Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File: nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier: nFvTUYtu6dOfD4NnSU9mv66j5EMsOG1OVb6LY0KrsGU=
Subject key identifier: 3A:44:8D:0F:8A:98:1F:03:69:AE:7F:DF:2C:52:AE:51:E2:E9:85:90
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer: /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial: 0194C4D1635D6FF46E280581E9F991AE262D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number: 0A83
Signing time: Sun 02 Feb 2025 04:00:44 +0000
Manifest this update: Sun 02 Feb 2025 04:00:44 +0000
Manifest next update: Mon 03 Feb 2025 04:00:44 +0000
Files and hashes: 1: IFXNgHuEN8ycsfhuA4dEpX7GYeY.roa (hash: 0NAgcHKOW4VLEuD8zIQn9OzSwjmjjTPr1tkjSBELdjk=)
2: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: orGXJhSJ6BSvn8JcwzbMxYDs9GvbSesOuY2lziaUgTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:63:5d:6f:f4:6e:28:05:81:e9:f9:91:ae:26:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Validity
Not Before: Feb 2 04:00:44 2025 GMT
Not After : Feb 3 04:00:44 2025 GMT
Subject: CN=3a448d0f8a981f0369ae7fdf2c52ae51e2e98590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:d8:5d:48:f4:7d:a0:23:6a:ba:73:0a:2e:
37:ad:e7:e9:17:76:a1:6a:36:d1:dd:7f:28:51:43:
92:18:3b:16:6f:63:86:70:64:e4:bf:12:7e:96:f6:
9c:31:63:65:06:8c:22:d3:ea:96:68:e3:7b:fe:6e:
19:79:fe:d2:e0:52:ff:02:52:28:9e:3e:67:df:1d:
c8:f9:c9:07:d4:b5:7c:19:7d:5f:11:1d:90:11:cf:
86:46:a1:a1:d2:c8:90:bd:5e:04:67:23:e7:96:75:
f8:71:74:91:d9:d9:1e:ea:1a:f5:a4:92:17:b6:12:
36:47:28:e5:6a:e5:e6:87:f3:4f:c5:db:e5:a7:1f:
6e:2a:27:d4:04:73:51:5b:ef:08:d8:72:05:98:25:
23:2d:88:ff:f0:d5:77:fe:50:08:70:9b:8a:f1:8c:
e9:fc:7e:ad:8d:3c:1a:73:66:45:c7:b9:6a:f5:a2:
30:c7:de:9e:08:2f:dc:7c:46:0a:d8:8b:86:df:05:
c9:e7:df:c4:d2:f1:ee:bb:3a:2c:8d:bd:b3:28:38:
ea:19:db:3e:de:4e:96:50:83:39:8d:c3:bd:5a:5e:
c6:af:23:60:8c:dc:ce:d2:ab:cb:f8:a4:77:4a:8a:
49:6b:c3:ab:3d:ed:e3:4f:62:89:81:e5:02:55:cf:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:44:8D:0F:8A:98:1F:03:69:AE:7F:DF:2C:52:AE:51:E2:E9:85:90
X509v3 Authority Key Identifier:
keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:98:a0:c6:1f:9e:8c:5b:a6:cb:cb:e3:a1:72:2b:8b:88:50:
2a:47:5b:21:66:de:e6:e6:49:16:68:96:8f:9f:19:df:67:12:
8e:c8:44:5d:e9:06:8a:78:7c:7b:e1:8a:a4:75:3b:1d:df:ce:
35:0d:81:9c:11:4a:5a:74:aa:4a:42:d5:1a:4f:cb:1d:e9:a2:
9f:57:4f:45:ef:1c:88:9e:27:8a:d1:ca:04:50:89:82:06:7a:
1c:41:05:5b:66:c8:91:9d:bd:d0:ec:02:3f:c4:33:28:f5:09:
e4:85:dc:1c:56:0e:23:be:05:7c:da:92:22:71:ff:da:4e:05:
cc:3c:9a:68:24:f3:b8:f8:2e:a2:92:1a:96:37:41:50:90:ca:
f8:0e:31:b5:6e:58:be:ec:2e:3b:a2:98:5a:d5:6d:9f:4d:f4:
33:2e:00:b7:7b:4d:51:01:72:fa:3c:4d:58:9b:a3:ae:a7:5d:
a9:e3:46:cd:20:64:d1:72:89:a6:90:a3:4c:00:c2:bc:fe:b8:
d4:42:bd:77:da:42:99:50:67:4e:2c:06:e4:b0:0a:72:85:21:
0b:b4:d9:19:52:a0:5b:71:4a:9d:5d:23:88:2e:01:cd:1c:59:
e6:6a:cc:03:b4:bb:76:ff:e7:29:4e:b8:16:70:f5:85:61:90:
08:af:bd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:30 2025 by rpki-client