Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
File: NLypT2th4QEA3Dpxhv-j-bAMad0.mft (raw, json)
Hash identifier: lUUCoRyT6omIt0bj57wibyVw9yvB1Ua53nxlx6KCANI=
Subject key identifier: 78:65:3F:9A:8C:5D:91:9D:01:7E:0D:50:59:39:9E:0A:D5:7E:F6:57
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial: 019511D98031597FCD4AAA3799478170842B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
Manifest number: 10E7
Signing time: Mon 17 Feb 2025 03:00:21 +0000
Manifest this update: Mon 17 Feb 2025 03:00:21 +0000
Manifest next update: Tue 18 Feb 2025 03:00:21 +0000
Files and hashes: 1: HIoC707cWv-kl8mp8yIuvONoh0w.roa (hash: EWzRp4vUO24ulN2ZRCrdnUVFpJrZ9XxymUQDpbogTtA=)
2: J2yd4O1iL2KCY7LAQ3uRto73WwQ.roa (hash: FnyzxFKFKQYZ99+AO0ucXUQHZHZrzRIvFySr51HyBug=)
3: NLypT2th4QEA3Dpxhv-j-bAMad0.crl (hash: hFQaZfNkP6++DsJo8kUX0SIKGF7i3nSuTQU4uNy6Jhk=)
4: l_Zl6Bdklv_5gQIP2-GoHw2h630.roa (hash: 758J6t2HjKBISKYrQMpMuTTyf2sp8gnP+Us0wkwf5Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:80:31:59:7f:cd:4a:aa:37:99:47:81:70:84:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Validity
Not Before: Feb 17 03:00:21 2025 GMT
Not After : Feb 18 03:00:21 2025 GMT
Subject: CN=78653f9a8c5d919d017e0d5059399e0ad57ef657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:de:07:0c:03:b8:9c:3c:0a:98:14:5c:42:
61:df:74:74:11:61:8f:01:34:02:36:dc:af:ef:74:
e2:ed:64:54:d6:fe:e1:65:84:a9:bc:1c:28:d9:7f:
36:51:53:24:65:17:6b:7b:97:4d:19:ec:2c:16:d0:
ca:f4:1c:13:99:f5:2d:6a:8d:a9:3d:71:23:2f:2e:
00:6f:9b:93:bf:f9:09:b2:2e:af:df:5e:b4:42:08:
a8:9b:a2:8c:a3:7c:7e:94:16:11:68:a6:0a:ad:d3:
6e:d0:19:c1:13:a6:06:4e:69:1e:bc:2c:05:a7:e0:
d6:99:c1:0d:0a:37:9f:b6:e3:ba:e5:ed:ee:7e:e7:
e6:f3:ce:ab:46:2c:55:c3:bf:20:ef:08:91:88:ba:
02:c8:20:0b:2d:c4:34:7f:ce:d4:43:7a:8f:20:5a:
cd:99:32:e5:75:6a:77:f4:14:67:ed:f4:99:75:53:
97:79:cc:00:57:80:de:f2:3a:2f:08:5a:1b:61:91:
1c:c0:0e:ea:f1:f3:9d:fc:58:a6:32:0a:f8:30:45:
66:7f:dc:07:af:dc:20:ac:6d:4d:f3:e0:e6:72:41:
b7:dc:7a:19:69:9d:e0:40:70:9a:74:7c:d6:10:b4:
4b:47:34:63:2d:fb:74:e7:18:96:13:60:ba:ef:4c:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:65:3F:9A:8C:5D:91:9D:01:7E:0D:50:59:39:9E:0A:D5:7E:F6:57
X509v3 Authority Key Identifier:
keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ba:89:65:b3:69:d0:b5:f6:b8:e1:74:85:89:dd:d5:c3:31:
91:81:d8:6a:79:4f:88:f6:0d:98:a1:2e:da:04:da:53:1f:ca:
50:10:25:50:c1:df:1b:34:05:82:d9:ee:b2:1d:1e:6f:4e:b6:
99:42:8a:3f:eb:47:f1:28:c4:2f:44:90:36:90:25:7f:eb:32:
fd:d0:10:27:a2:f1:c8:c6:a5:0e:76:8d:20:b3:fa:77:c0:11:
fd:7c:d4:53:25:7e:76:ac:85:23:e8:12:02:c8:15:bd:22:ee:
a3:5e:8e:89:5b:94:54:8e:60:b7:3f:ae:94:e5:15:c0:5c:91:
a6:b0:ac:e2:0a:41:04:d5:d1:d9:6d:94:8a:ba:05:33:75:74:
32:37:c1:71:c1:8c:2f:35:40:d3:56:f9:f5:43:0c:77:ce:91:
e7:99:43:46:3e:1a:ae:25:e5:10:0d:84:57:99:0e:a1:b8:20:
5e:f4:53:9a:e5:cc:e0:8b:78:89:d8:f2:e5:dc:af:f9:bc:ca:
19:a3:43:9f:54:d9:4a:25:90:1e:6a:25:fe:bc:b5:10:cd:79:
8e:11:25:23:0d:af:b9:e3:7b:4e:99:7a:30:2c:56:fe:88:07:
e7:dd:80:ce:c5:91:f7:66:2d:e4:a2:c9:a0:8d:d5:bc:2f:57:
13:34:47:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:59 2025 by rpki-client