Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: CU63FsV9qLJkVstwD2N2K8MSSu2zG57AtdpWPRbeco4=
Subject key identifier: C5:04:4D:BE:EE:77:FF:D9:13:AC:2A:DF:CF:45:0E:C1:6D:B8:76:DB
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 0194BB2946A6495382AFF92F103D38E6A7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 0CAE
Signing time: Fri 31 Jan 2025 07:00:31 +0000
Manifest this update: Fri 31 Jan 2025 07:00:31 +0000
Manifest next update: Sat 01 Feb 2025 07:00:31 +0000
Files and hashes: 1: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: TGshww7zEGbbxBnlvZUBLCVBu0CI4qObgiNAt/985rw=)
2: ZFMFiXOWwPj8k4IMO6NkGD3u9_Y.roa (hash: d308Fz0xAcOGQMBvbHe9umSC8kJ11mxoDxfXwvbWkEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:46:a6:49:53:82:af:f9:2f:10:3d:38:e6:a7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Jan 31 07:00:31 2025 GMT
Not After : Feb 1 07:00:31 2025 GMT
Subject: CN=c5044dbeee77ffd913ac2adfcf450ec16db876db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:8b:11:5f:4c:c0:f1:af:ce:a6:d8:e3:67:
bf:56:86:d8:94:89:30:b9:9a:f0:45:39:c6:05:b7:
89:00:01:23:f3:1e:2d:74:d1:8e:43:ef:bf:8b:bd:
ba:25:26:bb:5c:d6:cb:d1:5c:a9:d3:25:c4:4e:30:
cc:d0:ff:57:e7:95:2b:4b:a7:da:d0:85:40:8f:8c:
e9:17:3b:5e:c8:da:55:7f:85:c9:13:e6:5a:f8:c6:
09:ac:0e:16:17:a9:e7:e7:41:19:d3:d6:77:cc:d3:
05:ba:92:e8:67:eb:ea:f6:5e:f2:d6:de:36:2e:6c:
90:a8:b8:ef:6b:ba:58:24:b2:4e:8f:9f:d5:2b:35:
a6:ac:2f:5a:e6:de:7c:2b:80:63:7e:d0:c8:95:79:
ed:35:5a:cc:6a:7d:45:89:43:10:e4:70:05:53:1b:
b7:cc:3e:03:da:f2:f1:7c:12:f3:95:c9:58:20:46:
42:8f:3a:b9:11:46:3c:34:91:b0:39:c5:4e:18:7a:
6b:ec:41:66:35:b7:c8:75:9b:40:43:53:c9:41:0f:
f1:9b:5c:27:22:8c:40:ff:c3:84:ce:05:98:66:72:
c0:8f:08:d3:75:1d:03:96:bf:b5:00:74:48:23:14:
8b:80:e5:d9:1d:2f:e2:6e:1f:f2:d9:d8:25:f4:8a:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:04:4D:BE:EE:77:FF:D9:13:AC:2A:DF:CF:45:0E:C1:6D:B8:76:DB
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:df:0e:d8:36:46:47:7a:f2:58:e8:7c:32:65:5a:c9:1c:db:
9e:70:c0:27:00:d4:d8:62:5d:4a:db:bb:01:66:97:cd:eb:a2:
a1:44:6c:9f:a9:5f:9e:88:ad:f8:63:72:0c:9d:08:43:b1:b9:
f9:24:d8:4e:b3:81:24:0f:58:fd:77:1f:db:ac:42:9c:78:9e:
f1:77:3b:ee:b3:2a:7d:24:1f:f9:fa:b9:0b:ff:70:3e:33:87:
be:c0:b2:60:50:20:5e:e4:77:81:5d:bb:09:d3:f1:f7:2f:b7:
92:5e:19:d8:92:63:58:4e:4f:e7:68:00:26:1c:7b:c5:06:69:
49:fe:2e:8e:f4:62:f0:b0:34:04:c4:57:bd:94:6c:0c:be:ed:
5d:de:bd:a8:c4:93:b9:b9:b5:4b:bc:a2:fc:78:22:fd:52:63:
bc:19:fc:68:56:ce:13:e8:e3:66:fe:b7:3b:dd:cf:b9:3e:20:
ed:93:b7:fb:c6:15:d9:09:84:e7:e1:de:1c:24:bb:b9:10:2c:
01:a7:1c:2f:2d:f4:be:1f:df:e7:ae:94:85:cb:b8:f4:30:00:
7a:6d:75:e4:b1:2c:54:e7:f6:11:6f:c2:a5:a8:a4:78:6d:39:
c2:c8:68:8c:99:b7:c3:50:8d:b7:64:26:2a:ca:dd:59:de:88:
f9:93:cb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:37 2025 by rpki-client on console-fra.rpki-client.org