Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier: wMfZGjz2WBYsC+UepaXlZCo4LP0ay8lVQVamzGUTuJw=
Subject key identifier: B6:94:5B:C7:9C:F1:CD:90:57:4A:55:5F:65:3C:CA:00:83:C8:47:38
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 019511D9753D9AFCF0FA3A2B77BEC4494E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number: 0F1D
Signing time: Mon 17 Feb 2025 03:00:18 +0000
Manifest this update: Mon 17 Feb 2025 03:00:18 +0000
Manifest next update: Tue 18 Feb 2025 03:00:18 +0000
Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: 120vgOvykgM0ggbq9FCcNLrrm8K6Bvwbg+gledONi1w=)
2: yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa (hash: Xz+3ntm5iVPl2B9YcE2P65g+xG5FxMjLX4w1n0LEPnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:75:3d:9a:fc:f0:fa:3a:2b:77:be:c4:49:4e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Feb 17 03:00:18 2025 GMT
Not After : Feb 18 03:00:18 2025 GMT
Subject: CN=b6945bc79cf1cd90574a555f653cca0083c84738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:1c:1c:f8:98:a0:d1:f3:47:ea:c6:bb:ad:
51:75:bb:7e:0d:6b:25:f3:93:a6:81:5f:de:ee:95:
01:a7:e5:ee:76:23:5a:16:76:04:67:64:18:03:ed:
3b:2f:b3:a4:bc:f9:6f:74:33:a9:a1:3c:0b:86:17:
8f:f0:83:77:47:6a:11:a5:5a:09:2e:57:b0:98:ba:
d5:2e:2c:00:25:18:46:91:8b:a8:10:4d:5d:12:c1:
3d:4d:3e:0d:77:8a:e7:c8:8f:12:a3:2e:b2:c1:32:
bf:23:8b:54:5e:0a:a8:31:55:ca:00:f9:f4:b5:25:
3e:c7:84:7c:54:66:21:c0:09:d2:76:91:07:95:58:
74:ad:c3:3a:38:53:95:66:ca:d2:22:15:c0:4e:43:
c7:22:39:c3:a4:82:67:f8:53:61:f5:4d:c3:ba:67:
25:0b:8f:d8:25:a5:b9:e4:c6:29:3f:b7:3c:db:c4:
9e:fb:9c:36:79:42:2d:44:73:78:cb:3f:1d:db:44:
a8:d7:b9:ee:fe:7e:06:9a:a2:2f:51:ee:13:38:ad:
48:74:f8:73:0b:46:4b:19:47:e8:dc:a0:91:91:53:
fb:04:be:01:97:04:ff:23:96:08:ec:9d:22:27:a1:
f5:35:47:96:38:a7:71:dd:5e:32:37:8f:21:e0:2a:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:94:5B:C7:9C:F1:CD:90:57:4A:55:5F:65:3C:CA:00:83:C8:47:38
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:93:22:5c:b1:b4:9f:99:07:a0:66:1d:4a:4a:8f:d8:0a:31:
9d:57:94:b2:46:8d:5f:37:1c:d6:b2:18:5b:28:06:50:0c:21:
5e:00:ab:0e:d0:5c:57:b0:18:5b:32:86:d3:21:03:3f:05:fe:
9d:33:60:d1:65:87:2e:8f:01:02:ef:d8:8a:d8:99:e1:f9:87:
7c:1e:56:49:91:ba:16:89:23:7e:fb:83:91:3a:17:6f:23:e1:
d6:d6:17:c1:57:c2:e0:33:5f:50:34:ad:ca:c4:d5:f5:07:ce:
32:d8:6c:ac:61:96:57:f5:06:d9:67:a4:c8:30:b2:d7:b5:e4:
a8:db:d5:a3:21:49:4b:e1:a1:d0:4d:a0:53:c8:84:02:91:d2:
33:9e:56:a9:64:32:db:0e:1d:20:11:4f:4a:f5:5f:b2:a2:03:
9d:26:b9:a3:a6:56:c5:dc:2e:e3:7b:ec:27:a2:8d:58:0f:4f:
60:69:a6:75:6c:ba:de:f1:59:47:88:b8:ab:cd:90:09:a7:1e:
d4:32:99:4b:53:64:d7:d6:26:3e:be:6e:9f:d2:de:74:51:ce:
84:0c:5f:d2:8d:30:77:db:05:ba:8d:7c:03:b8:37:a7:59:a6:
7e:dd:d1:c2:f1:44:57:6e:30:ab:23:41:91:90:7f:37:e4:77:
43:d7:8d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:11 2025 by rpki-client