Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
File: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft (raw, json)
Hash identifier: GaXw7zGsBfPM+A7TKMGqH3l/dr+HcxTujch3ehxV5e4=
Subject key identifier: 90:31:62:33:95:4D:0A:8B:95:03:34:B6:5E:23:35:39:2F:30:65:0E
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial: 0194BB96C3FFF1F5C70F8B9510655FF34847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
Manifest number: 0571
Signing time: Fri 31 Jan 2025 09:00:07 +0000
Manifest this update: Fri 31 Jan 2025 09:00:07 +0000
Manifest next update: Sat 01 Feb 2025 09:00:07 +0000
Files and hashes: 1: BlYqXPvciPfdyJ-GQUZOsP4jpLI.roa (hash: LmatIhZjxo/kiezrlbpjhiTczB9qo8t5QvMaWwqWJt0=)
2: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl (hash: xO4tdVoYrCjATFWf1Y7b157FDGN6MGLRLNDs2s6iB2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:c3:ff:f1:f5:c7:0f:8b:95:10:65:5f:f3:48:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Validity
Not Before: Jan 31 09:00:07 2025 GMT
Not After : Feb 1 09:00:07 2025 GMT
Subject: CN=90316233954d0a8b950334b65e2335392f30650e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:73:82:11:05:90:7e:78:b0:4e:6b:f7:dc:
67:5e:f1:9e:87:e3:9c:03:68:a2:68:23:cc:3d:27:
ba:83:0f:33:c4:41:49:78:e8:12:5e:91:0c:44:a4:
4c:ed:f4:da:39:9f:f0:e2:f0:83:2e:2d:8f:3b:18:
39:76:22:99:26:19:07:f8:65:8f:14:05:b3:4f:76:
4b:e3:01:2b:2b:be:0b:aa:02:36:2a:51:56:07:5c:
bf:92:f1:20:96:64:79:2d:cf:52:e7:40:03:69:54:
de:67:57:9e:8a:e7:79:e3:04:fc:e6:d4:38:d6:36:
a4:87:6a:d9:07:61:b3:17:9c:26:ee:bb:bc:13:80:
bf:11:44:62:7b:89:1f:99:34:79:49:e3:8b:e0:97:
ab:28:5a:41:5b:55:61:5f:61:44:bf:c8:5f:08:93:
a6:be:a2:18:5b:c6:eb:d2:42:b6:b7:33:bf:8b:35:
55:05:e9:3a:77:e2:30:f1:aa:3d:fa:a7:d4:17:cb:
30:38:7a:99:cb:99:3a:c7:be:30:a3:bc:c4:d3:11:
bf:73:f7:83:14:ce:51:7f:2d:2d:47:04:3f:67:cb:
4a:6f:d3:b5:93:3c:f5:d2:f8:1d:d6:a2:d6:ac:09:
06:00:3f:47:76:22:31:5d:16:8a:d6:ad:9a:99:2f:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:31:62:33:95:4D:0A:8B:95:03:34:B6:5E:23:35:39:2F:30:65:0E
X509v3 Authority Key Identifier:
keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f6:54:6d:21:a8:79:85:54:db:de:48:53:54:e2:e9:58:f3:
38:1d:07:20:77:3c:cd:da:df:9f:8b:a6:83:3c:10:3b:62:80:
b4:47:43:88:a5:66:ec:0f:2e:0d:c0:85:db:0f:b2:70:f9:3d:
bf:71:64:7f:27:39:3a:7a:f4:83:e2:d2:78:e4:38:8e:66:a0:
84:50:10:40:84:28:b6:6f:21:1b:39:68:84:f8:9e:53:e6:29:
bf:29:9e:32:70:2c:7d:8d:50:4b:fd:f7:f3:a5:8e:0d:ca:26:
99:4f:12:45:51:ba:cc:c8:11:d7:c1:ae:aa:2d:d6:f7:6f:a5:
dc:da:99:11:dd:86:a5:2e:f5:4e:ec:b5:99:41:b4:b7:1c:d3:
9d:7b:8b:0b:69:0d:b6:78:8a:eb:09:73:b7:c2:da:c3:66:ee:
71:cb:ed:b1:31:38:66:c9:3a:15:79:47:00:25:07:5c:61:1a:
7a:c9:d8:3d:ac:33:34:e9:db:74:09:84:22:34:f3:74:96:60:
70:f3:c8:26:f1:2d:0f:bb:c5:b5:44:34:57:d7:29:1b:ff:8c:
cf:cc:3f:9c:5e:ec:23:00:91:a3:af:1f:3e:b6:3a:57:7b:3f:
c9:0b:e0:9e:d5:52:03:ee:0f:70:5c:2d:e6:2f:df:a6:1f:a8:
f9:f3:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:56 2025 by rpki-client on console-fra.rpki-client.org