Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: i4kw2TIQLVw9cJY4ZqvHmx6PPyayoVUmfeEnq8aZF1M=
Subject key identifier: D0:63:CE:52:62:2D:8B:A3:6A:5F:2E:CD:01:4D:69:C7:77:FB:F1:8F
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 0195113566E1796331A50154E18DB64CE709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 04A8
Signing time: Mon 17 Feb 2025 00:01:07 +0000
Manifest this update: Mon 17 Feb 2025 00:01:07 +0000
Manifest next update: Tue 18 Feb 2025 00:01:07 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: yN6YDkn8rQ0ORypysbpJtPMU4hz9cBS6FUmd3rmR5qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:66:e1:79:63:31:a5:01:54:e1:8d:b6:4c:e7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Feb 17 00:01:07 2025 GMT
Not After : Feb 18 00:01:07 2025 GMT
Subject: CN=d063ce52622d8ba36a5f2ecd014d69c777fbf18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:15:e3:53:12:8b:3e:7c:09:55:9d:c7:79:
32:64:5d:27:33:f4:28:e5:09:70:4d:a1:b9:9b:15:
b0:4f:89:fb:cb:3c:b2:6d:33:df:22:4e:aa:d3:aa:
8d:37:78:c0:79:27:dd:f4:87:c6:e2:84:1e:f2:b1:
e6:2d:bf:53:ea:77:c7:bd:db:ec:32:c6:74:52:34:
df:87:e4:6e:ac:f9:9e:87:d6:cd:3f:c6:e0:80:4f:
8a:a6:de:26:b6:31:42:9f:6f:3c:fe:18:43:8b:5d:
c7:e7:98:0d:bb:8c:ed:67:88:21:29:dc:f7:56:41:
46:af:de:4d:aa:0f:4f:e2:28:4d:88:9f:4d:82:c5:
02:ea:db:ec:88:86:be:ff:0e:df:62:3a:54:77:92:
e2:3d:e9:ea:4e:77:3a:47:80:e5:b1:05:3f:39:2f:
f5:d9:7f:0c:f5:0a:f2:18:d4:2f:18:a3:ae:e1:6b:
86:b2:0c:19:4c:75:4e:2c:98:eb:4e:30:0d:cb:a2:
46:73:28:d8:a5:90:f5:7c:a4:c0:b2:3f:98:12:74:
20:c4:cb:b4:21:86:50:8e:64:73:c9:67:39:f8:59:
ea:67:0c:0c:be:5f:77:fe:d7:25:17:4e:6d:b0:50:
bf:21:69:81:61:fb:49:68:b7:e9:6d:a5:54:18:3f:
b7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:63:CE:52:62:2D:8B:A3:6A:5F:2E:CD:01:4D:69:C7:77:FB:F1:8F
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2c:b3:52:80:d8:d5:d3:2b:87:40:8d:a9:c4:9d:fd:73:8f:
04:76:c7:00:55:8b:e0:73:cc:9b:65:af:82:1a:a7:3d:07:18:
28:70:dc:44:af:75:50:55:ef:b1:c3:7d:86:9a:98:51:e9:1a:
1b:b5:7c:b7:55:71:8f:ff:16:a5:0c:ce:55:56:f4:45:2a:63:
76:44:10:2a:3f:ff:09:0e:10:78:42:71:49:8d:1c:d8:de:ff:
d7:d0:86:71:e1:8a:83:8d:4e:bc:d0:8f:fd:50:d7:56:20:d6:
d6:8f:6e:72:69:8b:10:b1:7e:55:3b:1a:b0:57:43:d7:e0:46:
84:86:99:75:f3:08:2d:4e:db:60:fc:e7:cf:3e:02:80:5a:84:
a3:1c:6c:c5:3a:bb:1b:f4:23:55:59:5e:a8:a6:82:ce:38:53:
85:69:9a:be:09:e9:8f:b2:31:bd:28:16:bd:82:4a:42:ef:b4:
f4:a3:60:27:04:7b:2a:00:21:0a:3b:cc:6b:60:7c:e4:6d:3f:
f0:b2:86:16:73:e4:06:f1:d5:fb:2e:c1:a1:b7:96:c9:c0:5f:
a4:45:d9:b1:fc:91:3a:bb:06:03:d2:d3:97:98:55:00:25:04:
20:6c:7f:8e:f4:3d:99:03:36:33:49:fa:81:fc:97:ab:76:f8:
2a:52:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:10 2025 by rpki-client