Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File: NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier: Qx/YUMjroYdBFDMHB9mi/ftBiUigdXD9m9SCfpxxXI4=
Subject key identifier: 3B:EC:92:8A:09:31:8D:92:83:7A:45:BD:9C:50:82:01:D9:33:A6:5A
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer: /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial: 0194C3F5624A1E9120D5CD91C67CE64A316A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 00:00:26 +0000
Manifest this update: Sun 02 Feb 2025 00:00:26 +0000
Manifest next update: Mon 03 Feb 2025 00:00:26 +0000
Files and hashes: 1: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: SYrPhBLtjb9E5j28kOsOGu3Ixp006xkI0EMAy7nP5fo=)
2: jyQjff39PkjIcb2c4y6sicxo6PU.roa (hash: NTGQ8Vsi7SBxb0wiOjPR2Eb0JAGTh/a1kL30gt2n6ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:62:4a:1e:91:20:d5:cd:91:c6:7c:e6:4a:31:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Validity
Not Before: Feb 2 00:00:26 2025 GMT
Not After : Feb 3 00:00:26 2025 GMT
Subject: CN=3bec928a09318d92837a45bd9c508201d933a65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:23:41:0a:f0:c0:0c:e7:4c:45:a7:0c:98:c2:
5c:d7:55:03:2c:f9:50:16:2b:d0:20:c9:63:b8:37:
e2:0a:63:29:01:b9:d5:53:16:6e:18:41:ad:6b:34:
b0:28:ec:ec:5d:18:eb:66:47:44:c9:14:17:4d:f4:
7c:6d:97:54:ad:96:9d:ca:f0:71:c0:52:6d:16:db:
4c:0e:a4:12:ff:cd:1a:81:76:93:ec:eb:db:19:a0:
48:9b:75:5c:35:27:35:2e:0b:57:fe:4e:aa:90:66:
52:79:d4:6d:6e:a4:21:50:8c:b8:2e:0c:8a:51:46:
40:38:32:ea:8a:a3:eb:af:ca:8f:5f:cb:8f:9e:3b:
8f:72:c1:59:62:7b:69:23:8b:9d:bb:df:2a:ff:16:
c7:48:7c:3b:61:ba:f3:c4:27:12:85:09:5c:1c:ac:
8d:96:0d:67:f3:4b:06:00:5d:74:8f:e7:0d:59:b4:
45:80:9e:62:55:a2:aa:8b:80:42:72:a5:ca:85:bd:
98:f2:05:63:e6:b8:f6:d9:36:69:fb:57:d2:3c:e8:
9a:72:58:88:41:47:a0:1b:31:11:44:96:31:9c:11:
1c:05:7f:c5:c6:73:8b:b7:52:f6:b1:18:e8:eb:cf:
89:83:f2:1f:fc:b6:9e:0b:42:98:0b:8c:2f:3f:90:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:92:8A:09:31:8D:92:83:7A:45:BD:9C:50:82:01:D9:33:A6:5A
X509v3 Authority Key Identifier:
keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7d:62:80:0e:5d:87:4d:66:7b:ad:18:f2:17:f3:da:df:aa:
13:0d:6f:3e:8b:54:01:33:8c:a8:88:63:de:79:3f:13:d5:6f:
13:3a:51:57:cf:11:32:a4:c0:95:12:1b:9a:e2:93:b5:a4:a2:
8d:82:08:96:4d:b1:24:ff:27:2f:b2:d1:d0:59:a6:86:76:74:
25:28:8e:15:7f:4a:df:a5:47:db:ef:f7:2d:fc:87:38:77:be:
7e:3f:77:f0:e2:a0:ce:fa:c4:2e:09:1b:4c:76:04:20:81:d8:
2e:21:7d:03:eb:4c:4f:f4:fc:b8:ff:e0:d1:07:58:50:fd:91:
34:e8:b2:35:f8:4a:3a:dc:79:3c:6b:bd:e2:db:8d:13:c7:7d:
34:86:f4:94:69:32:c0:37:70:a7:36:7a:d2:04:05:80:8c:f3:
97:2b:69:67:fc:bc:89:a6:f0:69:b2:13:1a:7a:de:6e:8f:bd:
a7:06:40:d1:01:e0:a9:85:48:10:1a:20:73:29:38:cd:4a:7c:
96:0f:e1:23:3f:ae:56:3c:df:44:7d:7c:82:b5:00:33:07:27:
1a:f8:07:a0:c4:24:41:2c:e3:5e:3f:2f:8f:f0:b8:93:6c:3d:
99:df:ec:9d:66:9a:e8:1f:01:07:60:d8:70:da:59:33:48:24:
f1:c0:5b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:50:07 2025 by rpki-client