Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json)
Hash identifier: Zjfbu9Ooljb6KZJ47RdpZ+hrLgVNHeumhH5opk8rock=
Subject key identifier: 7A:37:0F:7E:3B:3E:91:10:5F:2C:D7:B9:CD:6B:0C:AF:1C:DD:37:A3
Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Certificate serial: 0194C3F62BF9E45B17927F82C732D6A88138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
Manifest number: 010E
Signing time: Sun 02 Feb 2025 00:01:17 +0000
Manifest this update: Sun 02 Feb 2025 00:01:17 +0000
Manifest next update: Mon 03 Feb 2025 00:01:17 +0000
Files and hashes: 1: MxQVcAiuW0p4EDIiEm7q3BWYvP8.roa (hash: JVFsJWGBLPgzxt9uY5l+yySS0Ei3Tn04Hx81eXPjKe4=)
2: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: nSCghP7/NXk1fclc2DeEtk/ObMAiMmmCGPUt6GGSMEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:2b:f9:e4:5b:17:92:7f:82:c7:32:d6:a8:81:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Validity
Not Before: Feb 2 00:01:17 2025 GMT
Not After : Feb 3 00:01:17 2025 GMT
Subject: CN=7a370f7e3b3e91105f2cd7b9cd6b0caf1cdd37a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a5:2d:45:07:bb:63:a8:34:69:56:4b:a1:26:
46:a1:5c:6f:31:f3:c9:e6:22:9a:30:69:e5:bf:15:
1b:ea:7f:9f:11:de:8f:ba:99:62:bc:b0:bc:47:cc:
2f:ff:40:6d:4d:98:73:0e:6c:ed:e0:5b:9d:5c:7a:
ba:30:f4:77:80:d8:a5:00:e6:31:88:83:7f:6d:0c:
c4:95:ed:83:57:ab:76:36:ee:f1:0b:2e:bc:be:2d:
c2:5c:63:53:a8:1f:20:da:be:76:e1:a6:07:b7:a8:
95:e1:d8:9f:d0:99:8b:1c:4a:50:75:6c:59:7e:9c:
f7:de:38:20:7c:7a:11:29:76:af:e1:86:b9:bc:78:
6e:6a:cd:56:aa:75:e1:57:fb:39:1b:65:0e:31:24:
01:8b:1a:72:c7:ff:cd:76:63:88:da:ff:6c:6d:7b:
30:a6:a9:14:27:62:18:ed:e4:e6:17:30:c9:67:84:
43:1c:dc:92:9e:e2:a2:45:f9:6e:88:a2:e6:fd:b1:
6a:74:20:7c:c0:c4:78:e7:ca:8b:a8:53:2e:1d:27:
3d:77:0c:db:05:27:82:ea:69:13:ca:8c:83:ab:5e:
24:d7:42:92:ca:da:2d:77:33:f5:f6:20:d4:b5:ac:
2b:d8:be:1f:ca:21:2d:86:32:ed:2e:7f:82:1d:56:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:37:0F:7E:3B:3E:91:10:5F:2C:D7:B9:CD:6B:0C:AF:1C:DD:37:A3
X509v3 Authority Key Identifier:
keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:01:c1:45:8a:0a:29:18:20:41:62:db:04:d4:29:ba:86:a2:
6f:c4:f5:32:89:5a:b2:91:de:b2:5f:a6:4d:f3:33:6a:7f:a7:
83:d8:88:39:be:7e:be:19:97:8f:fb:10:7c:2e:5f:96:56:54:
d4:0d:05:5b:06:1c:c8:e6:2e:9e:67:af:2b:ad:32:b6:5e:a9:
12:43:7b:66:74:43:77:47:67:85:4b:c8:68:02:8e:d5:c7:f2:
61:44:4e:9a:2d:12:2c:e8:06:5a:9d:79:bd:38:55:aa:4f:14:
7d:cd:4c:de:54:ed:41:00:04:4f:92:b8:2e:e5:1b:cb:7e:6d:
5c:c7:ff:5a:1d:29:ef:99:a4:0e:68:93:1a:3f:6a:47:40:61:
12:82:0c:46:ae:88:5e:81:fe:0a:43:2b:8e:70:d0:55:49:90:
14:a3:c5:53:06:fb:0a:66:24:45:ef:51:e5:d7:74:ae:0c:03:
84:b1:b3:32:e4:63:6a:f9:e7:80:68:06:e1:42:86:fb:6d:49:
a5:69:75:e7:8a:0c:9e:13:8b:c8:59:dc:05:6d:f4:1c:48:59:
6b:50:00:5e:53:8c:d3:20:19:5d:bd:36:01:96:5c:80:86:b2:
b9:36:0c:2a:74:8a:a8:a3:fc:c5:dc:82:a4:7c:df:0e:c7:b8:
e2:52:3b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:11 2025 by rpki-client