Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier: LyMBsG3tfbU5g/S3ybecA/l8VA/EOPVyZxgYnfUgDzw=
Subject key identifier: B5:32:7D:CD:D0:D5:09:2C:EF:6B:06:C5:5E:78:E4:2B:CD:58:58:0D
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 019510900526DC6181EA9ED6CB0D82125D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number: 0AE8
Signing time: Sun 16 Feb 2025 21:00:28 +0000
Manifest this update: Sun 16 Feb 2025 21:00:28 +0000
Manifest next update: Mon 17 Feb 2025 21:00:28 +0000
Files and hashes: 1: idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa (hash: Nye8o2xtEJeY8siYmI8/lYTnzfEn8Ihz4z9R7JBQAZI=)
2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: jP8YROHyJK+LotrfzB1fP75ThHircMccDXySuOy1050=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:05:26:dc:61:81:ea:9e:d6:cb:0d:82:12:5d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Feb 16 21:00:28 2025 GMT
Not After : Feb 17 21:00:28 2025 GMT
Subject: CN=b5327dcdd0d5092cef6b06c55e78e42bcd58580d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:7d:08:4e:ae:51:d1:9f:62:b7:95:47:be:
10:8f:ff:ee:32:a2:18:54:62:d6:71:b3:2a:c8:96:
36:af:a5:52:1b:48:b4:02:d7:3c:28:bd:82:d5:d8:
dc:55:28:f2:45:49:90:2b:04:9f:5f:7d:a9:39:e8:
3f:06:94:e0:e7:19:70:f3:c9:ff:38:32:3f:56:a9:
9c:1d:2d:f1:b2:dd:2f:f7:5e:f4:23:4a:ba:76:b2:
3b:7c:53:3b:99:25:e6:74:93:94:f1:a4:fe:72:fa:
ab:75:f6:83:94:b1:8d:1a:f4:89:79:7c:c6:91:a9:
da:00:85:7f:96:e5:ed:4a:dd:96:f8:f4:6e:3b:01:
90:3d:d4:de:b6:4a:ae:0f:c6:fb:1a:4f:33:43:ce:
15:ea:19:8c:6b:4b:64:46:2b:e4:70:34:db:41:c4:
65:98:63:8c:39:b2:3f:9e:e8:1c:8a:d5:f5:99:c7:
47:2f:0c:f9:40:cd:66:2d:47:90:f7:37:a6:04:40:
8d:f2:5e:62:f6:aa:06:58:ef:2f:7f:50:bf:fc:93:
5f:ee:b2:eb:1d:a1:e4:ba:6f:b8:b6:fc:e7:6e:9a:
b4:5b:25:80:fb:02:04:d3:ac:69:17:b3:ad:f2:73:
60:ef:76:d6:47:13:8f:31:46:59:1c:c3:5c:a7:f6:
2c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:7D:CD:D0:D5:09:2C:EF:6B:06:C5:5E:78:E4:2B:CD:58:58:0D
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b3:dd:6c:fb:5c:14:54:72:88:c8:80:dc:b6:3a:56:12:31:
4e:fc:e2:8f:04:27:8a:46:2e:51:4a:41:5f:16:a2:ae:e4:62:
14:3d:ce:ee:b2:b8:29:d6:37:96:ca:55:4d:57:cf:33:13:11:
0c:8c:75:2d:2a:de:f2:bd:ac:f1:a2:87:fc:a5:ac:11:24:9a:
a8:01:67:c7:93:3e:db:5d:38:4b:3a:40:44:68:bc:55:a5:09:
69:cf:23:8e:c6:3a:0c:65:eb:59:66:62:6f:90:55:e8:14:a7:
cc:65:17:ee:1e:aa:ff:4a:80:a9:ae:fb:70:4f:21:10:61:3e:
d2:15:32:19:86:f6:82:17:bf:f9:15:cf:7c:e6:d3:a7:c0:1f:
5f:54:3c:84:91:19:f0:53:d1:61:f0:0e:37:d0:30:c6:85:d7:
8a:e6:81:6e:8f:de:d0:a9:15:e1:19:be:7d:1f:13:00:26:7c:
cf:46:a8:40:91:00:5b:0b:ad:a8:61:ac:ba:76:3b:3d:7f:8e:
5c:1c:2f:9a:7b:dc:ff:a2:c5:71:da:89:d0:b6:fe:bb:d8:bc:
07:9e:8b:30:bc:8d:62:4c:94:ff:3f:d8:3c:88:bc:eb:75:5e:
39:8f:22:d4:a4:4c:c5:02:d3:70:21:14:1a:a9:c0:5d:b8:50:
b9:c5:3b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:33 2025 by rpki-client