Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier: Uytu9gQWVY3nUxV39EyT1/pV+lYNdI/pf7QF3ZUxi6M=
Subject key identifier: 1A:B5:9E:09:23:DD:A1:FD:7D:EE:C7:2B:6B:7B:D4:C5:23:C3:D6:3F
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 0194C4637F2A0EDADE481954A4AAAC5610E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number: 142C
Signing time: Sun 02 Feb 2025 02:00:42 +0000
Manifest this update: Sun 02 Feb 2025 02:00:42 +0000
Manifest next update: Mon 03 Feb 2025 02:00:42 +0000
Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: 5+vVFjOVtG/GuQNhTG3Zdb12cr8K6oZe+KUQSmWKsts=)
2: kVipI_xyp0_kuJlOJOnoAHsePks.roa (hash: 1FUuhHfAvSDiWJAZOii+4sL3nFhAdH6ZW0fC89DJLKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:7f:2a:0e:da:de:48:19:54:a4:aa:ac:56:10:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Feb 2 02:00:42 2025 GMT
Not After : Feb 3 02:00:42 2025 GMT
Subject: CN=1ab59e0923dda1fd7deec72b6b7bd4c523c3d63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:c7:83:41:6f:28:e3:37:2b:bb:6a:72:26:
66:af:9c:a7:1a:82:fa:85:85:dd:ad:67:71:51:73:
dc:f8:41:f8:a6:8d:8c:d8:88:d2:e9:f5:76:d0:25:
58:72:3b:9b:30:0d:61:5b:10:3e:75:02:07:91:16:
85:8b:96:d6:a6:42:dd:8f:7a:e9:e4:8f:2b:71:45:
06:13:52:dd:a6:90:80:5e:ec:0e:b1:b1:34:d1:5e:
4b:74:07:8f:fd:79:1b:97:1c:8a:f5:43:66:68:90:
a3:d2:05:1e:ba:43:31:4e:27:08:43:ab:27:52:b8:
4b:e9:f5:33:74:ff:b2:3f:ce:9f:d5:65:96:fe:4f:
cc:a7:d4:a8:69:9d:19:78:8d:ab:9e:f4:7e:ae:75:
50:d0:d2:01:d6:be:78:52:52:86:0c:5e:b7:d0:aa:
0f:17:84:58:6a:d6:8d:a2:bf:b8:72:22:cb:07:0a:
ee:08:7e:56:63:12:2b:8f:f0:6b:a9:19:b5:2d:76:
23:24:5a:27:53:3b:eb:f3:eb:3c:a8:5f:b9:ad:e4:
3d:ff:5b:50:e8:03:63:fc:14:e5:d0:d9:65:79:59:
31:f5:4f:9a:51:06:69:ee:b8:3f:e1:08:a1:23:ee:
b8:11:9e:ba:75:89:16:34:a5:55:94:d6:7d:5c:e0:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B5:9E:09:23:DD:A1:FD:7D:EE:C7:2B:6B:7B:D4:C5:23:C3:D6:3F
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:02:c3:3d:88:16:6d:4e:91:10:74:bd:9e:84:88:6e:6a:fd:
6e:7d:0b:2b:99:63:07:97:79:2f:25:3c:cd:3a:6c:15:eb:d8:
2c:35:5f:3f:1f:49:f3:a3:45:7b:c3:56:ad:ef:b2:38:0b:20:
d6:53:8a:6c:6c:4a:1d:e7:93:ee:8a:fd:49:4d:06:ec:33:fa:
42:dc:a5:09:76:05:98:de:f7:9c:38:27:36:b1:72:5d:7a:b9:
30:d6:b1:20:0c:b9:09:2d:1e:2d:f1:a6:6f:37:36:ff:58:35:
65:e0:f5:e4:1e:8d:6e:22:91:95:b9:13:07:f9:7d:1c:3c:2a:
c3:e7:84:1d:84:42:e8:fa:55:ab:46:54:77:63:97:e2:96:8b:
22:30:35:d6:a5:93:39:ae:2c:35:61:1f:c1:be:48:6f:30:83:
b1:7c:6a:69:db:20:6f:8d:f1:f7:7a:59:1e:b0:ae:6a:0f:03:
b6:97:b0:3c:4c:66:de:a7:e5:ee:23:c1:c9:d1:a5:07:8d:20:
25:ed:96:d7:3b:0a:18:62:a7:0f:7e:8e:4f:d1:49:89:dc:29:
af:6c:bc:91:25:66:cc:7b:36:04:54:80:c2:c3:80:8f:a9:0d:
15:75:c9:dc:4f:9a:dc:6f:a1:c3:5e:05:c2:46:22:e9:b3:29:
5c:f9:d1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:20 2025 by rpki-client