Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier: Lh09N8d9dxBKV8PNoVyKoG+MmO9XvhxpRAULYVSa+x0=
Subject key identifier: 1F:5B:C7:68:0C:F6:29:D6:8B:27:E4:34:3A:18:24:65:03:5B:BF:C7
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial: 0194C3BE31955E8058325FD9F4EB7C7CEC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number: 3E
Signing time: Sat 01 Feb 2025 23:00:08 +0000
Manifest this update: Sat 01 Feb 2025 23:00:08 +0000
Manifest next update: Sun 02 Feb 2025 23:00:08 +0000
Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: gFvdWLkUe6p/+9ycKqqp0Oz5iPh5UMEsqpozicPg1gM=)
2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:31:95:5e:80:58:32:5f:d9:f4:eb:7c:7c:ec:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Validity
Not Before: Feb 1 23:00:08 2025 GMT
Not After : Feb 2 23:00:08 2025 GMT
Subject: CN=1f5bc7680cf629d68b27e4343a182465035bbfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:95:ae:92:d2:a3:16:96:ff:d3:b9:aa:42:
f8:7e:49:76:d8:43:90:14:f7:3c:5d:8b:66:03:c9:
32:56:1f:ca:6d:dc:7e:2c:82:df:4a:b6:58:d1:6e:
74:3c:5e:18:7e:09:b9:f9:43:dd:db:e7:10:2c:6c:
22:47:30:6b:e1:af:ee:ba:e8:bf:2b:75:00:91:4d:
dd:a6:f8:51:8c:7c:99:0e:bc:59:ce:2d:01:16:d5:
bc:69:eb:27:59:c2:6f:b8:97:00:bc:4d:e7:b4:8a:
81:f8:68:91:d0:9a:7e:d3:e9:23:db:af:74:83:73:
24:9d:63:39:52:f0:87:81:27:56:d0:40:06:1d:f5:
19:77:bb:44:62:7c:a9:3d:77:36:99:9a:6a:d1:a8:
6c:67:69:16:3f:83:05:69:d6:26:10:72:a2:c0:c2:
6f:3d:53:dd:1a:ab:86:a7:9a:23:79:01:42:30:79:
b4:a6:9d:e5:02:0d:0c:ee:a0:64:a5:66:78:c3:04:
be:f7:c4:5e:ba:95:ad:8a:72:3c:f2:ce:5b:7b:d4:
30:79:f9:3c:4d:f5:98:58:b3:78:3c:4f:f0:b8:b1:
3e:09:65:91:8f:04:6b:97:5e:2b:a5:03:a9:ad:a2:
8e:88:30:e4:f8:c9:73:88:b9:fd:ec:dc:40:0c:99:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5B:C7:68:0C:F6:29:D6:8B:27:E4:34:3A:18:24:65:03:5B:BF:C7
X509v3 Authority Key Identifier:
keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3d:20:76:17:1d:ff:6d:ec:53:a6:18:24:35:e8:fc:95:8c:
55:a9:1a:43:d2:8b:43:47:52:dd:e0:7b:14:6c:62:3c:88:be:
ee:90:85:1f:12:5b:9f:cb:7e:7f:77:bf:e9:b1:e3:4a:00:83:
d5:fe:ed:ee:88:0a:32:96:66:48:7d:2f:aa:be:3c:ae:b6:1e:
0c:19:8b:98:4b:b2:05:0b:c4:9e:0d:e9:75:9d:f6:66:9e:ce:
10:9d:18:fd:2f:4e:a6:0f:18:e8:bd:d4:dc:64:6a:30:aa:bc:
c7:cf:21:b0:2f:4b:2a:8a:40:f4:e0:bf:17:d4:d1:cb:d7:15:
57:cb:02:4c:73:7c:f0:3d:30:f9:db:75:bb:19:9f:95:bb:98:
d3:68:18:eb:c6:fc:58:6d:48:9d:fb:31:7e:94:72:9f:0a:ef:
ca:81:fc:77:03:1b:39:5c:af:59:3d:5d:1c:27:11:af:1b:03:
56:50:f7:97:b1:84:58:4a:65:6a:ae:e5:94:85:2c:3a:aa:45:
2f:7d:d1:fb:99:a6:b6:43:c7:be:62:56:22:44:f0:76:17:cb:
1e:26:fa:18:0b:57:f4:6b:63:57:6d:2d:be:e8:89:0e:36:2e:
13:11:7b:44:cd:3c:24:72:f9:ac:d6:ec:41:77:a3:3b:47:0b:
85:14:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:05 2025 by rpki-client