Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
File: nkVus5ycwGznHHdUoD8_PwCSgd0.mft (raw, json)
Hash identifier: R8U2/Zr8G1yJuw0O2EK4b5BjXBg3Ks+OH9YoMfemrCk=
Subject key identifier: 5B:C1:57:73:6E:0D:8C:21:E8:AA:5B:EC:0D:BE:C4:99:18:F4:3D:C7
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Certificate issuer: /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial: 0194BB96D3D97CB1B58B3184331FFD3E3A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 09:00:11 +0000
Manifest this update: Fri 31 Jan 2025 09:00:11 +0000
Manifest next update: Sat 01 Feb 2025 09:00:11 +0000
Files and hashes: 1: 0e3XvmLgCCLyXX2Pnl1oUQprG1Y.roa (hash: FMORsyXFiyuBPfP/wfzNQt83A1mlYj2dL5G6obhc0aU=)
2: nkVus5ycwGznHHdUoD8_PwCSgd0.crl (hash: 7zCWjSIfnUnXeGRn0cWecObulzk7AYAGDWpXvUsYLYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:d3:d9:7c:b1:b5:8b:31:84:33:1f:fd:3e:3a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Validity
Not Before: Jan 31 09:00:11 2025 GMT
Not After : Feb 1 09:00:11 2025 GMT
Subject: CN=5bc157736e0d8c21e8aa5bec0dbec49918f43dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:a7:bf:a3:66:81:91:b4:b5:b5:a2:e0:ad:
37:91:82:a2:59:cd:8a:b0:d7:d2:af:74:a7:d6:27:
73:01:9a:38:80:b1:64:90:d7:68:05:4a:62:9a:9a:
3b:ad:84:25:3e:f5:35:13:e4:1f:0a:a4:0d:0e:7a:
ce:36:4e:f8:e1:b9:67:22:d8:92:55:86:56:13:6a:
8f:f2:41:0d:6f:82:95:be:08:6a:37:ef:35:7f:bd:
5b:ba:30:88:5d:5d:e4:71:99:7d:ef:3c:ea:c7:ce:
db:1e:55:4c:e0:97:79:09:4f:3c:c5:68:41:d5:72:
d1:2b:8b:d6:d7:68:c6:43:52:93:b0:77:ea:32:74:
a3:fc:2a:e6:ac:ea:76:6a:b0:f6:c5:2f:b4:fa:d4:
19:11:a4:b0:e8:54:31:5a:d3:14:ff:a4:ad:38:36:
8d:89:67:58:b8:41:b9:25:61:68:6d:ac:d2:ce:d0:
ea:8a:92:03:41:fa:98:a0:b5:28:eb:7f:c5:cb:82:
00:a7:3f:2f:16:92:4f:dd:e4:88:11:54:0c:7f:4b:
8f:9f:7e:d3:c2:ce:ca:ce:3d:fe:28:f9:b8:d1:0c:
12:1c:a2:98:be:4d:6f:ed:87:cb:ba:0e:52:7a:7f:
01:31:e9:9b:59:1d:c2:d5:74:f2:f0:4c:79:53:e3:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C1:57:73:6E:0D:8C:21:E8:AA:5B:EC:0D:BE:C4:99:18:F4:3D:C7
X509v3 Authority Key Identifier:
keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b7:8d:5e:2c:4d:c6:b0:b1:66:ee:01:10:40:97:8b:79:d9:
aa:fc:76:bf:56:96:d0:2a:b4:92:15:ca:d3:93:d2:39:f9:c1:
3f:f2:e2:1f:02:e3:3d:fe:ac:96:30:51:02:ba:92:de:b6:c1:
11:c7:86:43:2d:e5:e9:ef:0e:8d:28:15:3b:4c:b1:9e:6b:34:
38:66:23:b1:8b:0e:27:3b:90:c0:e0:45:4b:a3:55:01:8a:b2:
05:f1:41:f5:3a:6f:d4:8b:46:f6:63:4c:9f:c0:0d:ee:0a:85:
51:62:3a:8d:23:68:a7:61:f3:c8:ca:31:53:be:55:bc:f7:9d:
0a:fd:ed:d0:4e:01:c3:2f:80:73:2c:b2:74:a7:14:af:e0:a8:
b2:06:f6:b3:65:5f:fd:07:e6:4b:5a:33:aa:bb:eb:be:5a:c1:
76:7a:6f:b6:f8:2a:71:75:2f:99:cb:16:bd:2f:e4:75:19:e7:
78:dc:42:05:df:99:da:dc:d3:ee:c3:6e:90:fd:a1:f0:51:8c:
58:0b:d9:2f:02:4b:e7:a2:99:68:7b:07:81:da:ee:95:3d:89:
95:d7:bb:69:52:46:36:77:1a:c3:25:75:7e:5c:87:32:5f:99:
3b:e3:04:89:63:dc:e6:ad:b9:bc:05:df:6d:c0:c5:68:13:35:
71:5e:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:20 2025 by rpki-client on console-fra.rpki-client.org