Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: J6MNiLcxuigkDviJMpeznxLQzEkoRlH6xHxkvP6tXUU=
Subject key identifier: 18:DB:0A:75:84:9B:EB:FA:1D:2B:D0:69:68:41:38:BD:60:DB:49:55
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 0195127E5C30B6D0333A6B92C8A3385221F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 01E6
Signing time: Mon 17 Feb 2025 06:00:25 +0000
Manifest this update: Mon 17 Feb 2025 06:00:25 +0000
Manifest next update: Tue 18 Feb 2025 06:00:25 +0000
Files and hashes: 1: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: qJqkBL/ToEo7B8ejFSe2LQpWTPYwEwro2tngW67NLDs=)
2: sazfzVz6q9bIns0N5tJ_KIxOhyU.roa (hash: 7Dx7RnLHW4HsXUHgAbio+tOs+19yMbUTjmWX8tX1e1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:5c:30:b6:d0:33:3a:6b:92:c8:a3:38:52:21:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Feb 17 06:00:25 2025 GMT
Not After : Feb 18 06:00:25 2025 GMT
Subject: CN=18db0a75849bebfa1d2bd069684138bd60db4955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:eb:c5:b1:8d:21:7c:a5:e6:23:a4:ce:61:
16:2b:4e:9b:94:5c:17:6b:bd:39:f6:53:40:10:58:
aa:3a:a6:7b:b4:66:4c:9a:8b:c7:b0:4e:2e:d4:41:
61:0e:22:98:bf:31:bc:f7:d9:af:5a:be:f9:87:02:
fd:9c:1d:b2:85:a1:76:c3:ea:34:a7:38:e2:75:7d:
b4:f5:e0:d1:a3:15:e4:f3:ae:96:be:99:19:d5:bc:
0d:7e:f7:ba:66:ee:c8:66:c6:e3:f5:22:e3:54:75:
1c:2f:0d:34:68:10:3d:ae:54:aa:e0:44:63:d6:9c:
32:5a:be:e0:80:fb:57:98:ea:70:02:90:36:fb:77:
da:97:f5:37:98:39:06:a2:fb:60:de:c0:0e:06:4d:
24:cf:f3:4e:5f:46:d7:04:c2:ce:b5:88:35:f4:c2:
bb:bd:94:fd:82:14:1d:f4:96:a6:a9:52:cd:db:50:
15:6b:2e:e0:a0:f6:03:cf:25:53:1c:64:ee:28:c9:
cc:39:c3:3b:73:76:d0:8f:b3:b5:df:01:94:27:6a:
f2:74:4f:2f:8e:34:53:b6:25:75:1c:78:45:e1:a8:
f9:b0:5a:5b:64:05:66:65:22:1b:5d:4b:08:df:68:
c1:42:be:9f:7f:de:b2:bb:27:79:09:32:c5:15:c1:
e3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DB:0A:75:84:9B:EB:FA:1D:2B:D0:69:68:41:38:BD:60:DB:49:55
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:be:a3:60:fc:68:b6:03:a3:3a:bb:64:fa:66:7f:77:dc:ab:
5d:38:99:4b:2a:67:d3:68:ff:a8:e1:65:06:a0:2f:74:af:3b:
9b:f9:45:21:95:3d:0c:6a:9d:c0:8e:2c:da:73:dc:73:89:98:
5a:63:4a:e3:d6:19:8a:19:e0:98:63:79:e9:0f:58:77:74:e9:
50:e5:b6:32:85:db:08:87:bd:60:a4:59:28:8e:5f:5b:09:9c:
59:28:de:ad:10:ef:7c:b3:fd:b8:c7:03:b2:25:87:4e:ef:07:
c6:ac:d1:ac:c0:8d:15:70:21:1a:e6:63:5b:6c:cf:35:4d:5c:
d6:94:34:24:ce:01:da:cd:64:4a:4c:fd:d1:cc:72:24:37:14:
03:28:09:f9:6e:7a:dc:f0:5d:40:4c:cf:0f:bf:3d:03:f0:38:
b3:69:74:ad:95:1b:67:ba:3f:e0:3e:1a:b0:d3:e4:9b:46:94:
00:9c:41:bb:eb:7c:7b:e4:42:bc:2f:be:79:9e:11:5c:0c:6a:
27:47:a9:66:f2:78:15:52:90:69:66:27:a2:12:b6:9e:8c:f6:
dd:31:80:fb:b2:b0:cf:58:b5:0b:9a:9c:57:cc:c9:96:3f:09:
9a:eb:4c:2b:d0:a5:60:b2:c7:3d:21:10:2e:28:bb:1d:99:06:
35:6c:0a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:03 2025 by rpki-client