Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
File: NHkVOIV45h2IaEmiHXC6B1FJwaE.mft (raw, json)
Hash identifier: jWxb9rIKdkOga6H8TbOGliA81CFCX6reQj9oGEfIGC4=
Subject key identifier: 43:A8:7C:56:A0:81:34:9A:A3:D7:A4:DD:D4:90:00:2A:E7:78:96:4C
Authority key identifier: 34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1
Certificate issuer: /CN=347915388578e61d886849a21d70ba075149c1a1
Certificate serial: 0194C387EF7FDFB75DF85393866143001FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
Manifest number: 09BA
Signing time: Sat 01 Feb 2025 22:00:53 +0000
Manifest this update: Sat 01 Feb 2025 22:00:53 +0000
Manifest next update: Sun 02 Feb 2025 22:00:53 +0000
Files and hashes: 1: NHkVOIV45h2IaEmiHXC6B1FJwaE.crl (hash: TOglX5viVKb27Qb0Ovl7Hpzn2VZm6v9MqeVc9xxq5GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:ef:7f:df:b7:5d:f8:53:93:86:61:43:00:1f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347915388578e61d886849a21d70ba075149c1a1
Validity
Not Before: Feb 1 22:00:53 2025 GMT
Not After : Feb 2 22:00:53 2025 GMT
Subject: CN=43a87c56a081349aa3d7a4ddd490002ae778964c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:08:e4:c0:15:32:65:62:a9:62:00:94:21:
1a:c7:80:91:e0:8e:10:c7:b6:69:cf:5d:b0:d9:78:
09:de:c2:c1:a7:01:87:a9:c7:d9:67:95:c4:5b:05:
de:e8:40:83:f3:22:06:88:f5:dc:25:b0:a6:5c:61:
f6:7f:89:67:fe:91:c5:d3:41:2a:fe:e5:66:3f:c5:
20:ca:07:ee:f6:6b:5c:a0:fd:e3:12:e1:d7:92:f0:
97:80:7d:ef:ed:19:a2:5b:5c:00:a3:ec:c0:d5:79:
a7:bd:5f:bb:2e:b0:40:a6:f8:74:22:57:f6:12:63:
2b:17:eb:81:7e:3d:ab:ea:f4:f9:b3:74:4c:d7:bd:
98:c0:b1:58:3d:c7:23:5a:22:bf:25:2c:48:e7:56:
ed:2f:54:33:50:ca:ea:a5:87:10:eb:5b:79:e3:73:
a6:fa:61:2f:79:f8:d1:0e:90:a5:de:d1:a0:e4:8a:
cd:58:a2:99:c2:17:82:0a:e0:a4:b5:e3:c7:55:6b:
a7:44:1c:53:4e:23:27:d9:08:de:98:ae:a6:bd:cd:
e3:d2:56:d2:32:b6:fb:5c:ca:95:ae:d3:77:61:d2:
59:0e:f5:7d:63:0c:c4:49:c2:76:56:c0:68:67:4d:
61:23:31:a6:bc:58:90:15:a6:64:02:ea:4e:ea:51:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A8:7C:56:A0:81:34:9A:A3:D7:A4:DD:D4:90:00:2A:E7:78:96:4C
X509v3 Authority Key Identifier:
keyid:34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:49:4a:19:24:b2:a1:e9:9a:95:9d:36:15:e1:b7:dd:e5:be:
32:e1:c4:f3:1f:50:d6:0a:7f:fc:2b:98:f0:f0:48:c4:0c:90:
11:34:c9:15:b7:d5:fb:0b:14:03:da:b9:c7:88:b2:62:10:f9:
79:1d:ee:f1:84:d6:18:01:0b:5a:53:62:b0:e7:21:28:5d:76:
68:e3:42:b9:f2:af:0c:37:e4:1d:0b:a1:83:e9:f0:21:a2:fa:
e8:b7:e4:65:4d:fa:b1:24:0a:d7:15:a1:bc:9a:cd:00:6c:ff:
a0:4d:f7:a6:f0:9c:ab:f8:a6:5d:92:57:0f:ef:4c:83:08:0a:
bd:a9:32:48:6b:a5:05:24:2f:51:0b:bf:c3:aa:0d:ed:4e:2e:
7b:45:4c:d1:44:e7:85:6f:3d:ee:30:33:06:e4:1e:1e:3a:30:
be:8c:7b:01:e9:40:f2:0d:0c:45:13:92:b8:2e:e4:11:bf:2d:
f8:95:7e:08:c1:59:4c:88:e8:f5:27:5f:f2:9d:ed:ff:7e:ea:
40:09:fe:84:98:39:62:8b:9b:0f:3b:50:28:99:84:a0:00:3e:
02:d2:20:64:c1:0c:d9:dd:cc:15:9f:39:55:45:af:a3:c6:78:
24:11:d7:65:04:fe:d0:f2:2d:38:84:41:14:7c:11:dc:c9:e6:
60:dd:dd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:43 2025 by rpki-client