Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
File: NP8Aripv7u1qSYfLyRNGf9_vg-g.mft (raw, json)
Hash identifier: 0rOjkTT4+Ksm+vLwUrSh83t3oYJjNH/S5XlpjMzsF0k=
Subject key identifier: 47:07:79:60:89:9C:8F:84:4B:10:B9:1D:92:1B:22:59:F9:58:1B:4C
Authority key identifier: 34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
Certificate issuer: /CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Certificate serial: 0195116C3CB1F7E8EDAA4D5923BF4C594371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
Manifest number: 0656
Signing time: Mon 17 Feb 2025 01:01:00 +0000
Manifest this update: Mon 17 Feb 2025 01:01:00 +0000
Manifest next update: Tue 18 Feb 2025 01:01:00 +0000
Files and hashes: 1: NP8Aripv7u1qSYfLyRNGf9_vg-g.crl (hash: KX/5D8CaqvBivZnkimpPkst6xqX37NiQKzDX6PPHdvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:3c:b1:f7:e8:ed:aa:4d:59:23:bf:4c:59:43:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Validity
Not Before: Feb 17 01:01:00 2025 GMT
Not After : Feb 18 01:01:00 2025 GMT
Subject: CN=47077960899c8f844b10b91d921b2259f9581b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:c0:ee:75:10:92:e0:50:52:18:1a:32:9a:
ac:ec:93:5b:67:24:f7:98:d7:d8:3c:e3:fb:67:3b:
d1:3b:c3:19:98:f7:85:7e:0d:31:b3:2b:a2:7f:4e:
42:ea:4d:04:bd:46:5c:ce:69:58:c9:53:ca:a5:3b:
4c:3f:11:45:42:2b:23:40:bb:b9:ae:ad:a4:53:30:
0d:c5:60:dd:b5:f7:8c:2e:24:50:71:17:a7:d6:2d:
a8:fd:41:ba:24:74:4f:7b:e8:b2:9d:7f:3a:b8:91:
c7:ad:92:1b:93:53:2b:83:be:c4:9c:de:ea:5a:44:
20:70:82:01:ca:68:fc:53:fc:e4:ff:5b:e0:95:c9:
84:1b:3d:50:e4:bd:8e:d3:05:99:43:3d:a5:61:26:
5f:21:36:cd:e6:1b:70:b8:29:a7:c3:4f:3d:54:8a:
99:cb:5f:20:80:c7:c9:64:9a:65:72:d5:55:6d:8b:
6a:a3:be:bf:ad:11:29:89:39:fd:fb:db:5b:60:f5:
83:0f:90:38:d0:67:df:c7:d4:7d:19:0f:2d:0c:b8:
3a:17:c0:9d:f7:98:eb:c5:6f:f0:e6:61:4f:6a:1d:
d0:2b:39:9b:5a:b7:ae:f9:db:98:e7:9d:f6:67:8a:
fb:3c:77:d2:1e:ca:02:ab:8f:cc:01:3c:5d:62:7f:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:07:79:60:89:9C:8F:84:4B:10:B9:1D:92:1B:22:59:F9:58:1B:4C
X509v3 Authority Key Identifier:
keyid:34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2f:3d:5a:a3:ca:fb:33:f5:4d:c1:de:cd:8c:c0:4c:d2:33:
40:c8:9f:68:6c:63:00:d1:12:85:ba:b6:50:d1:23:bb:7c:06:
16:3f:79:74:3b:0b:2e:0d:3d:c9:b6:ec:12:56:17:dc:34:38:
ab:dd:f6:b2:dc:73:74:08:2c:d0:04:6f:39:b8:f5:9b:43:dc:
95:ca:b2:f8:e2:2e:9c:ad:4f:8e:ed:70:1b:d5:c8:c3:22:f2:
fc:5a:9a:fa:76:15:fe:3a:1d:d5:a3:1e:a0:45:98:75:43:fd:
b4:bf:22:85:e8:e4:64:d6:4c:0c:dc:6c:44:43:53:4c:9f:94:
df:16:86:6c:41:f8:48:a9:91:16:5b:79:ea:3e:16:c5:0e:35:
60:c0:c1:ac:65:2b:ed:75:03:a4:ab:84:72:96:09:7a:f4:70:
e9:04:99:3a:7d:50:ef:d8:c8:0f:fd:ff:65:7c:3f:d1:60:17:
f3:c9:80:be:9d:f3:6f:bd:39:2a:2c:b2:50:09:09:ad:76:81:
47:ca:4d:62:df:4d:7e:34:d3:ca:99:17:67:04:c5:57:12:68:
38:76:77:47:8a:55:21:21:fe:2a:e0:cc:a8:9e:3f:b6:87:10:
c8:7e:d6:ca:f8:6f:e6:58:39:0d:ce:ec:de:3d:8a:92:b4:f3:
6b:ef:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:36 2025 by rpki-client