Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
File: na669vl-yTdN9sFJL1nV8Tqd0Ag.mft (raw, json)
Hash identifier: wan0QddFOqtFL6LiNEiS18XR6rB/dcXW3qUlbWEXa4I=
Subject key identifier: F2:1A:90:46:40:6F:7B:2B:4A:A2:0D:0E:E0:64:36:3E:7B:BE:B4:27
Authority key identifier: 9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
Certificate issuer: /CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
Certificate serial: 0194C42CAC91663D123B7F8D2FA22939054D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
Manifest number: 03E8
Signing time: Sun 02 Feb 2025 01:00:49 +0000
Manifest this update: Sun 02 Feb 2025 01:00:49 +0000
Manifest next update: Mon 03 Feb 2025 01:00:49 +0000
Files and hashes: 1: na669vl-yTdN9sFJL1nV8Tqd0Ag.crl (hash: WRY0BBY3XfaVTJ3RYpoth4uLEz0YhaXYPcLQPikKUu8=)
2: olL7czVWLNgm7W1_IvIVMdMAMJQ.roa (hash: E2ePc2MjZUE+sDvLqhAeZtvQFjQHcecfsCWi8c1v1uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:ac:91:66:3d:12:3b:7f:8d:2f:a2:29:39:05:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
Validity
Not Before: Feb 2 01:00:49 2025 GMT
Not After : Feb 3 01:00:49 2025 GMT
Subject: CN=f21a9046406f7b2b4aa20d0ee064363e7bbeb427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:6a:e3:75:e0:74:b3:71:f6:f7:60:fa:ba:
76:89:4b:75:0f:97:57:05:e7:e7:40:b2:dc:e5:40:
a4:f0:3b:55:1f:7f:e2:dd:fd:ca:68:88:6b:fd:e1:
a4:4b:e3:4b:e0:a2:e4:6a:ab:67:d5:2a:80:c1:8e:
d2:df:3a:ae:02:53:a1:7f:fb:4b:bf:79:42:eb:76:
45:f7:5f:9f:21:be:a6:a0:e8:d4:69:93:ab:91:cc:
13:6e:bd:a2:5a:b5:0a:c5:66:27:b3:c8:f7:ef:42:
b0:b3:07:13:6c:1b:25:88:13:12:aa:f2:79:4b:9f:
6f:0b:f2:d0:0b:cc:53:50:12:35:82:c4:b9:3d:e1:
d8:fe:a6:63:62:4b:8c:42:92:53:ee:3b:fd:c6:ff:
4e:ec:38:14:28:89:ba:35:8b:2f:5f:98:e8:bd:17:
03:db:e5:67:39:22:7c:d7:68:ff:ab:2d:6e:dc:50:
ba:13:55:7e:ac:0b:98:e7:bc:cc:f5:a6:4e:c5:0a:
8d:15:b5:17:d9:29:7c:f0:c2:56:08:39:34:cc:0a:
76:0c:3b:33:f3:15:c3:9f:8b:b9:89:52:4f:84:92:
4b:a0:8c:5e:4c:7d:95:ca:0e:3e:c4:b0:32:06:b3:
cc:69:40:39:48:d1:09:d9:5e:21:89:17:00:42:d1:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1A:90:46:40:6F:7B:2B:4A:A2:0D:0E:E0:64:36:3E:7B:BE:B4:27
X509v3 Authority Key Identifier:
keyid:9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e4:1e:be:d0:3e:92:8f:c4:f4:b5:dc:a7:ec:0d:cf:c7:c0:
a8:79:d9:70:79:fd:58:28:5d:2b:bd:6d:b7:c4:99:7b:c5:01:
5b:9e:f8:7e:93:40:b2:73:69:88:f6:ea:02:dd:7b:a3:6e:0c:
5d:be:58:a5:87:38:67:8c:3c:7d:c3:16:53:65:5b:45:33:2e:
b2:1d:a7:6f:c5:88:72:bf:b0:5b:cb:23:51:51:a3:89:ed:b9:
f9:48:05:db:d6:ce:14:86:52:56:b2:2e:5f:eb:52:72:ee:6f:
92:f0:b7:ca:68:33:cd:d9:18:85:08:e1:7b:e8:55:90:50:e3:
c9:39:d2:bc:0c:71:e6:67:c6:b6:6f:1b:2a:ec:d1:29:55:fa:
3c:a1:85:fb:b1:d6:10:f9:90:fa:fe:da:b8:b7:4d:6c:32:90:
53:0c:51:77:63:2b:fb:9e:62:64:10:f3:76:d1:96:35:b7:01:
64:33:74:2b:e2:5a:49:2c:0a:44:74:f6:28:48:16:8d:db:2b:
96:78:56:c6:13:5f:aa:f5:30:7b:c1:a3:d4:2d:cc:75:68:29:
cc:f8:ac:cb:ea:c7:54:e9:04:45:b7:31:d0:f7:35:86:65:5d:
54:2d:12:b3:20:ca:d4:05:d0:6b:6a:84:61:49:63:75:f6:c8:
30:9c:21:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:22 2025 by rpki-client