Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
File: nmw2D-XITxlWHHrpu89PnPpHi08.mft (raw, json)
Hash identifier: hzeeg21jhupjdkOB2jVoyjwgf8tiOo1Wg1qRUuNy2jU=
Subject key identifier: B8:BE:44:85:D2:54:E6:79:F2:74:54:89:9B:CC:16:38:23:F0:24:D5
Authority key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Certificate issuer: /CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Certificate serial: 019512104356FD216E078EC1C99C6AC83DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
Manifest number: 070E
Signing time: Mon 17 Feb 2025 04:00:10 +0000
Manifest this update: Mon 17 Feb 2025 04:00:10 +0000
Manifest next update: Tue 18 Feb 2025 04:00:10 +0000
Files and hashes: 1: nmw2D-XITxlWHHrpu89PnPpHi08.crl (hash: CHbJTpt8yJG6VoEb3TfEexfgKFEgZVhj2ML40Qfoxcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:43:56:fd:21:6e:07:8e:c1:c9:9c:6a:c8:3d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Validity
Not Before: Feb 17 04:00:10 2025 GMT
Not After : Feb 18 04:00:10 2025 GMT
Subject: CN=b8be4485d254e679f27454899bcc163823f024d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e9:92:d8:18:c2:5c:c3:e2:1b:5d:82:46:d0:
0d:18:27:0d:8c:ce:2b:05:69:75:6b:62:61:ee:0a:
1d:a7:3e:b9:6a:f7:58:f8:ed:7a:07:b0:8b:81:63:
8d:7f:5c:2d:df:be:9d:48:f0:54:39:c1:c2:15:7a:
4a:05:db:b2:64:05:10:64:d2:f3:b2:5d:01:ed:5e:
a0:77:50:69:20:d5:a9:84:aa:16:4e:87:df:01:d4:
c0:07:fc:a9:ec:b0:53:6d:2d:18:62:94:f0:d3:65:
de:05:03:ee:a6:f2:ac:36:81:05:bf:3d:42:6c:da:
00:e2:44:00:df:e3:08:46:a7:6e:dd:3a:f2:4c:44:
fb:a5:94:c2:a5:a5:04:43:fc:1a:a6:0c:b3:4c:c0:
07:1a:36:1b:b8:be:05:43:80:43:9e:80:e4:c8:f2:
05:05:24:56:57:88:e1:3b:67:fc:38:39:89:9d:c9:
ce:12:6a:1f:de:87:9e:c1:ed:55:e1:c1:3f:8d:1c:
70:19:00:19:71:82:75:e0:a2:a9:a0:82:1b:04:b3:
e0:ee:ad:cd:b3:6f:94:90:d8:8c:ff:9f:4d:07:46:
6c:74:fe:da:4b:cb:df:4c:d6:00:9f:4e:cb:08:f2:
89:1c:d0:a9:08:75:c1:97:8b:16:13:30:6f:4f:c2:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BE:44:85:D2:54:E6:79:F2:74:54:89:9B:CC:16:38:23:F0:24:D5
X509v3 Authority Key Identifier:
keyid:9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:02:38:3c:b1:6e:cc:77:f1:1e:77:52:e9:95:65:4a:53:fb:
0c:0c:d2:55:37:59:46:fb:c4:1a:3b:69:c6:41:5c:cd:12:76:
35:83:d6:55:86:ce:13:df:d6:8d:d9:a7:8d:7a:3f:f0:e5:ff:
5c:3c:cf:59:71:c7:4a:f7:83:1a:24:b9:dd:67:f7:d7:7c:7b:
89:88:ba:d9:a1:74:c4:8f:b5:e7:dd:00:70:70:e3:33:76:1b:
d1:6f:11:73:e9:7f:cf:1e:70:cc:45:2e:2d:f8:51:d8:4f:af:
6a:5c:68:f5:2d:14:36:0e:14:c8:b9:90:0b:94:c9:a3:eb:eb:
19:38:32:00:a6:cb:d4:d8:61:1f:42:20:50:95:b8:ec:5a:c1:
31:84:3f:c9:79:90:93:90:45:51:95:da:29:ab:3a:7e:82:d2:
37:f5:25:ee:fc:c5:fc:68:7a:5c:4c:1f:d9:30:16:17:1d:85:
0e:2d:24:5a:66:41:2b:f4:1b:be:b2:08:bb:59:c6:b7:65:bf:
ad:4d:be:83:b9:98:48:f0:46:05:e4:f8:cf:41:9e:a8:ac:5d:
33:47:2e:94:2b:7d:59:a0:ad:ff:97:60:10:21:b9:30:11:61:
26:96:08:59:d5:9e:eb:f5:64:ac:2b:dc:f6:9c:fa:31:76:38:
e0:08:93:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:38 2025 by rpki-client