Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: 9LLVyZ3GedgHuRNZzphQKnq5skjdCOuNslZwBQA3mbs=
Subject key identifier: 47:0C:BA:36:36:A0:81:64:98:1C:ED:2B:6A:F5:7C:9F:FB:EB:91:0B
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 0194BABB7A4563B85BA75104BB041FF30DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 030C
Signing time: Fri 31 Jan 2025 05:00:36 +0000
Manifest this update: Fri 31 Jan 2025 05:00:36 +0000
Manifest next update: Sat 01 Feb 2025 05:00:36 +0000
Files and hashes: 1: dUaS3KgspyJ0T8WRK707oEQ6alw.roa (hash: bhT9P2ytymr/FTiOMzScdhj1xB9k9jZeaWdGvuU94lA=)
2: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: l2Hp55GDpwmdYVczrxwb/5JazypVsIA0ZnE7K2h2Wtk=)
3: nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa (hash: 8HytWsFdzKFviKTtfyGmrk77Cg5YhpoczU6o9u5sUno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:7a:45:63:b8:5b:a7:51:04:bb:04:1f:f3:0d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Jan 31 05:00:36 2025 GMT
Not After : Feb 1 05:00:36 2025 GMT
Subject: CN=470cba3636a08164981ced2b6af57c9ffbeb910b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:fe:59:aa:61:40:e9:4e:1a:e2:ad:d6:ee:
e1:06:e4:80:5c:db:9f:3c:2a:fc:fa:43:46:ed:4e:
6c:6e:a3:11:67:eb:80:4c:11:76:fa:38:40:39:5c:
86:29:08:7f:60:c5:0a:1e:ee:52:37:6e:77:1d:81:
42:66:f5:41:8a:0b:76:e9:24:eb:2d:6a:db:dd:ab:
87:0e:b0:de:52:40:04:c7:5f:e8:3b:61:76:d3:b4:
51:bd:d1:55:0d:95:db:0a:41:cf:ba:4f:a4:1b:ea:
a4:af:54:85:58:bf:84:39:b9:6f:d6:b3:ca:df:19:
9b:ee:a0:98:43:9e:2e:c7:d2:6e:c4:cf:4b:50:e7:
e6:b9:c8:b1:66:25:a6:98:1c:33:60:6f:6f:3e:a0:
f8:6b:9f:a7:78:22:c1:9d:65:28:e8:7a:c8:ea:0f:
c8:48:5b:bf:96:fa:2a:27:05:b0:8a:b9:89:ea:7e:
ed:93:61:65:91:f1:cb:9c:13:70:83:ab:d4:33:e5:
65:04:19:c1:be:12:99:fc:41:e8:5f:6b:25:3e:d4:
30:50:48:dd:7f:95:55:27:67:98:ad:45:19:d8:31:
23:41:ee:6b:a9:da:0f:a1:25:eb:53:80:22:a7:59:
42:e8:d5:52:72:ba:7a:8f:72:4f:dd:96:94:1d:78:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0C:BA:36:36:A0:81:64:98:1C:ED:2B:6A:F5:7C:9F:FB:EB:91:0B
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:32:1a:b5:f7:22:8a:4a:12:f9:22:2c:5c:ac:bd:3f:79:49:
91:ba:a0:21:22:9f:d0:40:d0:e3:c6:2d:9e:1c:97:5c:e3:a9:
72:ae:56:08:6e:c2:ea:00:b9:03:0b:72:03:e4:45:32:de:9a:
db:24:f5:11:57:6e:ef:3a:8c:56:ec:bd:80:88:29:86:5c:71:
b7:e8:96:33:70:e7:83:ff:4e:26:37:64:b6:4e:79:6b:be:fd:
eb:19:09:69:61:6b:07:38:21:61:0f:78:3c:43:7f:b6:42:76:
21:76:0f:0c:b3:56:53:f7:b8:64:6b:f6:a2:71:a5:6f:c6:4d:
50:6e:8e:28:7e:26:5a:fd:8d:8e:ec:5f:b2:f8:45:40:fa:64:
f7:cc:56:5a:32:0a:7a:33:dd:4d:4f:08:6d:62:07:eb:6f:ba:
e8:e9:5f:99:7c:8b:b7:f0:ed:38:85:af:e3:d0:c8:5f:55:ac:
56:92:2e:36:80:74:96:f2:08:1f:5d:75:59:08:85:70:18:51:
ac:83:68:a9:8c:7b:44:e0:43:1f:f3:54:81:57:eb:28:aa:be:
47:49:54:72:2c:c2:73:ee:5a:4c:07:2c:39:76:2f:63:ca:2b:
d9:cc:ba:90:89:c7:b1:5f:e4:e7:57:47:ed:8f:2e:cb:a3:88:
3b:a3:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:40 2025 by rpki-client on console-fra.rpki-client.org