Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
File: NOg_QeXSQlTJCobjsrt6gK8DlyE.mft (raw, json)
Hash identifier: 0D4wPPF/Iw/alT0ObQp/8LTqU++ZK+dvIGzoYgjn9KA=
Subject key identifier: 89:24:1C:21:FB:2B:B2:84:B7:18:DD:38:C0:FB:39:C4:1E:F0:92:E1
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 01957834002447E6172C395C9EC2EABF0228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
Manifest number: 131F
Signing time: Sun 09 Mar 2025 00:00:28 +0000
Manifest this update: Sun 09 Mar 2025 00:00:28 +0000
Manifest next update: Mon 10 Mar 2025 00:00:28 +0000
Files and hashes: 1: NOg_QeXSQlTJCobjsrt6gK8DlyE.crl (hash: cKjcdsxCwhclwzg2tiHE7nKbnrE3rCE5NfTBXsof/a0=)
2: UO1KioDak-iT8kDHcohpIq9FtOw.roa (hash: c3Q9cGyrR1r4x1r6NclTtEj7o03+DJv3Ywm72vFkEgk=)
3: kh50C_NbBjs1xffmc65N3htJRDA.roa (hash: zegMkFf00MvL1ZefKCFbf5kmHagYnvltoauO7HXIkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:34:00:24:47:e6:17:2c:39:5c:9e:c2:ea:bf:02:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: Mar 9 00:00:28 2025 GMT
Not After : Mar 10 00:00:28 2025 GMT
Subject: CN=89241c21fb2bb284b718dd38c0fb39c41ef092e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:04:6e:2f:b4:93:e7:73:16:d2:07:76:26:58:
01:67:96:94:51:51:9b:1f:03:36:d3:91:33:bf:15:
a6:3f:1e:65:1b:9a:75:52:ea:cb:31:fa:83:b7:fd:
a5:86:35:40:71:cd:ee:96:6b:ee:f7:07:f6:4b:06:
06:74:c3:8c:52:21:e8:0c:96:3f:23:34:38:04:13:
4f:10:cf:8f:cd:b8:ce:2b:9a:c8:bb:62:3a:d1:69:
93:a5:a6:cd:d6:e8:16:a3:9b:72:00:bd:77:bb:80:
65:c6:3d:24:1e:a9:ff:0b:c2:e8:b1:e3:15:59:89:
81:4a:5c:68:bc:43:43:ff:2c:0d:4b:bb:f1:ce:c8:
e8:53:2e:8d:f4:62:e4:c2:b0:0c:98:8a:08:12:15:
08:a8:da:25:2b:4d:56:1e:bb:c6:46:db:c5:69:44:
fa:9c:cd:63:5c:53:96:0a:d9:cd:50:15:9a:51:52:
a7:c8:02:96:5a:1b:30:86:04:74:04:80:fb:5c:5c:
fb:24:6d:f3:90:bc:9b:5d:3f:aa:1e:b8:4e:be:33:
f2:c9:cf:67:72:00:f5:3b:15:e7:37:5a:83:de:1d:
3d:17:d6:76:34:e9:1e:aa:4d:57:4b:5f:3f:e8:8b:
58:6f:d5:93:52:43:1b:aa:a2:e2:ab:35:cb:cd:7b:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:24:1C:21:FB:2B:B2:84:B7:18:DD:38:C0:FB:39:C4:1E:F0:92:E1
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a2:2d:b7:99:8f:4a:e6:72:7c:8e:1c:58:7f:7e:e2:87:19:
e1:3a:28:19:6d:cf:9d:14:2b:85:ab:d4:c2:9d:17:88:42:b6:
57:ff:dd:3a:9f:6d:11:97:42:d1:79:fb:af:83:3a:f9:6d:45:
6d:f7:5e:e0:e0:36:b3:f8:c5:e2:3a:b0:47:37:cd:09:46:97:
76:ee:9a:a0:23:e8:04:12:0d:9e:a0:f9:82:94:27:be:60:9a:
3f:c9:9f:d5:bb:31:1d:bf:85:b8:c2:bd:77:31:e7:10:19:4c:
22:10:7a:3d:7a:12:2b:e2:b6:c8:96:a7:f3:cd:ea:56:83:85:
cf:b2:92:a8:f6:ab:f0:87:22:7a:1e:8f:36:57:21:69:75:87:
c7:83:af:e7:13:2a:20:70:5f:ba:ff:a1:4c:5c:93:df:60:7f:
ed:aa:91:23:cf:01:f7:1e:eb:05:45:98:71:87:3b:8d:b3:45:
9e:82:b0:f5:08:bc:b9:f6:78:cf:69:ee:46:b9:81:a8:38:05:
d0:29:11:0c:8a:fb:f8:6e:8b:cc:a4:91:69:ff:c5:60:71:12:
50:0b:b1:3d:fa:5f:84:8c:30:9b:ce:15:f0:dd:af:03:35:90:
7c:58:7a:6a:ff:dc:04:8e:f2:48:5e:f4:03:96:9a:31:cd:bb:
50:3f:c3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:13:42 2025 by rpki-client