Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json)
Hash identifier: 8OJB5+iqVuqD/lFW8N5Ndb2oRYiFhjLVZyLYSrx9ZUc=
Subject key identifier: 1A:97:5A:86:65:FD:F7:A5:CE:9E:AF:93:59:17:5A:A3:01:88:07:BD
Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
Certificate issuer: /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Certificate serial: 019511A2A9FA939327A13BA05D42425FD706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
Manifest number: 09E1
Signing time: Mon 17 Feb 2025 02:00:27 +0000
Manifest this update: Mon 17 Feb 2025 02:00:27 +0000
Manifest next update: Tue 18 Feb 2025 02:00:27 +0000
Files and hashes: 1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: jxouMlf+ql/aIQ3Zu4/WqLZ05PCMvyaCCvBjCepRTVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:a9:fa:93:93:27:a1:3b:a0:5d:42:42:5f:d7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Validity
Not Before: Feb 17 02:00:27 2025 GMT
Not After : Feb 18 02:00:27 2025 GMT
Subject: CN=1a975a8665fdf7a5ce9eaf9359175aa3018807bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:12:f0:50:a8:b7:90:e2:b6:2e:40:2b:09:
25:05:c1:48:12:7f:b1:56:ae:a0:91:7a:cf:7d:d2:
22:23:4f:a9:3d:14:6c:9b:d4:9c:ae:5a:aa:ac:21:
81:b1:13:a4:22:0c:af:a5:d9:92:79:d6:f1:11:d7:
c7:f8:81:b1:c4:62:4a:b7:c4:84:c8:83:c2:b4:71:
d5:c5:85:2e:c9:6b:fe:10:4c:00:2e:01:61:16:9d:
bd:29:3b:aa:29:e7:f5:8c:b5:c5:22:ee:ec:0c:d2:
cd:af:0f:be:fb:0c:12:84:61:82:45:46:f5:41:ce:
38:45:1a:ed:a4:02:44:56:d3:4b:a2:ef:cd:7a:98:
63:80:75:f7:b9:4a:38:64:3a:85:f3:f1:13:a9:32:
6b:9f:fc:00:7b:ec:cd:91:46:bb:4a:be:3e:2f:50:
48:19:35:ec:fb:15:a7:6c:62:e7:24:26:f2:0d:f0:
60:33:b6:1f:66:d8:8a:15:ce:7b:ef:fb:90:87:92:
4b:5c:3a:08:1b:c6:9d:bd:5f:c1:cd:41:ca:5b:54:
c9:fa:cf:89:e6:26:f5:1d:77:67:0f:ef:29:ad:43:
f7:fd:46:2f:cd:19:58:c3:29:c4:e4:a7:32:25:cc:
70:eb:c1:de:ae:71:cf:fe:5b:5d:6f:10:b8:6d:e8:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:97:5A:86:65:FD:F7:A5:CE:9E:AF:93:59:17:5A:A3:01:88:07:BD
X509v3 Authority Key Identifier:
keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:93:cb:32:3b:84:d2:d5:1a:bd:8e:86:26:b7:ab:1d:69:c4:
d0:a1:68:3f:c7:c7:8b:4b:28:59:0f:44:87:5a:3c:de:9e:1e:
54:33:83:cc:d0:15:4e:e7:14:9b:f7:3c:92:94:5c:78:3b:0c:
78:12:82:de:a9:b9:98:8a:0e:fe:17:b4:e6:3f:9a:6f:49:7a:
1e:39:d2:df:8b:7a:d9:6b:5e:5e:2b:90:3b:b1:6f:67:f1:9a:
7b:44:31:14:7e:3f:91:ad:b8:eb:ae:5a:e7:1d:e5:e7:d7:d0:
e2:cd:63:91:54:58:99:79:43:8b:bc:0c:2d:1d:01:fb:21:33:
7c:2a:3d:ae:d7:ad:99:94:40:ac:12:29:65:85:79:38:bb:90:
99:e3:4b:2a:2e:cc:ca:3f:1a:9e:43:c4:e5:3d:38:bb:67:5f:
bc:70:1e:30:74:f3:81:40:23:66:0c:e5:e5:12:89:b7:f3:55:
6d:81:20:6b:09:12:7e:c0:08:d8:65:d6:94:4b:25:6a:a7:f7:
76:9c:8e:94:a5:57:34:4e:41:8d:ff:ac:b3:08:da:de:a4:a5:
be:11:d0:c9:11:34:12:ae:85:93:f0:c5:70:c5:a7:a7:dd:d5:
08:d1:44:5d:23:87:0a:e7:1d:5a:24:ee:4f:af:70:3f:90:c9:
69:72:00:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:16 2025 by rpki-client