Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
File: NwLYaw5xBmjqZtp9zRsUDeweDD0.mft (raw, json)
Hash identifier: PbgYJU8+n/fOOExrzLDHjULAaRvMPdw4ol5JnD2NaIA=
Subject key identifier: CD:25:F2:16:B7:80:F2:5C:37:3F:B3:36:B1:1C:E7:B7:A6:94:7D:91
Authority key identifier: 37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
Certificate issuer: /CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Certificate serial: 019511D98937CB1985981A9D540F27139450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
Manifest number: 1159
Signing time: Mon 17 Feb 2025 03:00:23 +0000
Manifest this update: Mon 17 Feb 2025 03:00:23 +0000
Manifest next update: Tue 18 Feb 2025 03:00:23 +0000
Files and hashes: 1: 1-S9axjiECoFVFbxoTLP7k8hUrKw.roa (hash: +KpSmdQY0uaMjR1ylAxprXZXg3kf0ZtjvDy8OppLqso=)
2: NwLYaw5xBmjqZtp9zRsUDeweDD0.crl (hash: JlRcsaW1bhtXcVhD0kADQyM/YqsAPvpj8kexnz8Gg3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:89:37:cb:19:85:98:1a:9d:54:0f:27:13:94:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Validity
Not Before: Feb 17 03:00:23 2025 GMT
Not After : Feb 18 03:00:23 2025 GMT
Subject: CN=cd25f216b780f25c373fb336b11ce7b7a6947d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:b0:09:de:81:3b:15:8e:05:e2:63:c9:1c:
90:7d:76:aa:e4:04:d7:57:3b:d1:93:11:8a:39:bd:
cb:78:61:b9:c3:4e:28:f0:38:0b:a0:eb:e2:1f:87:
01:88:e7:15:eb:b5:e3:d3:25:ad:fc:35:5c:ec:d2:
53:27:5d:cd:de:10:c4:a6:d1:98:81:ba:a4:84:34:
05:16:c8:e4:6a:1c:0a:4c:cd:f5:04:a1:07:ca:8a:
4f:ad:dd:a2:f6:ba:eb:2c:86:54:dd:da:db:48:f8:
c9:ac:1a:22:a1:d6:99:38:00:c8:63:0f:59:9b:d0:
5b:8d:47:92:d2:57:48:2d:6c:39:89:8c:f3:37:be:
ab:f7:ef:a1:69:d5:39:44:2b:18:ed:6d:8c:a0:e6:
27:06:e5:e2:19:e3:18:7e:e4:db:af:81:02:b4:48:
88:5c:a3:22:31:72:07:67:8f:73:03:b3:be:54:39:
c4:42:51:a9:5c:09:26:65:c2:ea:ae:6d:96:fa:10:
ce:0e:f6:98:1b:1c:c5:ca:09:50:2a:ad:07:28:f5:
a2:47:08:db:98:fb:8f:84:1c:2f:0f:00:85:fe:d4:
48:7a:22:94:9f:0b:6e:06:27:eb:42:3d:7e:09:39:
6a:46:e9:e4:18:ef:33:fb:e6:f4:34:a6:26:62:fb:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:25:F2:16:B7:80:F2:5C:37:3F:B3:36:B1:1C:E7:B7:A6:94:7D:91
X509v3 Authority Key Identifier:
keyid:37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6e:bf:6b:1d:f5:37:34:bc:fa:f2:9f:a0:8b:ef:86:aa:2c:
33:5f:e4:87:79:44:b5:b8:56:63:91:13:94:93:ae:00:21:04:
58:e3:49:c9:1a:4d:1d:ff:c2:ab:25:98:66:a9:2a:f7:3e:a3:
da:32:ad:c8:f9:24:4d:af:b9:3e:88:6e:6e:68:84:31:d7:6b:
ab:98:d4:e6:21:39:a8:9e:b8:f1:56:4d:4f:74:7c:50:bd:41:
00:d1:73:ca:21:92:10:92:6d:89:5f:f7:82:69:91:62:a7:cc:
ed:8b:c1:2f:17:35:50:da:50:e6:e1:6a:53:56:b0:5b:13:af:
b4:0c:c8:59:9b:34:e2:9b:5b:6b:73:85:3e:8d:de:70:b5:cf:
b6:83:54:8d:ae:d8:40:2a:d0:d0:52:75:2c:b8:e8:37:ca:54:
18:da:49:ea:47:65:a2:35:c4:9c:ed:c7:7f:ea:2d:f6:2f:77:
4d:be:92:1b:40:69:db:89:3c:7d:78:50:36:83:25:61:fd:60:
93:e3:2e:8e:fd:51:4c:61:f5:bb:7e:fc:96:e0:18:63:6e:60:
10:df:6a:31:3a:12:25:19:ac:18:fd:06:5f:37:31:9e:7c:09:
56:18:e9:72:55:30:b2:65:b4:f8:65:f9:6a:59:3a:7e:58:bb:
22:28:2a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:32 2025 by rpki-client