Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
File: RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json)
Hash identifier: BJXpajfzrV/VEIC+xuglYvUUjhZS9GpHdm5Lim0URlk=
Subject key identifier: 5D:95:05:6C:69:E7:70:8F:A2:D3:93:A0:DB:EE:50:5E:40:44:36:4A
Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Certificate serial: 0194C387E330A2E663A1F8279D7DB8F02AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
Manifest number: 066C
Signing time: Sat 01 Feb 2025 22:00:50 +0000
Manifest this update: Sat 01 Feb 2025 22:00:50 +0000
Manifest next update: Sun 02 Feb 2025 22:00:50 +0000
Files and hashes: 1: DzVVrFISV3SBn05LsG8ndsYg1aE.roa (hash: hA/w0PY+vo1QpcIrf2hV7eRwasuyeWDku9nC2cWOSxo=)
2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: MqXYQFhOtoGWu/mhHunl/v1kwxpF0MqvnXaZ+mqxaS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:e3:30:a2:e6:63:a1:f8:27:9d:7d:b8:f0:2a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520
Validity
Not Before: Feb 1 22:00:50 2025 GMT
Not After : Feb 2 22:00:50 2025 GMT
Subject: CN=5d95056c69e7708fa2d393a0dbee505e4044364a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:af:03:da:41:00:27:4f:af:9b:1f:a9:f5:
06:fe:fa:74:04:e5:e4:b5:b9:1f:6b:74:b8:aa:8c:
ab:e8:0b:5e:ad:a4:a4:69:b4:6a:52:cf:cc:1a:05:
8e:70:69:ff:34:d5:fd:d5:d1:f0:e7:29:5f:46:c1:
1f:89:3a:d7:63:93:bc:0b:d7:9e:67:9c:5d:73:8c:
32:d2:30:5b:59:30:7d:29:e3:7c:0a:4a:8b:a6:c8:
bb:bd:70:67:df:cb:6b:6f:aa:18:0e:bb:1c:03:c9:
05:11:fd:59:5b:5d:dc:54:4a:be:e2:51:54:ec:5b:
7d:47:5b:2e:1d:53:e7:76:b1:69:99:0c:f3:1a:bf:
b3:98:48:38:97:b6:4d:c2:29:90:0f:5b:2a:f7:a5:
8b:98:33:0f:0f:1c:c0:5c:57:5e:5c:a0:29:d0:25:
27:8a:b1:67:7a:c8:cc:c8:3c:ca:4b:91:59:63:75:
68:93:ec:e4:ae:4d:ab:f4:d2:2a:0a:3e:90:18:d9:
5e:4b:b5:71:32:79:b9:81:3a:11:16:7e:34:7b:6d:
98:4f:0f:3f:47:04:bd:dc:98:cf:c9:2f:17:92:c6:
28:e0:5e:16:5a:67:f0:c9:e4:b4:96:ce:0f:af:e9:
67:61:87:48:78:4a:56:56:ec:b1:c5:87:a6:f7:29:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:95:05:6C:69:E7:70:8F:A2:D3:93:A0:DB:EE:50:5E:40:44:36:4A
X509v3 Authority Key Identifier:
keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:03:06:60:36:32:cc:db:2c:52:07:12:77:0f:61:0c:5b:dd:
05:07:e8:09:92:cb:c0:10:a2:63:e5:d5:ef:b7:97:49:ce:b1:
5d:f9:6e:61:ab:04:ef:aa:94:e4:8a:b9:e3:da:2c:ec:0f:ca:
9d:6b:8f:4a:4f:76:5f:a5:b6:8a:d7:77:62:00:12:ba:12:e9:
14:1f:0e:bc:4e:5e:d4:74:e7:36:23:cc:17:9e:58:e7:73:6a:
2a:46:5b:00:bb:3d:ba:a5:2a:70:13:0e:a1:da:eb:7b:6c:e6:
98:50:d8:c8:66:15:63:d4:7e:94:f1:ed:be:c2:69:23:6d:ad:
e3:f0:b6:2d:97:0d:f6:59:6f:3f:41:32:a8:b3:64:6f:a9:2d:
fd:c0:9c:69:64:77:0d:3b:e3:28:84:59:ac:2c:3c:68:fe:b7:
5d:3d:f0:f9:f3:21:65:40:34:59:b7:28:51:3d:4b:a2:f4:97:
b0:25:6a:96:63:1f:0b:36:bd:ab:e2:40:6b:7e:b2:a1:4d:d7:
76:2e:95:69:4e:38:90:c2:8f:1c:c1:96:49:5f:0e:57:42:39:
f2:45:33:40:8c:3f:dd:db:82:5e:23:1c:e8:70:42:33:d9:75:
5e:4c:a6:f7:f4:44:d7:d6:9b:e4:42:3e:85:bc:4a:7e:0b:f6:
51:15:4a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:00 2025 by rpki-client