Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: HDQHvIQ7QezldK2as+N+K9NpEvY8L3ZT/M8LI0Sfd4Y=
Subject key identifier: 81:E7:87:E6:6A:EB:8C:73:D4:89:03:55:51:9F:D2:5A:55:F0:6D:B5
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 0194BC3BCEAB7C52D7ADD58ACC5DD94AC5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 03FB
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: aJKBildqRi7lYCh6PA4FM+bh1rfXV43wT2HDF6J3UHM=)
2: hzr42e2R_h-LWwgBpSQZacNEqsc.roa (hash: 9mXipkAV76pHGL76kppNcnsru8YUceXMwinc9f3N1VQ=)
3: t7tnySRpEFMTydXCzGToiDJgYGQ.roa (hash: CXeAI4+kyWk1ca7T6WDcTTVmJi/Ezadlx47KG35a8Bw=)
4: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (hash: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ce:ab:7c:52:d7:ad:d5:8a:cc:5d:d9:4a:c5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=81e787e66aeb8c73d4890355519fd25a55f06db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:56:0d:37:d9:f9:d3:f8:b7:30:28:21:c0:
ed:93:6b:59:b3:f4:ec:26:b0:45:52:12:83:a7:e2:
a1:2b:26:74:d0:ce:75:d3:3b:11:d9:93:57:9a:0a:
28:96:da:e6:ab:99:8e:36:e4:e4:96:a5:07:de:8a:
fa:ad:13:23:43:31:8c:f5:65:26:ef:85:44:d4:60:
1d:12:82:75:1a:7c:83:12:1e:74:48:1a:4a:73:66:
98:ac:b3:82:ca:e7:76:44:cd:73:52:c8:34:ac:bd:
de:41:8f:93:2c:7b:78:9f:cb:6e:cf:52:fe:90:63:
9f:57:db:ee:e8:38:2b:23:f8:03:10:0a:ec:0d:65:
fd:36:12:c1:8c:21:ec:a0:46:34:8d:d5:0b:7a:34:
6d:4b:06:a1:51:f8:43:0c:33:98:3a:2b:27:cc:86:
73:c9:69:81:be:3e:42:9a:ac:72:26:c4:e4:b1:bd:
6a:96:e6:01:bf:59:2d:fa:23:cd:76:7c:8c:81:4a:
03:e4:97:f3:46:79:75:16:fe:5e:da:8d:a3:3d:f6:
b5:8c:78:f4:5e:e5:7f:86:b0:f3:3a:8e:30:d7:9e:
26:db:fc:30:82:7c:22:37:48:c1:bd:ef:18:c6:70:
64:40:1d:27:c9:83:a7:5d:a0:2b:9a:66:77:4e:90:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E7:87:E6:6A:EB:8C:73:D4:89:03:55:51:9F:D2:5A:55:F0:6D:B5
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:37:eb:6b:b0:80:f3:8b:bc:b9:ff:aa:c9:28:1e:57:be:82:
c5:cf:ac:74:21:31:76:95:d5:c8:07:ea:75:c1:03:33:20:68:
73:ff:c3:32:74:ca:c6:a3:3a:c7:87:51:9e:d6:fe:e0:fd:f6:
f1:76:7f:3d:01:c7:75:a2:52:08:c8:9d:4c:cb:ce:f6:b2:b2:
c2:00:e5:00:c1:06:d6:87:e6:b4:8f:4e:8e:2a:d9:cd:5d:e2:
87:04:81:2b:3d:63:f1:18:cf:0a:5d:a9:19:34:41:2e:41:38:
53:de:47:ef:13:9f:41:4e:19:bc:41:c6:44:4c:87:3c:87:a5:
d5:eb:bb:36:59:ed:eb:88:9d:23:96:98:a4:4d:43:d3:e3:d1:
c0:0c:35:73:53:bc:7d:8d:e1:03:24:c2:dd:56:74:13:9a:d0:
95:64:a3:8d:61:5c:65:29:1c:8a:81:88:9b:91:df:2b:2e:b2:
3d:25:86:81:6b:4d:7e:8f:4c:ff:03:d7:f2:62:f0:d1:dd:60:
bc:52:c4:36:c9:a9:1c:7e:aa:56:56:7d:ea:65:79:e5:bf:23:
3b:64:d4:95:c3:a6:fb:6b:5d:5b:38:5d:b8:54:c2:ad:0c:75:
53:b0:64:f1:e9:d9:85:9d:61:04:07:c4:68:db:0e:64:93:f7:
4a:8b:61:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:27 2025 by rpki-client on console-fra.rpki-client.org