Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier: zWUcz9uOK9Sv72h2WZ59v+1juvi5IChtrmIi83z9Rvo=
Subject key identifier: 34:90:59:FA:1F:B0:BE:D6:D7:24:88:C4:13:C6:4B:8D:75:0B:59:C4
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 0194BB60184ACDE473266A701BD5225BD7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 08:00:24 +0000
Manifest this update: Fri 31 Jan 2025 08:00:24 +0000
Manifest next update: Sat 01 Feb 2025 08:00:24 +0000
Files and hashes: 1: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: i5tE46HbQx1+0z786tl4e0XDhEUSiid2dMVE5/SO9pI=)
2: v9WYkBz15RpwA0n7rXgCIDyTPvU.roa (hash: vUv7k6coWvAmWrqVuPUy83SA1mmkmDGBast/PkGxxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:18:4a:cd:e4:73:26:6a:70:1b:d5:22:5b:d7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Jan 31 08:00:24 2025 GMT
Not After : Feb 1 08:00:24 2025 GMT
Subject: CN=349059fa1fb0bed6d72488c413c64b8d750b59c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:22:39:e3:47:84:1a:87:2a:7f:9d:8b:57:
22:95:6e:33:08:46:f1:5f:e3:9a:6a:62:7f:cc:67:
be:8b:80:61:6b:39:31:ff:7c:78:2b:82:70:35:de:
1b:fc:66:14:09:ce:b2:7d:12:21:7f:f3:10:6a:1a:
ed:99:26:c8:a0:b3:4f:c3:a6:b8:d2:1f:db:33:71:
08:8a:01:55:e5:21:9a:e4:0f:35:49:ea:da:cb:24:
29:49:5b:79:b7:1c:92:23:b8:96:95:e9:c7:ad:c7:
d1:b1:c2:e3:88:45:e7:60:c4:f3:f2:77:4e:6a:f0:
59:f1:ca:71:3c:fe:a5:02:f0:1f:3e:9f:77:2a:27:
5c:92:7d:b7:8b:e6:22:11:d7:e6:2d:22:bc:85:4f:
c4:b3:74:90:06:00:ab:0d:73:ed:a5:49:e3:8f:30:
05:60:9d:55:92:58:c0:29:8a:b2:87:63:9a:93:39:
ca:31:6d:64:2f:af:54:ee:e7:8b:a0:86:67:38:6e:
24:02:c5:c6:9f:8f:59:83:62:c1:d5:11:63:02:3c:
f6:a6:55:66:e2:79:f7:ee:00:bb:ce:1c:f7:a5:cd:
15:4a:cd:4e:17:f8:7c:98:67:14:66:e9:92:10:ef:
8c:29:01:12:d9:e8:97:83:96:b1:25:52:db:1d:b4:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:90:59:FA:1F:B0:BE:D6:D7:24:88:C4:13:C6:4B:8D:75:0B:59:C4
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2b:1c:62:5f:01:5c:6d:5f:67:d9:a1:36:9d:85:e0:58:93:
30:68:55:87:d2:81:e6:df:a2:7e:cc:fa:46:5f:7f:bf:8c:50:
e1:f2:53:29:50:2e:c5:a7:0e:dc:f4:af:ec:25:6c:b7:ca:d6:
e6:7a:c5:de:5a:5e:2a:70:7e:d0:a1:ce:aa:1d:10:ac:c3:67:
8c:56:72:1b:a6:a9:0d:ae:b6:3e:86:e1:6e:2c:64:4f:e5:ac:
a5:9f:6a:3c:29:f6:06:70:30:c5:63:07:05:2e:d3:74:fd:e9:
6a:2d:ea:22:51:b1:d5:29:3c:d1:63:8b:05:af:9e:09:f9:7a:
c0:86:92:81:71:4f:05:89:56:c7:49:0e:e9:ed:66:b1:8e:c7:
49:26:d4:89:de:bd:1b:34:3f:3b:46:1b:30:b5:55:c4:7e:ae:
70:52:79:de:08:31:55:98:52:ec:9c:1d:5c:c7:35:cf:f4:8a:
b5:11:60:47:36:3e:9d:e4:b3:93:73:4e:8a:c3:04:cb:10:1e:
76:b1:92:ec:62:e4:6e:9f:92:67:bf:79:01:5e:7c:8e:7f:37:
f2:8e:5f:20:bf:60:d0:a0:30:f8:a5:27:51:9c:65:8c:4f:4c:
5c:55:42:c7:2d:b5:9c:f2:99:f8:f2:72:3e:bd:fb:3f:97:03:
b6:72:31:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:08 2025 by rpki-client on console-fra.rpki-client.org