Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
File: Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft (raw, json)
Hash identifier: k8TOevkfGPaV0Y3pt8O011iEOdq3z1Hgl6u6KtBFUB8=
Subject key identifier: C7:AF:55:A6:68:2A:56:3C:40:52:22:B2:C7:6C:7F:E9:D8:34:D6:72
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 0194C3510496DE63BCACB6337A02BB944A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
Manifest number: 9F
Signing time: Sat 01 Feb 2025 21:00:54 +0000
Manifest this update: Sat 01 Feb 2025 21:00:54 +0000
Manifest next update: Sun 02 Feb 2025 21:00:54 +0000
Files and hashes: 1: Kzv57mrF6D4TzpWqRm4OMZsBabg.roa (hash: H8J62lGi+SVfaohRYvudVwS5cRkvujjbuKntKUtgcEc=)
2: Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl (hash: zKcgdpnQF9bD/+55+tl2+6siltl/bygPrLzqZwv+vHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:51:04:96:de:63:bc:ac:b6:33:7a:02:bb:94:4a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: Feb 1 21:00:54 2025 GMT
Not After : Feb 2 21:00:54 2025 GMT
Subject: CN=c7af55a6682a563c405222b2c76c7fe9d834d672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:4d:bd:c4:9d:35:f9:88:34:b1:12:30:c7:
60:a8:33:b1:6d:e3:68:9b:20:b4:36:8b:6c:df:6d:
9d:25:44:2d:2c:98:19:96:11:56:2f:54:29:9d:65:
4b:7c:2d:1c:dc:e7:c5:eb:5d:97:3e:4d:9a:cd:70:
52:8d:7e:c8:de:85:fd:7f:42:97:08:7c:cf:ec:0f:
48:e9:ea:c0:ac:e0:53:87:5d:5e:be:6c:bd:9e:98:
1c:df:b5:d2:ec:5a:91:7a:bb:5c:38:ce:2e:94:2d:
1c:db:a5:6b:8d:63:09:ae:56:13:b6:09:3c:61:a7:
bf:c1:1b:f6:28:be:d5:c8:a5:43:c5:02:05:5e:e5:
20:a3:ad:12:3b:e0:68:00:ae:b2:3d:61:f0:98:8f:
c1:29:29:a3:3e:ed:bc:a7:ee:1b:df:9a:d6:8f:9b:
45:96:18:5d:02:b3:94:8b:cd:c4:aa:d2:1f:b3:d8:
da:a4:8a:8c:9a:14:d7:2b:52:15:7a:ca:fd:a0:82:
4b:86:9a:5b:bb:1d:2e:94:93:24:39:4c:2d:0c:1a:
b0:68:81:44:0e:11:66:89:19:31:4c:44:76:52:7f:
5d:8a:7e:4b:ef:bb:d4:52:e0:2d:3c:fc:12:9c:96:
3e:f7:55:b4:82:e6:ae:79:fd:69:22:f3:df:ca:f1:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AF:55:A6:68:2A:56:3C:40:52:22:B2:C7:6C:7F:E9:D8:34:D6:72
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b2:ac:30:3f:44:46:00:7e:f8:af:00:e1:ae:0a:65:11:64:
93:22:59:e0:54:14:4e:43:ee:84:b3:87:91:a9:8d:a1:f2:7b:
97:4e:49:da:bd:c7:42:e8:f5:c6:a1:f7:b0:e9:dc:b1:f2:68:
e5:a9:3b:d6:c6:48:26:2c:1a:ed:d4:92:76:8f:df:a0:a7:ad:
21:e6:87:47:b8:a4:5d:d5:cc:35:6f:12:8d:0a:97:e8:d5:1e:
16:6f:76:42:f8:6a:52:d0:41:ea:d2:4a:e8:b8:8f:9d:fc:03:
28:e4:bb:3f:43:69:53:f4:1d:94:cf:f9:50:6d:22:a3:93:00:
86:c2:2b:ed:bc:ba:8d:a6:a1:69:29:91:db:39:0e:ac:e2:c3:
20:4d:aa:ef:e1:a1:1f:6c:8d:32:45:c2:61:47:56:3d:d3:df:
34:b1:36:36:8f:ef:2f:20:d7:65:7d:79:40:e4:23:95:43:80:
09:11:68:8c:d4:95:a7:b4:fe:85:bf:b0:28:91:05:8e:6b:fe:
1c:07:40:07:86:d2:30:30:0f:4b:ea:aa:98:0d:e8:7b:0f:ae:
d7:23:6b:5c:49:2c:76:27:85:80:4b:0d:a3:05:c5:59:e5:ed:
98:a4:4a:5f:2a:c9:47:a7:01:4f:0c:0e:96:e7:f6:52:a2:a8:
b4:f7:ac:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:27 2025 by rpki-client