84:98:90:a2:7d:e6:83:2e:61:64:80:30:e3:cf:cb:32:
e8:e1:db:79:96:d2:b0:3c:2e:04:a0:b5:b5:15:19:72:8e:69:
f1:b4:41:3a:c3:94:18:01:34:15:f0:dc:53:23:57:58:9e:36:
21:b9:4d:96:a0:ae:f9:b0:01:04:c6:e0:79:dd:03:3c:5e:c4:
8e:32:eb:39:c8:29:d3:87:52:1f:d6:34:8c:57:6f:f7:ac:62:
2e:e5:52:7f:51:c9:5d:49:2b:f6:21:65:41:a7:13:12:d3:bc:
33:2e:94:1e:df:9f:1e:39:8c:18:37:39:0a:e6:78:2e:d5:e5:
f5:1f:f8:55:31:63:dd:1f:3c:cf:10:52:20:b8:4c:ff:de:1d:
c2:59:71:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:40 2025 by rpki-client