Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json)
Hash identifier: rdRRu+k3RKOpu3urXmjHohlvsv+zbjeAlGSPjjE/6xs=
Subject key identifier: 29:60:77:70:EE:B0:26:B9:23:46:B4:09:82:07:1E:51:8F:DC:14:95
Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
Certificate issuer: /CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Certificate serial: 019511A2677609E0E7071774B3831BC3D3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
Manifest number: 0E62
Signing time: Mon 17 Feb 2025 02:00:10 +0000
Manifest this update: Mon 17 Feb 2025 02:00:10 +0000
Manifest next update: Tue 18 Feb 2025 02:00:10 +0000
Files and hashes: 1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: LINy3V8Nn/0LjR74sj6IOKuc4I8KQdTtKOpMt8w4zL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:67:76:09:e0:e7:07:17:74:b3:83:1b:c3:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Validity
Not Before: Feb 17 02:00:10 2025 GMT
Not After : Feb 18 02:00:10 2025 GMT
Subject: CN=29607770eeb026b92346b40982071e518fdc1495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:52:7f:a4:a5:26:b9:33:2a:b3:3e:e0:af:c4:
26:4d:a9:37:b4:04:ed:67:70:23:1c:1d:a8:9c:57:
3b:56:78:19:e8:8a:d3:09:48:89:01:95:c8:af:ee:
2e:8c:4d:86:85:20:8c:1f:cf:12:ef:5f:49:da:90:
0b:ec:e8:4c:97:b9:e3:d5:9b:ea:92:0a:d2:29:36:
e0:06:2e:67:bc:93:cc:6d:1f:76:c3:d4:40:15:3b:
e6:30:24:9c:96:1b:be:34:12:7a:de:64:30:44:20:
82:a2:dc:cd:d8:9c:b7:73:ab:53:58:72:62:e8:f7:
c2:f6:ef:2b:cc:38:7e:2a:a8:b1:31:25:2c:4e:4a:
6e:35:6c:67:3c:49:20:21:b6:23:7c:59:5c:56:a8:
30:58:88:16:90:4f:a1:f5:7a:11:a7:f7:99:66:67:
ef:f1:59:a5:6c:96:5a:44:ca:16:c5:7f:6a:c2:cc:
b8:31:f3:05:3a:ac:11:cc:bb:dc:71:fa:1f:01:e9:
58:dc:8f:e1:a6:6e:64:ec:c0:72:15:f5:63:11:60:
58:8e:34:b8:94:18:e8:e8:da:66:3e:d5:0e:70:21:
3a:6c:06:b5:e7:ba:a2:5a:07:62:d4:f0:d2:7e:00:
18:cb:bf:fb:d0:f3:d4:3f:35:7b:80:3b:fb:5c:09:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:60:77:70:EE:B0:26:B9:23:46:B4:09:82:07:1E:51:8F:DC:14:95
X509v3 Authority Key Identifier:
keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5d:74:8c:df:9c:f1:d6:ac:ac:cc:5b:16:5c:26:1d:10:cc:
db:43:61:f4:35:77:85:16:fb:1f:d7:9f:78:d7:98:94:8e:c7:
6f:19:35:34:cd:6b:28:9d:8d:84:74:20:60:da:5a:f5:a3:83:
f0:2e:57:b0:7e:27:bf:41:fd:e8:29:57:26:6e:93:03:76:b9:
46:12:5c:1a:22:7a:bf:82:38:f2:c9:68:57:dc:e3:6d:3a:20:
7f:00:6f:2d:40:ac:6c:cd:3c:81:11:4f:d9:c7:04:00:7d:8a:
2d:d7:9e:3d:b9:50:48:de:71:1d:eb:97:88:04:42:7c:68:46:
f4:a2:75:15:20:ce:cb:54:1d:75:51:4a:d2:6c:ed:08:49:44:
e6:be:c6:af:ee:13:03:e2:8d:2b:ff:37:34:ef:bb:b2:c4:e5:
f9:b0:8c:36:47:55:f6:23:e4:54:37:3c:5a:37:b4:4c:92:73:
f2:b2:d6:be:5e:2e:b1:d9:33:7b:39:48:19:2f:08:3f:1d:b2:
03:06:1b:76:8c:7b:e0:c8:fe:f1:2b:76:11:b1:9d:36:42:46:
2f:dc:25:0a:b7:14:12:15:7e:2d:cf:a5:35:48:74:5d:68:c3:
8c:02:65:99:0f:04:d5:02:cd:d8:1b:80:f3:41:c1:02:8a:61:
35:bb:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:45 2025 by rpki-client