Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: vFIte990BPXFcrTI/jzimv4mfl3BqUzxGWrS+N0Fyys=
Subject key identifier: FA:BB:A1:83:06:EA:F1:58:3F:60:BD:59:FE:94:7B:41:DF:2D:E3:F1
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 0194C463C9E5B6F3CEA9328F2EEFFD2E0E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 16
Signing time: Sun 02 Feb 2025 02:01:01 +0000
Manifest this update: Sun 02 Feb 2025 02:01:01 +0000
Manifest next update: Mon 03 Feb 2025 02:01:01 +0000
Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: SpafidChUCewrfZ7CfAAdca92xBnGt3JcKJVGz/RR9U=)
2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:c9:e5:b6:f3:ce:a9:32:8f:2e:ef:fd:2e:0e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Feb 2 02:01:01 2025 GMT
Not After : Feb 3 02:01:01 2025 GMT
Subject: CN=fabba18306eaf1583f60bd59fe947b41df2de3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:ba:f6:5d:89:9f:fa:db:c6:53:52:7a:89:
b3:6b:8a:6a:9f:ec:72:f1:dc:ae:91:c7:0d:31:82:
c3:5d:82:14:f7:1d:4f:81:f1:a8:bb:20:5f:fe:4a:
42:91:e8:89:42:17:4e:ef:9b:4a:46:d3:a3:c5:63:
12:c9:42:35:49:1b:04:68:53:ef:37:66:57:77:7c:
21:d3:5d:9f:66:4f:67:32:f7:34:8c:52:0d:18:7b:
f7:19:a5:b1:c0:bc:be:ca:84:54:56:c6:e8:9f:fc:
41:9f:a5:d1:aa:2c:13:78:be:d8:69:c7:7e:90:4e:
33:08:ad:68:c8:99:b8:d8:dd:a0:97:d7:75:56:8e:
6a:e2:5e:53:41:00:c0:a7:28:3c:61:24:93:06:10:
c0:7e:03:e9:ca:01:88:7f:6d:ae:af:ff:63:91:f3:
98:6f:30:8c:5c:4e:1d:be:78:0d:18:c4:69:88:33:
b1:69:da:a4:eb:d8:ed:f7:7c:77:8a:4f:b7:cc:3d:
7e:2d:8a:a2:c0:bd:8b:3c:c6:e6:d9:51:8a:ff:24:
77:f7:25:a0:ff:6d:f5:8a:96:9f:58:59:84:77:a5:
91:35:f3:24:e4:ae:91:e1:95:0b:3d:8b:15:f4:ba:
e5:e8:96:7a:c7:8d:94:00:92:9f:70:a7:a7:23:1d:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BB:A1:83:06:EA:F1:58:3F:60:BD:59:FE:94:7B:41:DF:2D:E3:F1
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b3:88:a5:b5:7d:b2:b4:73:4b:d0:6a:4e:56:17:95:f3:e9:
70:bc:7c:90:dc:de:02:36:92:11:22:27:2e:9e:c6:a2:27:39:
cb:6c:47:f2:35:d3:74:d0:cc:03:98:09:6c:51:9d:99:34:55:
5e:0e:32:5e:57:49:d8:5b:4a:bb:61:3f:ad:58:2e:7d:70:18:
dc:ac:fd:0d:bc:d8:c0:70:b7:a1:ec:1a:be:22:7d:ba:52:3e:
86:19:c2:fe:01:63:d1:98:c9:df:24:b7:e4:37:2e:e8:67:3e:
dd:15:9d:4f:bf:de:62:52:8b:2c:46:10:3f:94:32:53:eb:8a:
07:b4:3a:9a:12:2e:7c:63:06:d8:b1:ab:2c:ad:e8:83:d1:8c:
58:de:91:ae:01:88:fe:c6:cd:8e:de:40:e0:0e:0b:24:d7:5c:
2d:96:04:75:7a:37:b3:ec:4f:1a:0d:76:cf:a0:08:9d:3d:83:
6b:e0:cf:49:35:32:ac:c0:41:8e:33:21:35:49:9a:20:99:0a:
d9:cc:ea:a6:1b:9a:8a:85:0f:97:48:ed:e7:1f:43:81:8f:cf:
a6:b3:01:f4:ac:8e:2b:7f:1e:08:d1:45:5a:40:c7:e4:9c:e5:
5f:06:c9:d5:30:8f:85:cc:65:69:9c:e1:c1:ed:6d:c8:45:fd:
1c:6e:75:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:59:54 2025 by rpki-client