Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
File: NkUaLqQK8XFeYxMWlGiZaspxu4o.mft (raw, json)
Hash identifier: mBw3ocLPqBfKJdbQ8RGLzyUmJqbpD2gkEVjOD5JuX48=
Subject key identifier: BC:35:91:45:31:1F:60:1D:DB:C3:8C:78:48:45:51:82:AA:FD:B1:83
Authority key identifier: 36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
Certificate issuer: /CN=36451a2ea40af1715e6313169468996aca71bb8a
Certificate serial: 0194C3F604AC35DA9E2A516C5119BDD5A2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
Manifest number: 0973
Signing time: Sun 02 Feb 2025 00:01:07 +0000
Manifest this update: Sun 02 Feb 2025 00:01:07 +0000
Manifest next update: Mon 03 Feb 2025 00:01:07 +0000
Files and hashes: 1: NkUaLqQK8XFeYxMWlGiZaspxu4o.crl (hash: XienNBc3wruXKSRy26exH3KVya/zg7w+gIh9iDg6xYg=)
2: O0F84RWu36-icdnEP0gqMSZmFC0.roa (hash: VjIGx/MTrmEnOtVvtOZHwU506/ftw5kzWXyYKquguXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:04:ac:35:da:9e:2a:51:6c:51:19:bd:d5:a2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36451a2ea40af1715e6313169468996aca71bb8a
Validity
Not Before: Feb 2 00:01:07 2025 GMT
Not After : Feb 3 00:01:07 2025 GMT
Subject: CN=bc359145311f601ddbc38c7848455182aafdb183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:22:64:37:6d:d0:3a:74:1a:54:4c:a6:d9:
97:05:fd:15:1d:2f:46:6a:79:26:b6:59:95:e2:27:
99:c7:8f:0f:07:e2:e8:05:10:9d:63:ec:7e:70:4f:
b6:92:26:83:0e:c9:e6:34:6f:09:91:82:47:a7:91:
9a:7c:cf:46:58:00:fe:5c:82:cb:05:e4:ce:1f:d0:
e4:c0:a6:a6:1a:c6:6e:c6:51:7b:9a:16:79:d9:61:
37:f1:2c:10:50:74:51:24:6e:ce:b8:86:11:e5:9a:
12:de:de:d5:d8:cc:e7:61:f3:3c:30:71:5c:d4:1a:
f8:81:e6:56:3f:88:67:af:bb:bc:31:3c:2e:f6:85:
6f:ea:f5:7f:dd:ed:bf:57:3d:45:78:18:27:22:16:
c0:8f:0d:30:2e:76:44:a4:ad:c5:20:47:0a:d2:5a:
64:03:d5:51:fe:e9:e5:8f:7d:dd:f3:89:34:99:41:
07:c7:2e:3b:74:5d:48:e3:57:3b:ee:b3:0e:34:5e:
eb:d5:20:54:31:cf:b8:0d:cb:8f:62:82:89:6b:f6:
32:b5:ab:9d:72:f7:9b:d7:85:a5:00:0d:c9:d8:ad:
69:10:70:ac:8b:4e:c4:d8:89:49:b8:64:20:4a:53:
c3:9a:a3:c8:d8:bc:55:3f:9b:05:6f:ac:0e:d4:55:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:35:91:45:31:1F:60:1D:DB:C3:8C:78:48:45:51:82:AA:FD:B1:83
X509v3 Authority Key Identifier:
keyid:36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a5:a6:45:67:7c:60:f0:fa:43:8c:b0:3d:ee:cd:c3:e4:d5:
33:c9:26:49:e0:2b:fa:10:41:85:73:63:6e:38:83:ee:d3:e0:
19:17:d8:ce:5b:d6:33:78:53:3d:8f:d7:56:f8:00:8a:e6:a6:
fb:7a:4a:f7:ad:29:d3:ef:c9:31:5f:93:88:4f:68:77:7e:23:
88:ac:bc:3a:9e:3e:63:a4:5a:4a:fe:d1:29:60:0b:35:7d:8c:
57:b7:cd:42:c4:56:a7:c6:1b:5f:ee:98:4e:0e:a5:ee:24:24:
7c:03:c4:00:97:74:c4:ac:8a:be:5b:1a:a6:52:46:a9:3f:3f:
8e:65:57:cf:d9:af:8c:9d:85:a6:aa:99:61:de:41:cd:67:b4:
0e:5c:d4:5a:bd:bb:f2:6f:70:4f:a2:95:85:60:21:cb:f0:4a:
bf:7c:db:01:ab:85:84:3e:e7:b9:dd:8d:af:80:81:90:42:0f:
7c:f6:b1:cc:97:99:f5:25:78:7b:01:2a:f8:aa:3c:af:72:24:
5b:f2:8c:95:78:c2:b5:f5:ae:78:cd:8e:1e:c5:8a:ed:22:9b:
34:cf:a6:8d:65:0d:77:51:8a:a0:71:b0:59:9f:ae:c7:ff:57:
03:0d:5b:c6:10:f8:96:1e:b1:ab:c5:1b:e4:aa:88:9f:55:be:
8f:38:92:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:08 2025 by rpki-client