Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: 5cMG5MEW0uV6nfTGij7jTinmfP0/BQ0T1Rbhz39yOig=
Subject key identifier: EF:85:27:20:07:45:9F:62:AC:B4:54:B4:44:B6:C6:7B:67:E0:D6:9D
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 0194C507F5CB30F3960D2CADCC844DFEC2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 21
Signing time: Sun 02 Feb 2025 05:00:20 +0000
Manifest this update: Sun 02 Feb 2025 05:00:20 +0000
Manifest next update: Mon 03 Feb 2025 05:00:20 +0000
Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: 1Rn+8XA6edp51yHliEyeZ/bA8XRr1n3vHtjVTl3Ch+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:f5:cb:30:f3:96:0d:2c:ad:cc:84:4d:fe:c2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Feb 2 05:00:20 2025 GMT
Not After : Feb 3 05:00:20 2025 GMT
Subject: CN=ef85272007459f62acb454b444b6c67b67e0d69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:ac:40:e0:c5:36:e1:40:83:d8:60:49:7c:
a0:9d:97:ab:01:89:c1:20:b9:90:58:1b:8b:d9:5d:
70:76:fb:43:d1:ee:5d:91:5f:3f:ae:5a:24:28:e9:
95:19:99:bd:42:39:fb:c4:90:f8:2b:97:ee:ca:83:
0d:3d:65:1e:b5:c7:40:e3:3a:f8:1c:91:e3:64:45:
51:59:b8:fa:cc:b3:90:f3:1f:b5:c5:57:b8:9b:8e:
7c:ba:64:ae:38:9b:f9:c0:e3:0f:0a:aa:a0:c5:e9:
75:32:e7:49:2b:4d:ca:0e:84:b3:b4:77:aa:f6:ea:
4a:a8:92:82:ed:e8:55:5b:2b:bf:fe:09:46:68:bd:
20:84:91:4d:b2:58:18:ab:a1:81:61:a0:0c:83:5e:
71:f2:ca:dc:42:c9:59:21:45:12:a5:0c:67:49:9b:
94:2b:3e:e0:e5:e9:05:06:ef:ab:0c:dd:a6:66:df:
09:cc:95:ed:91:e7:8c:ec:79:64:c8:c8:1d:0a:d8:
50:c0:ed:3b:51:e2:d2:49:24:16:08:8a:ee:ed:30:
c0:f8:9d:63:4d:08:ea:29:22:45:55:21:79:40:06:
6c:46:2e:4e:61:46:8a:0a:d0:08:74:51:1a:9c:4a:
1e:ee:6c:65:8b:f4:b6:68:f4:ce:21:c5:c3:7d:43:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:85:27:20:07:45:9F:62:AC:B4:54:B4:44:B6:C6:7B:67:E0:D6:9D
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:78:0c:88:49:15:1b:70:90:ff:b8:1e:c0:ee:7f:81:fd:c9:
3b:ea:2e:66:28:7b:07:dc:7e:0c:01:3f:86:53:42:8c:fe:6c:
71:0c:78:05:d9:1a:6f:a6:72:f8:b5:ab:4f:4b:d0:45:16:c0:
64:e9:ed:ac:75:c0:71:e3:ad:56:b5:59:f8:9e:9d:ef:18:a3:
4e:d4:e7:cc:31:b9:e2:f1:32:e2:8f:b3:c7:22:fc:e0:e9:9a:
2e:98:33:85:ce:16:94:b8:0b:1b:68:64:33:0e:73:08:7e:eb:
67:dd:02:8e:02:5a:e2:16:66:e9:df:93:14:52:01:6a:d2:42:
37:49:0a:e0:9a:f0:71:78:19:bd:5d:60:53:7d:80:9f:bc:31:
d9:af:29:82:8e:33:5c:19:0f:39:f1:c4:df:7e:0e:3b:a8:54:
d2:08:a8:61:bd:cb:5e:33:fc:50:db:3a:de:8b:4a:14:96:1b:
7e:f3:6f:54:fe:16:af:48:a9:d1:ce:9f:26:d8:ee:25:f7:5b:
2b:da:e1:95:2a:37:2e:98:aa:ad:2c:82:67:63:1b:f4:02:4f:
dc:c8:05:14:74:04:e3:82:84:b4:a3:d6:b8:b9:aa:94:97:5b:
14:7b:46:06:1d:5e:2e:81:e8:d3:76:51:2b:7c:db:8f:aa:98:
73:8e:d7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:52 2025 by rpki-client