Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
File: NB--B1HiEYiTdNFdYxLCJPaV-qI.mft (raw, json)
Hash identifier: 9U/IDcjXhkF3SKG1xqymYkbwLbtktafJesjj1DDhDj8=
Subject key identifier: 1F:79:63:C3:1A:D8:65:F5:C6:D9:07:D1:1D:A2:EE:21:23:80:16:85
Authority key identifier: 34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2
Certificate issuer: /CN=341fbe0751e211889374d15d6312c224f695faa2
Certificate serial: 0194C463669F35AD426C51BFF9E5DFF52929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
Manifest number: 0D55
Signing time: Sun 02 Feb 2025 02:00:36 +0000
Manifest this update: Sun 02 Feb 2025 02:00:36 +0000
Manifest next update: Mon 03 Feb 2025 02:00:36 +0000
Files and hashes: 1: Giw6c3ykUw3nYPNE5UpuuM_ybFY.roa (hash: 4QE8zLtdTCj1Z8B1PqQUFcIb6Is1jjshW97EzIqWBB0=)
2: NB--B1HiEYiTdNFdYxLCJPaV-qI.crl (hash: yUgodFKwWuNwpK9+mmdAR/8xBlUaO6Zb1g8pAEcPrGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:66:9f:35:ad:42:6c:51:bf:f9:e5:df:f5:29:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=341fbe0751e211889374d15d6312c224f695faa2
Validity
Not Before: Feb 2 02:00:36 2025 GMT
Not After : Feb 3 02:00:36 2025 GMT
Subject: CN=1f7963c31ad865f5c6d907d11da2ee2123801685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:e1:e9:aa:79:ee:5b:78:32:13:04:96:fb:
ba:cd:11:7e:ba:9c:8b:b6:fd:0f:af:3a:c8:7a:d7:
f7:a3:ef:36:b4:9f:f2:ea:1b:24:b3:dd:01:cc:07:
59:6e:1c:e7:7d:0c:5f:c2:59:63:3b:cd:2b:95:5b:
a9:9a:40:2d:87:6a:58:df:90:a4:ac:80:56:d9:16:
56:55:db:d1:1e:70:b5:e6:9d:68:f5:cb:95:8d:32:
1b:a3:c7:14:4f:0f:e1:02:3b:8f:3a:7a:c3:25:10:
de:92:f2:54:1e:7a:80:5b:bd:b4:0d:17:a1:8b:ec:
4b:9a:1a:1b:0b:58:4e:a2:4e:18:e6:cb:39:0c:19:
6e:eb:94:0b:fa:f6:d7:a5:7f:0b:4d:5e:04:cf:81:
01:a0:6b:eb:06:6d:d6:79:b5:50:fc:96:b8:4f:e4:
3c:00:dc:60:9e:c0:b2:f7:77:26:a2:5f:b5:2a:06:
40:99:82:9f:71:81:0e:09:4e:cb:6e:1f:9f:5e:19:
02:0c:75:8f:30:74:ab:29:ce:29:a5:50:d8:56:cd:
cc:a3:2b:8a:e3:79:8d:21:b3:a6:8a:34:bf:68:15:
d8:9d:1f:89:68:f0:2e:9e:7c:bb:ed:96:a4:6b:58:
1f:1e:a5:f4:9f:b0:65:5d:ee:cd:5f:a9:41:44:dc:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:79:63:C3:1A:D8:65:F5:C6:D9:07:D1:1D:A2:EE:21:23:80:16:85
X509v3 Authority Key Identifier:
keyid:34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1e:c6:64:94:9b:a3:dd:fb:32:72:db:ce:7a:78:ae:04:cd:
31:df:ab:36:80:01:dc:38:1c:02:a4:5e:e6:27:93:82:ec:a1:
07:21:f3:96:b3:3e:29:c0:55:6e:b2:12:aa:b2:7d:90:0b:a2:
8b:b5:5b:ab:3a:ee:8e:e0:06:19:11:65:c7:7b:38:97:ed:cc:
b6:63:ba:be:fe:9c:9e:ef:26:47:b9:71:37:2a:00:de:1e:76:
2d:81:2b:47:28:1f:48:b6:02:b7:02:5e:5e:39:69:bb:4c:a5:
5c:c3:20:d4:ed:d3:e2:bc:84:c2:3a:2f:5c:cc:ef:97:53:62:
c3:7f:3a:5c:90:a0:a6:15:0c:24:66:f7:fe:f6:93:c7:62:34:
44:9e:51:1f:ea:d8:a1:c4:70:24:d7:59:ba:bb:84:66:eb:3d:
ba:5c:6f:5a:b5:10:e0:9a:06:30:5b:85:93:ab:f9:e4:63:8a:
43:83:d2:6a:f7:10:0c:16:a2:f5:62:2c:a5:cb:f8:19:d3:9b:
cc:4f:db:1b:cc:b7:64:1f:6b:3b:50:0f:d8:87:e3:36:d8:c2:
c4:6d:b9:a5:36:e9:97:9e:35:45:7a:13:8e:ca:75:5f:9e:fd:
e5:41:eb:0f:ef:94:51:31:f0:43:7a:e5:9e:d5:09:38:83:b0:
bd:90:14:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:52 2025 by rpki-client