Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
File: nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json)
Hash identifier: 6zKFDKWsxBE4E7Cede12HOCDmD/htM/FbhFptLPvnKU=
Subject key identifier: 0A:C2:D9:4C:6C:0A:46:61:D7:F4:13:10:65:C9:8B:46:FB:96:4F:2D
Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Certificate issuer: /CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Certificate serial: 0194C387CBDB1D48030F885658AA683D2F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
Manifest number: 142B
Signing time: Sat 01 Feb 2025 22:00:43 +0000
Manifest this update: Sat 01 Feb 2025 22:00:43 +0000
Manifest next update: Sun 02 Feb 2025 22:00:43 +0000
Files and hashes: 1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: 94p+fOznhSoQGGXE91qJ22uEww4vQLdSO+MfcZ4DiGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:cb:db:1d:48:03:0f:88:56:58:aa:68:3d:2f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Validity
Not Before: Feb 1 22:00:43 2025 GMT
Not After : Feb 2 22:00:43 2025 GMT
Subject: CN=0ac2d94c6c0a4661d7f4131065c98b46fb964f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:65:5d:8b:88:20:0c:4d:38:17:93:79:a7:
24:f1:db:82:1c:10:07:6a:ea:4a:0d:44:94:df:b5:
f2:27:49:f3:b5:9a:be:8f:86:e6:7c:5e:3e:58:da:
a9:65:eb:86:b4:58:9a:c0:b2:b7:19:07:b3:f7:1e:
7d:be:65:a9:12:09:be:02:1f:3c:cd:92:c2:83:a1:
3a:41:a8:2f:f0:41:be:58:d8:16:70:de:fc:bc:09:
fa:83:4f:ac:a7:b8:3a:7b:77:52:81:da:d2:52:65:
6f:36:02:20:a5:7a:4e:f0:dd:c4:71:03:3d:c1:e6:
8b:04:f2:71:66:a9:8c:9b:97:7b:37:4c:34:77:50:
08:b1:53:6a:47:f3:62:3b:e4:cb:8c:87:d7:98:a8:
2f:27:06:c9:49:4c:16:81:6a:ee:41:94:c1:08:01:
81:0c:7c:b9:26:ef:9e:ce:41:8e:cb:a4:95:c0:73:
30:eb:6d:c1:55:8c:21:16:5d:34:f2:2d:a5:3d:c2:
69:75:5e:5f:02:76:fd:8c:81:f7:87:c6:4f:e1:9c:
5c:be:33:d4:fb:05:a6:cb:8c:ba:d4:c2:1d:3f:80:
d0:72:a8:03:26:c6:62:bd:9b:4b:46:cf:75:9d:0a:
97:35:d8:35:eb:5d:26:be:33:8e:df:03:dd:a8:ba:
b6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C2:D9:4C:6C:0A:46:61:D7:F4:13:10:65:C9:8B:46:FB:96:4F:2D
X509v3 Authority Key Identifier:
keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:73:42:40:38:bd:97:68:18:e9:7d:0c:0e:3c:16:d4:18:4d:
5c:1b:67:2d:04:23:4a:0c:1f:f1:2c:a0:1e:93:fb:e7:4e:c1:
2d:fa:9a:84:aa:cc:9c:83:2d:b9:11:ca:61:e6:94:ac:5e:ac:
fa:d9:af:39:c3:92:60:b6:89:23:9a:1d:1d:b2:04:da:d6:79:
62:c3:9e:1f:2f:2f:e3:29:65:b2:06:16:cc:bf:1e:8b:4d:a1:
b5:40:c6:50:26:37:03:6f:99:55:82:cb:7d:87:98:0f:70:b7:
6f:52:61:80:54:8a:8f:b2:09:7f:70:cf:94:cf:46:c7:11:9b:
1a:7b:a6:75:d5:33:05:63:22:98:9c:ae:cc:d5:b0:7b:ce:09:
8f:30:1c:22:83:20:88:95:c9:64:cc:05:f6:80:16:ca:e9:68:
82:88:47:41:78:28:22:5c:a9:0c:12:fe:7c:ca:86:a7:4a:c5:
58:fb:3a:7e:66:d8:cb:ea:b5:81:67:85:96:9f:6d:18:b8:4d:
d4:eb:f2:ab:d5:09:66:b3:60:ba:5f:72:64:73:ab:56:d1:86:
07:9c:26:6d:66:35:91:16:90:2d:cf:9e:31:d1:de:52:c1:71:
a6:68:f1:b1:f1:1a:df:43:f6:2e:55:4b:13:c9:a0:b7:a1:a5:
fd:41:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:30 2025 by rpki-client