Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
File: niN_MrrhSoH9on6ylGDDoO2jQkA.mft (raw, json)
Hash identifier: 5zclv9CZtEfc8OfI6IpWvL6maYACwcxC9dtupFrnrUE=
Subject key identifier: B7:7B:1E:D2:F9:50:4A:2C:5D:FE:0D:21:62:4C:8B:38:64:1E:DC:19
Authority key identifier: 9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
Certificate issuer: /CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Certificate serial: 0194C4D1674F105E204CCACB5D9080EDDD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
Manifest number: 0C35
Signing time: Sun 02 Feb 2025 04:00:45 +0000
Manifest this update: Sun 02 Feb 2025 04:00:45 +0000
Manifest next update: Mon 03 Feb 2025 04:00:45 +0000
Files and hashes: 1: duyGpoRiUSXpX71VT4XYnZHmGlA.roa (hash: BUaqTN98K6qCPpPRz7Abj2KUlyE692OgtKSmoKCDJkM=)
2: niN_MrrhSoH9on6ylGDDoO2jQkA.crl (hash: u8KZmiqFQEhhWaOZVZJKNDdWw3OBhU0p1ste2OLmse8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:67:4f:10:5e:20:4c:ca:cb:5d:90:80:ed:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Validity
Not Before: Feb 2 04:00:45 2025 GMT
Not After : Feb 3 04:00:45 2025 GMT
Subject: CN=b77b1ed2f9504a2c5dfe0d21624c8b38641edc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:f3:55:9f:89:76:ca:4b:35:73:59:22:ed:
36:7b:82:0c:0f:42:6a:2b:b3:81:c3:71:8d:c1:e2:
d9:0f:c0:93:d7:31:3b:03:d6:1c:fe:20:17:86:71:
5e:c6:05:77:aa:59:53:47:1b:e9:a8:1b:f5:8a:3b:
1c:45:f9:0a:8f:79:b2:79:98:cc:07:5d:47:d9:6c:
1f:a1:f2:3e:e0:41:c4:a7:cd:e5:10:b7:0c:6b:92:
c0:77:66:2e:b2:4d:cb:8c:7c:98:84:c3:29:ba:7b:
62:70:89:81:ae:ca:f9:b7:a9:b1:0b:d0:fe:81:73:
57:bc:f7:a8:b6:56:ab:48:97:2a:8d:e4:4c:65:b4:
b5:d2:d3:17:dc:70:1d:73:f7:21:39:be:68:7e:2e:
3f:46:d9:7e:5d:ac:60:2b:06:e1:2d:ef:47:e6:37:
31:e6:b4:bc:67:00:e5:5f:19:9a:cc:ea:35:4e:65:
42:11:e4:e1:b9:29:ce:1c:ba:f5:66:14:42:fc:99:
e6:e3:bd:56:15:27:a6:fa:2b:ab:5a:8a:36:18:33:
e7:5c:d0:fb:16:7f:da:ca:d0:25:db:ac:5f:18:c6:
2a:89:ac:e2:34:0f:2d:a5:a2:4a:8a:1f:d0:fc:75:
66:b1:9f:83:b6:51:b7:40:46:b5:7b:57:53:35:95:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7B:1E:D2:F9:50:4A:2C:5D:FE:0D:21:62:4C:8B:38:64:1E:DC:19
X509v3 Authority Key Identifier:
keyid:9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a1:8e:4a:a3:68:69:46:67:f1:d6:3c:18:c7:ee:81:ea:7e:
af:9e:db:58:b2:22:f9:2d:5d:5a:0c:13:13:28:35:ce:fa:b1:
a1:19:4d:44:b9:32:22:1f:9d:22:59:94:b3:19:86:9e:89:d9:
12:2b:bb:b6:a3:26:70:77:3c:7e:1f:78:87:22:59:b6:c0:97:
5e:7a:ad:4c:ef:e0:60:19:18:5e:34:8b:ce:d5:2b:cc:84:cd:
ce:cc:8b:bb:4e:71:35:54:ba:5e:5e:4c:d0:06:2b:a9:2d:24:
11:5f:cf:36:c7:8a:52:89:77:cb:0e:b3:c0:69:d3:10:a5:ed:
9a:38:c9:9e:be:6e:2d:2e:8d:1b:6a:bc:08:e3:a5:23:34:b3:
29:be:c0:bc:fa:07:c6:38:f1:5e:a4:ea:1c:8a:bd:47:54:cc:
1a:f0:5d:16:13:fc:b3:30:16:0b:e5:a6:0d:c2:21:4e:2a:88:
59:f2:70:62:13:59:86:00:ad:37:5d:e1:dd:26:06:4c:c2:ea:
53:53:37:67:e7:c4:d5:b9:17:11:f0:b2:85:62:29:2f:40:47:
6d:72:09:e2:d0:bf:63:17:62:f1:6a:c3:ea:11:67:65:e6:4b:
40:55:5b:79:2d:fa:3a:e5:f8:76:e4:34:16:fc:4c:1b:15:05:
89:88:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:50 2025 by rpki-client