Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
File: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft (raw, json)
Hash identifier: wb3EBkqziVYnXFcunwCzGSuCTlpGHZQK7QpySnwcizs=
Subject key identifier: D8:21:33:11:44:75:6C:1E:8B:39:EF:FB:27:1E:21:77:45:0E:BE:DA
Authority key identifier: 35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
Certificate issuer: /CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Certificate serial: 0195116BE671487B2882D89D80909D6AB5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
Manifest number: 108E
Signing time: Mon 17 Feb 2025 01:00:38 +0000
Manifest this update: Mon 17 Feb 2025 01:00:38 +0000
Manifest next update: Tue 18 Feb 2025 01:00:38 +0000
Files and hashes: 1: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl (hash: FXUjwgBe390GPn9z725Ign29DLNz1UKFu5QNstwW83o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:e6:71:48:7b:28:82:d8:9d:80:90:9d:6a:b5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Validity
Not Before: Feb 17 01:00:38 2025 GMT
Not After : Feb 18 01:00:38 2025 GMT
Subject: CN=d821331144756c1e8b39effb271e2177450ebeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:0e:3d:0c:80:98:6a:2d:f1:b4:b8:7c:f1:
fb:17:72:3a:c2:8d:3b:09:24:28:c5:1b:50:f4:90:
e8:e9:ac:07:b4:cd:10:d9:08:0a:77:96:17:4a:fd:
8b:6a:53:52:a8:87:ee:80:b1:78:d8:a8:7a:d0:a0:
57:90:04:e4:2a:6c:82:db:7e:fa:e0:ef:ad:4b:23:
a2:09:91:70:1d:2a:e9:51:4d:c5:37:f1:05:c5:53:
11:b8:45:bd:06:41:8c:90:d1:40:31:a3:a4:b4:20:
df:3d:37:0d:68:f4:8d:fa:fa:ce:1b:4f:74:11:df:
43:2d:e3:a6:96:9c:81:72:26:0b:72:e7:cc:9c:22:
64:5b:07:ab:a0:76:74:ff:54:aa:00:db:4c:a4:77:
71:71:6f:c3:09:33:8b:73:9f:6f:6c:a1:24:b4:6d:
3e:a9:90:49:75:9a:b2:3e:a0:bb:68:18:4d:3a:cb:
ad:27:f6:f2:ef:e7:ee:90:98:b3:23:59:8b:15:99:
f8:74:8e:18:5d:7d:85:16:8d:28:67:12:51:ea:74:
92:c1:25:48:e8:91:66:6c:13:67:4c:5e:4f:e7:92:
d5:0d:fb:20:b1:7e:06:22:84:38:41:33:50:fd:91:
fa:24:e5:0c:4c:20:3c:fb:94:48:b1:78:1b:8a:16:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:21:33:11:44:75:6C:1E:8B:39:EF:FB:27:1E:21:77:45:0E:BE:DA
X509v3 Authority Key Identifier:
keyid:35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b3:66:dc:56:91:af:e2:40:2b:b3:ed:e1:8b:e0:02:ba:9e:
53:9d:54:bb:e1:78:8c:b6:2d:7c:35:84:c9:a8:b3:c4:df:05:
89:cf:de:75:58:31:75:21:45:6c:95:e4:1d:13:9f:9d:64:92:
c9:d0:55:9f:ae:39:6d:90:4c:8f:00:33:9b:27:ff:c0:99:11:
bd:1f:c3:f4:3c:b7:f6:64:c5:48:40:4f:41:d0:b4:71:df:d2:
d5:ba:ec:d4:43:68:84:7e:fb:b5:97:88:8a:e9:9a:77:b6:65:
1a:d4:2a:cc:76:3b:40:9c:15:a8:d8:29:8f:7c:12:74:3b:09:
d1:db:bb:cc:03:fb:a5:a6:87:33:a5:12:68:8e:4d:f4:ae:ad:
a4:ce:cd:c2:ee:1d:90:57:54:a1:fa:80:3f:f4:78:30:6e:be:
1d:94:a8:82:f4:52:c7:16:3d:d9:6d:6c:3f:bf:45:6c:09:4d:
a6:49:0f:96:d6:30:e5:80:f7:06:a7:6e:3d:eb:be:05:bb:18:
92:ca:0b:18:79:fe:e0:d6:19:b8:2b:51:f3:ac:c9:5e:ac:05:
c5:64:a1:46:4b:5d:83:14:49:25:0e:7a:7f:3f:f3:31:bf:32:
bc:9d:74:e6:24:12:ca:11:26:89:20:51:39:63:79:5d:f0:d2:
12:db:18:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:09 2025 by rpki-client