Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: Cw4A3ejkRCOrBqGKRcunaOWNvUYw7G3WCZXFLW+q0rs=
Subject key identifier: B4:E8:A2:A8:88:ED:CA:DC:77:44:03:EE:E1:98:84:0B:60:56:7C:8A
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 0194BB97203657A8873CE0396046C64ED1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 03D4
Signing time: Fri 31 Jan 2025 09:00:31 +0000
Manifest this update: Fri 31 Jan 2025 09:00:31 +0000
Manifest next update: Sat 01 Feb 2025 09:00:31 +0000
Files and hashes: 1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: ePqe3bb77ySvs/01pXGfh8I3eJXPse4sJc1N14ylLJE=)
2: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (hash: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:20:36:57:a8:87:3c:e0:39:60:46:c6:4e:d1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Jan 31 09:00:31 2025 GMT
Not After : Feb 1 09:00:31 2025 GMT
Subject: CN=b4e8a2a888edcadc774403eee198840b60567c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:02:f4:43:8c:60:99:a6:db:9d:e6:40:0e:
80:28:f5:9f:cc:0b:c8:92:62:30:84:a3:49:c1:99:
6b:86:ca:de:de:79:39:ac:93:48:6a:ce:ff:3a:ad:
59:3e:56:dc:2d:33:0c:f3:19:d7:28:67:8e:6e:63:
70:e2:a2:bf:e0:93:5f:b3:ff:a5:22:3a:c5:85:f4:
d7:04:b0:74:b9:8f:27:21:f0:b8:b0:85:d6:cc:49:
0d:2d:dd:d1:88:11:b5:4f:ba:64:6e:6e:79:02:37:
a9:5a:cc:1d:42:65:d1:85:5f:74:23:86:e8:33:8f:
46:5c:31:66:be:73:5c:69:53:6f:22:d9:3b:18:86:
26:ba:45:6b:09:a2:87:e5:8f:5b:4c:f5:70:c2:32:
73:ac:43:aa:db:56:f7:01:66:1b:c0:8c:1d:5f:4c:
cf:b0:40:c3:4c:1f:79:30:08:79:83:7a:71:98:fe:
f5:fa:d9:b1:f0:2d:17:7f:1e:6f:90:dd:34:3b:9c:
db:d0:09:7b:6a:7f:d5:77:f8:7a:d1:0a:f7:ac:a2:
8f:8c:a3:34:48:94:43:a0:ea:b9:bd:15:00:73:b3:
54:88:86:85:86:15:96:a2:c2:2a:e2:23:a1:de:01:
07:ed:63:76:24:27:d3:da:c8:5e:1f:19:bc:2d:93:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E8:A2:A8:88:ED:CA:DC:77:44:03:EE:E1:98:84:0B:60:56:7C:8A
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5d:b5:7a:ec:55:3a:91:63:95:87:09:00:5f:f2:a9:fa:cd:
42:10:a9:1d:dc:cc:1f:5b:2d:41:10:45:2f:ff:34:b1:65:6d:
87:cd:3a:41:f0:99:a9:ea:83:9c:a5:a5:bb:b1:be:37:14:71:
9c:c5:7c:9b:c0:38:36:b8:83:09:26:0e:41:8c:2c:77:aa:44:
f2:60:ae:d5:5e:d6:80:15:8a:14:cc:24:24:4b:8a:83:3e:99:
ec:4b:c8:31:2a:ef:79:02:38:cd:f3:18:5c:ac:82:5f:bc:5c:
19:54:e1:49:b6:f9:72:a2:fd:14:ae:38:b8:7a:61:b7:81:a1:
56:35:5f:4a:e4:24:4b:30:63:4a:7d:a0:91:1f:1a:96:a2:f9:
3c:81:a3:1d:44:9f:30:1f:48:6c:59:84:e2:b7:9a:ae:99:a9:
50:ad:a3:82:99:a6:82:e6:5f:26:e3:3e:e6:7a:e7:f2:c4:fa:
c8:73:bc:95:33:3a:fa:31:85:9a:f9:88:fa:45:1e:52:84:f6:
bb:74:85:0c:e8:b9:79:e8:bd:f1:21:e6:f0:90:88:14:e9:71:
2c:1d:9d:24:58:82:cf:db:6d:45:5d:72:f1:b4:7e:ad:51:c6:
6b:3e:54:49:c9:99:e5:f0:ff:18:45:ec:b6:6b:d7:7e:c8:25:
e3:3a:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:39 2025 by rpki-client on console-fra.rpki-client.org