Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json)
Hash identifier: vaLj+plb0UP6QheY9ty/jCWHgjWMpuN9KS88m2cAPjA=
Subject key identifier: 58:39:04:25:04:4F:48:7E:5A:E6:B5:30:FB:ED:6C:BE:10:1E:81:72
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 0195113565CC04971D3B1C3CB7EFC83ABA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
Manifest number: 145F
Signing time: Mon 17 Feb 2025 00:01:06 +0000
Manifest this update: Mon 17 Feb 2025 00:01:06 +0000
Manifest next update: Tue 18 Feb 2025 00:01:06 +0000
Files and hashes: 1: L3eXX40R-J2MZIIUJdb8enfoeE8.roa (hash: lwjbJYBJSc/rhMWtZdkfBAupkIFWhtQl6cOuFgh+q0M=)
2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: aWNZ1Jvmsyw9P9qKBNcKZSV3IKxuXjmlrdaxux8pzTo=)
3: rzrW1TWZL4bnPJ-nB128HmDlFaY.roa (hash: jgoKQgRuGI4ln2b618FpeT2y9vZl1AD1XL8CqPtrGN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:65:cc:04:97:1d:3b:1c:3c:b7:ef:c8:3a:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Feb 17 00:01:06 2025 GMT
Not After : Feb 18 00:01:06 2025 GMT
Subject: CN=58390425044f487e5ae6b530fbed6cbe101e8172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:7b:7a:3a:35:0b:09:f1:c8:66:c3:6e:4b:
1c:6c:e5:c3:0d:b2:0b:70:1e:27:90:ce:f4:5e:06:
54:45:b5:94:a2:4f:2d:b2:69:e9:a5:17:87:41:7e:
19:db:b1:c0:ed:35:6b:3d:e2:a9:9e:fe:01:82:3d:
bb:a4:cc:1e:76:c6:70:b5:26:80:24:b0:fb:53:7e:
88:e7:46:18:20:3b:3f:f8:fd:f5:63:e0:16:1e:a1:
fe:f4:92:49:17:a1:e7:be:a3:a1:fa:74:68:dc:5e:
b0:55:f8:ef:13:3c:ea:7c:12:39:62:ca:da:f1:84:
ab:65:94:3f:c2:a3:43:22:d2:fe:7e:52:e0:17:b8:
f0:14:62:88:72:44:e8:48:ca:5a:8a:a2:2d:af:a7:
46:fa:1b:2f:08:a2:d3:42:bd:e9:7b:be:30:04:69:
f6:ac:70:3c:43:c9:06:96:6f:ff:80:2b:62:3a:82:
af:96:96:0d:29:95:d2:4e:4d:4f:c9:22:94:4a:4d:
c7:29:7e:ab:d4:96:b6:d4:9a:1c:0c:2a:d0:31:40:
ef:d8:a1:c6:ca:fb:c8:0f:86:1b:20:4b:9a:56:b3:
9a:6c:0e:25:ab:71:30:71:ee:c0:da:28:3e:22:67:
8e:55:9a:ce:14:8f:ac:dc:86:9e:99:d5:38:ed:0d:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:39:04:25:04:4F:48:7E:5A:E6:B5:30:FB:ED:6C:BE:10:1E:81:72
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6b:b7:61:80:b4:b8:ab:b4:ee:b1:8e:99:67:f7:d8:52:69:
a7:d8:df:96:fa:a9:ad:f8:e9:99:5e:66:9c:75:2a:3c:51:4f:
8b:fb:e7:15:a6:37:e0:6b:81:04:36:41:0c:e4:7e:ce:06:74:
0f:86:7f:77:38:4e:64:59:dc:b1:82:c4:50:0a:3c:9d:e6:a0:
2f:6d:84:ad:88:16:40:68:d8:9c:0d:ae:e1:00:24:9b:da:e9:
b3:1f:b8:93:59:25:c4:29:6c:97:19:2e:5a:7d:44:78:da:97:
8a:0a:79:b7:83:ab:98:4f:09:c9:2c:21:a4:f2:f3:21:fa:0f:
e5:ef:d6:3d:fe:6a:f5:77:45:06:fe:23:de:15:14:ac:57:5f:
bb:19:36:e2:73:36:20:44:23:d4:ed:dc:d2:ca:16:36:49:da:
21:70:56:d7:1b:80:15:86:9f:b6:28:6d:db:42:91:8e:41:b2:
39:af:b0:b4:06:17:30:18:8d:1f:d2:16:f3:bb:2b:6b:5e:b8:
e3:10:4f:bd:ab:56:4d:4f:79:68:fd:23:7e:52:48:43:70:0f:
b5:5c:bc:c9:6f:c4:88:6a:56:c9:dd:19:dc:92:52:1b:bc:0b:
53:75:49:b7:03:f2:b8:8c:b6:d2:bc:c9:67:78:8d:af:19:ac:
e7:49:59:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:03 2025 by rpki-client