Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
File: NJYux3ZGK3bmOugVW7J7nYx-f94.mft (raw, json)
Hash identifier: 7kIu667JwrQRzIGkbrmC855U4p9dqcYhnKblX5bkRWA=
Subject key identifier: B1:A4:3A:26:46:2D:A9:20:24:B0:8F:69:F3:99:88:7A:B4:A6:BE:6F
Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
Certificate issuer: /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Certificate serial: 019510FDA8E010FD8B60864FB76155901B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
Manifest number: 0DC5
Signing time: Sun 16 Feb 2025 23:00:13 +0000
Manifest this update: Sun 16 Feb 2025 23:00:13 +0000
Manifest next update: Mon 17 Feb 2025 23:00:13 +0000
Files and hashes: 1: NJYux3ZGK3bmOugVW7J7nYx-f94.crl (hash: WaSzYCLQIU/f/G+60KVDfopx6OuYCBTJkm+k4FN5fsg=)
2: raSmxoHnzmzGBzTkG0MLkl3VZgs.roa (hash: lXV0TrwdE+JtNBRnmGgOqwwu3Hr9XSo7ebZyvtagFuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:a8:e0:10:fd:8b:60:86:4f:b7:61:55:90:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Validity
Not Before: Feb 16 23:00:13 2025 GMT
Not After : Feb 17 23:00:13 2025 GMT
Subject: CN=b1a43a26462da92024b08f69f399887ab4a6be6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:11:ec:5b:3b:6e:aa:5c:9c:00:a2:81:11:
93:79:69:d0:bc:6c:b9:b2:5b:ec:f8:0f:6d:a3:ad:
46:30:35:26:1f:02:5e:43:9c:67:f9:0f:83:9a:92:
0e:dc:99:c7:52:da:46:e4:0c:55:5e:7a:cc:68:01:
69:be:3d:32:a3:39:df:97:0a:5a:ef:26:3b:cd:4d:
78:97:dd:80:29:2b:9b:b3:02:16:19:72:9d:96:ee:
e0:87:38:e9:c4:8e:d1:0f:88:65:d0:2b:04:54:1b:
a0:a7:6e:ca:f8:9d:6f:51:86:27:80:53:cb:0c:45:
b2:5f:e3:e2:bc:ae:c2:00:0a:24:2c:52:82:83:05:
a0:fa:09:a6:6a:ec:9d:98:b8:d6:13:1b:c8:6f:d7:
f7:f1:f1:69:d5:1c:eb:ac:cd:2d:62:79:1a:2c:af:
a7:f7:5a:8a:c1:84:5f:be:c4:87:0c:8f:b8:b8:97:
08:0e:c7:48:0a:4c:e7:23:53:bf:38:23:4a:15:7e:
a8:52:95:0a:5d:13:c1:72:1a:50:8f:93:6a:5f:8c:
3a:86:68:96:5b:10:a5:05:d9:b5:21:0b:ed:ee:b3:
e0:1e:c8:b8:47:32:3f:fe:f2:8f:76:c7:c1:ee:f9:
f2:74:1f:32:13:5f:50:48:ce:19:6e:da:14:c4:be:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A4:3A:26:46:2D:A9:20:24:B0:8F:69:F3:99:88:7A:B4:A6:BE:6F
X509v3 Authority Key Identifier:
keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4a:db:20:cc:ac:b5:0f:99:7e:dd:f2:3d:0a:4c:f0:60:74:
19:dc:5f:ed:a4:c0:11:58:2f:9c:a7:db:3c:4d:64:26:fc:ce:
e0:a0:34:c9:17:2a:e5:0d:2b:a2:d2:61:0e:1f:b1:b5:e1:b9:
3e:f0:1c:2f:b8:02:31:ec:86:c6:b0:a6:ed:c1:54:ec:43:bf:
d7:3a:c9:55:a9:4d:cd:e3:fc:a8:17:2e:d7:01:ad:0b:42:de:
ad:e4:6b:36:17:44:85:ed:e1:a1:e1:c9:46:0c:38:2e:06:cd:
f2:7c:de:47:ec:ed:20:f6:d1:3f:f2:44:09:43:88:58:4c:55:
ea:c7:ec:e4:3a:dc:07:dd:db:52:24:2a:d2:ce:ec:f3:b7:e0:
25:7d:07:03:05:4a:de:17:87:bd:c4:b4:c6:88:ec:73:15:50:
d3:7c:be:86:f1:c9:08:bf:b7:b9:76:85:7a:a5:d8:99:77:1b:
40:0e:f7:8c:9d:59:1b:14:64:d3:b8:a5:63:b3:e0:ea:b5:18:
f0:c6:8d:c5:e9:2c:62:4f:0f:bf:e0:14:76:c3:b8:90:61:05:
ab:2d:e1:55:7b:40:39:b6:6b:83:d0:8b:8b:a4:9b:b7:ab:2f:
82:a1:e5:d9:b8:69:fd:72:1f:d5:90:32:b3:4a:76:e5:ee:5f:
db:c5:d1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:17 2025 by rpki-client