Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: T8PLfehSrkqqwTu9gr2n5COAvONeHHd7lgxQbphIGfQ=
Subject key identifier: 41:AC:9F:A1:C0:56:1D:03:97:C4:58:8A:74:9F:2B:48:D2:F6:28:3B
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 0194C3BEA0D95F47FBDAFBD63DDEA7B9350E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: BA
Signing time: Sat 01 Feb 2025 23:00:37 +0000
Manifest this update: Sat 01 Feb 2025 23:00:37 +0000
Manifest next update: Sun 02 Feb 2025 23:00:37 +0000
Files and hashes: 1: bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa (hash: EJPg3LL1a0LdpJ0FryPnZdGj4+/hRiOP31APEGYRAlc=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: DvcD/2dtWuZ/rJ8+/xyhK5fubuAObxudh1pP8U7BBw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:a0:d9:5f:47:fb:da:fb:d6:3d:de:a7:b9:35:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Feb 1 23:00:37 2025 GMT
Not After : Feb 2 23:00:37 2025 GMT
Subject: CN=41ac9fa1c0561d0397c4588a749f2b48d2f6283b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3e:61:11:79:5f:1d:93:5e:93:61:67:96:13:
bc:45:59:22:f6:78:26:8b:25:2c:a4:1c:a4:ef:2f:
4e:6a:8f:76:f1:ba:0b:51:ac:2c:73:a9:50:7f:fc:
0c:30:b2:cd:e1:e2:55:7c:5d:bd:15:38:c2:58:6a:
f8:4a:ce:27:05:0f:72:4f:e4:62:05:44:28:8b:5b:
1b:d9:01:85:8e:20:a6:7e:74:29:40:68:43:64:b1:
be:be:e4:1d:bd:0b:5a:3b:e7:fb:82:94:f2:b2:f9:
98:b2:87:95:48:d3:eb:b0:16:82:62:0c:69:0e:13:
5c:a3:38:c9:2f:2b:00:4d:bc:ba:2d:27:ce:1d:6e:
eb:18:ac:ba:68:7a:7e:d6:16:96:0c:6b:d3:0c:27:
86:69:09:3e:d4:34:a9:16:e8:da:45:d9:13:16:3b:
12:22:a5:22:26:e1:70:0d:39:97:7a:b5:1e:c2:0d:
33:07:e0:09:29:58:4d:6f:c7:cd:76:ad:9c:54:4f:
2d:d1:30:3d:1e:df:da:fb:1f:9e:2b:63:4c:92:4f:
78:06:9f:22:d5:94:04:82:9c:fb:45:e3:09:87:bb:
00:bf:72:51:36:56:9e:3b:f8:57:64:97:1e:50:f4:
2f:6f:3a:4d:f5:b8:8b:60:d2:25:13:83:86:df:c3:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AC:9F:A1:C0:56:1D:03:97:C4:58:8A:74:9F:2B:48:D2:F6:28:3B
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:13:c8:d9:97:9d:b4:54:3f:db:d4:45:be:f2:a6:ab:1b:49:
9e:a5:6d:f7:e0:c5:af:12:1d:33:db:37:12:14:3f:58:e7:30:
7c:ea:ab:9e:66:e1:53:57:22:2e:59:62:e7:eb:db:51:e9:c8:
b1:d3:7e:16:59:79:67:e8:ea:2c:17:32:dd:23:9c:c4:93:75:
79:07:06:0c:a7:f2:b1:0b:81:01:28:4c:a4:26:de:92:1c:40:
66:ce:89:1b:96:3f:14:b9:c4:fe:a3:4d:bd:98:5a:08:cd:97:
15:cc:4c:74:a0:48:6d:7a:25:bd:56:9c:8d:80:38:ef:dc:3a:
fb:04:64:94:37:9e:be:c1:0e:de:26:c1:2c:87:41:47:21:ac:
76:b1:23:f5:75:89:96:60:ab:b3:2b:b2:3c:ce:91:3a:65:18:
6e:68:d7:65:e8:4f:e8:cf:c8:5d:2b:31:58:82:95:72:38:08:
be:1f:cb:20:8d:8b:77:13:87:f1:d3:ff:98:3b:6f:77:19:dc:
17:a2:ba:19:38:23:35:49:08:84:a9:53:4e:78:76:2f:ce:bb:
12:ad:7e:b9:70:bc:18:76:2a:61:fb:ab:88:c1:07:04:d4:49:
5e:1e:37:f9:26:97:7f:1b:a1:af:5b:50:98:af:22:d6:e4:7e:
b6:c6:7d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:02 2025 by rpki-client