Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
File: nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json)
Hash identifier: Su5Ywan4xYBzvLTOJ0ykB5IK3THLvGIDRxdmzDmJDi0=
Subject key identifier: 76:8C:3A:B9:DE:C5:86:E8:08:61:18:77:A1:2A:10:FF:E7:3F:79:02
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 0195124729BD0E63B678976281C057CB0C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
Manifest number: 0AAA
Signing time: Mon 17 Feb 2025 05:00:08 +0000
Manifest this update: Mon 17 Feb 2025 05:00:08 +0000
Manifest next update: Tue 18 Feb 2025 05:00:08 +0000
Files and hashes: 1: Dotq45i-CIL8miP4blqY3J6J13s.roa (hash: AeEyJtBFVLSGPDiSeedlZidCthzwYAlppOftvZd9mwo=)
2: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: sBE1s0s4yi7smt6rvHbV4ZOZ+YRFw4rw3AOXw2Yd9Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:29:bd:0e:63:b6:78:97:62:81:c0:57:cb:0c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Feb 17 05:00:08 2025 GMT
Not After : Feb 18 05:00:08 2025 GMT
Subject: CN=768c3ab9dec586e808611877a12a10ffe73f7902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:36:d2:37:08:af:1d:dc:61:2d:38:06:55:
cf:07:be:15:c8:e7:45:32:97:fd:50:14:e8:f1:0e:
b7:6a:8b:ae:81:89:80:99:d4:fb:6e:73:c6:85:80:
ad:a1:b7:a5:e2:5f:db:e3:27:5b:37:db:e9:66:77:
4f:5b:58:6b:46:42:af:b7:e3:a0:39:fe:81:d0:7f:
06:a0:0d:53:89:d0:0b:df:cf:a3:a8:c7:ee:5b:2f:
e5:2e:fd:45:3d:08:2c:20:4e:ea:10:06:60:dc:bb:
d9:94:70:94:c7:61:d7:e2:1a:9d:c7:f7:d2:31:87:
20:2c:3e:c0:06:39:fc:f2:0c:4b:f1:a6:dc:e4:e0:
88:af:f8:00:b4:a1:fa:3f:2a:df:0e:7d:61:69:1a:
8b:1c:a7:d2:73:fc:1e:ab:77:9b:e4:c9:db:59:43:
a4:b9:74:37:e8:28:ee:11:4d:2f:45:fc:42:a2:4b:
89:39:8e:a9:35:04:9e:2e:9d:f3:6b:48:2c:ae:f3:
47:fc:f7:02:bb:00:a2:54:5c:da:f6:86:63:e5:8b:
52:79:c3:0a:32:00:46:61:2e:60:64:20:1f:2e:06:
e2:46:1d:3a:50:36:13:3b:bb:7f:a0:05:ff:2b:bc:
a5:37:38:02:ec:9b:c3:61:61:36:47:10:33:d7:f2:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8C:3A:B9:DE:C5:86:E8:08:61:18:77:A1:2A:10:FF:E7:3F:79:02
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:dc:62:44:7c:ff:68:47:59:b6:dc:2d:d9:7b:9e:06:8d:5a:
dd:e1:ed:0f:ac:c5:9e:75:36:b7:81:fe:a6:9f:04:7e:c8:17:
04:32:b2:43:74:95:d3:e9:9d:c6:bb:63:e6:bf:8b:52:62:09:
8f:d4:98:58:0f:2c:89:42:44:ad:7d:9d:b8:de:6a:4e:c8:88:
ea:27:0d:04:c6:ce:9c:cf:da:8b:62:2a:4c:82:96:d9:6b:45:
c1:92:f4:53:2c:ce:e4:8d:ef:56:4a:d6:0f:58:b3:d4:ab:98:
42:97:49:e7:1e:83:69:82:70:a4:78:13:36:89:02:c1:bc:eb:
cc:09:bd:dc:ec:d8:5e:14:ab:c7:cf:88:13:96:b8:91:c1:ec:
70:65:64:ce:3a:51:43:a9:fa:b0:db:b1:62:f2:59:ab:ec:f0:
fd:e1:88:27:8c:98:12:95:59:61:1b:80:3f:4e:dd:64:0e:e4:
4a:22:49:d3:52:94:91:1a:07:ed:08:b6:63:3e:66:1f:f9:8b:
2f:8a:56:3d:a1:3e:47:d7:ea:9a:b5:98:ee:7a:0a:fa:11:c5:
6d:fa:eb:c3:1e:d1:6a:06:2e:18:10:9d:57:f9:d5:2a:fc:b4:
83:a8:de:93:31:7d:d7:cf:7b:7a:45:9d:b8:bf:27:15:0e:ec:
61:47:a3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:41 2025 by rpki-client