Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
File: N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json)
Hash identifier: l3mpCKkeoLJ8CDpUKaeGglSXq+MB1GJBhVtni1AZJ2k=
Subject key identifier: 22:AB:30:BD:83:2B:5E:BD:F5:22:74:73:69:B9:CC:87:09:C4:35:D8
Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
Certificate issuer: /CN=37ca50022828d901bf42b2798f7844104b05404d
Certificate serial: 0194C3F61D2C74DFE3ECFCB3C9753CFDA3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
Manifest number: 0843
Signing time: Sun 02 Feb 2025 00:01:13 +0000
Manifest this update: Sun 02 Feb 2025 00:01:13 +0000
Manifest next update: Mon 03 Feb 2025 00:01:13 +0000
Files and hashes: 1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: b8GDqKM3+PXdrfAj1mN6DX0UkfHaPvC47FggAe7XKmw=)
2: o5v0Cm5PNAVArL3iEJHw_CFIknA.roa (hash: Sf1IrFfhAHUJ08yJsTL6eR491AGzhJcL2ToeOR5gShQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:1d:2c:74:df:e3:ec:fc:b3:c9:75:3c:fd:a3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d
Validity
Not Before: Feb 2 00:01:13 2025 GMT
Not After : Feb 3 00:01:13 2025 GMT
Subject: CN=22ab30bd832b5ebdf522747369b9cc8709c435d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:a6:f2:19:f1:da:15:86:e5:6b:2f:d0:08:
b3:2a:39:33:73:26:0b:29:40:05:15:50:bd:17:56:
9a:f6:1f:20:7f:fb:5d:15:4d:36:98:e5:c8:f6:dd:
59:6a:04:1c:68:20:ac:01:70:bb:44:a0:d3:65:a4:
84:f0:08:fc:ec:52:ec:d7:41:88:fb:ae:65:22:65:
02:ab:b4:d9:8e:86:c6:6a:e3:ef:41:fd:05:1f:bf:
7a:f9:bc:c1:ba:67:90:5b:27:ce:85:83:c4:48:c9:
23:3a:69:91:5c:fe:f7:d4:a6:4e:64:ce:40:8a:60:
c8:6a:6f:09:13:0d:19:a0:48:da:3a:db:17:55:f1:
f7:b0:68:33:f6:62:bc:dd:93:53:f0:46:7e:d0:55:
65:48:80:e4:f0:af:71:80:75:59:d7:13:6c:04:bc:
ca:a3:08:f2:ff:20:33:e1:3b:78:cf:f2:3c:12:ca:
25:7d:3a:61:cf:0e:ee:2b:d7:50:fa:5b:e0:56:b1:
c1:c1:3e:cd:69:d0:b5:9a:ac:1c:84:af:0b:8c:a4:
42:61:6d:8a:45:ac:0f:b2:09:82:74:f6:d5:b2:55:
ee:7c:f6:39:62:fc:ef:96:e4:f6:53:01:96:1a:e7:
48:61:91:a0:08:ad:13:cf:a5:0a:98:f6:c2:22:d4:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AB:30:BD:83:2B:5E:BD:F5:22:74:73:69:B9:CC:87:09:C4:35:D8
X509v3 Authority Key Identifier:
keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f4:42:93:84:3a:66:d5:6f:36:c4:07:05:2d:0b:dc:69:80:
57:32:5e:b8:fc:be:bc:be:a1:f4:62:94:fa:7d:4e:b5:7c:6d:
3a:41:0b:22:a6:d5:37:2c:2b:bc:9f:85:ac:5a:de:99:bc:08:
37:46:f4:e3:60:d8:a2:63:8f:2a:6f:71:06:ff:85:63:e8:d2:
59:b2:34:84:f7:70:76:7e:ce:a6:59:36:3b:1a:8e:77:03:d0:
8b:9f:6e:c8:80:7f:d1:22:fb:8f:5e:f9:8c:02:47:a8:79:22:
7a:a1:c1:8d:2a:eb:a8:47:fb:0f:a5:6d:f5:9f:4e:36:b0:8a:
80:98:b0:a4:22:f0:ea:92:dc:c8:a0:f4:a3:1d:7a:2d:24:f1:
6b:b7:e6:e4:bc:16:19:35:ee:f3:c3:a5:f6:d2:7d:bc:c5:3b:
17:dd:e7:cb:e3:31:03:7a:55:7e:3a:aa:22:ca:5e:f7:17:0b:
d8:ba:e3:0b:eb:bb:48:6e:5c:56:58:9a:76:26:fd:e3:f4:51:
84:ef:14:81:f9:22:64:19:b9:cc:d3:06:24:a1:8e:75:bd:7e:
84:15:bb:34:94:8f:d7:1c:3d:de:48:80:c8:b4:b0:63:6c:54:
3c:72:20:09:be:a8:27:68:5f:3b:f2:4d:a6:89:90:d1:55:52:
5a:4f:3c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:15 2025 by rpki-client