Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
File: nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft (raw, json)
Hash identifier: tBVOoxCAgazFULS6bLXRCdrPPo0wDX/2Zk+AoIxLA2Y=
Subject key identifier: 09:4E:47:B8:6C:AD:4A:98:EC:E4:70:73:BB:14:FB:C0:B7:CB:BB:C9
Authority key identifier: 9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
Certificate issuer: /CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Certificate serial: 01958BBBC95B7E5BABFE261F1EEED35E1A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
Manifest number: 147C
Signing time: Wed 12 Mar 2025 19:01:34 +0000
Manifest this update: Wed 12 Mar 2025 19:01:34 +0000
Manifest next update: Thu 13 Mar 2025 19:01:34 +0000
Files and hashes: 1: nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl (hash: lkDzH2K2TYgsXY1aGn1xGYWdLnGO0CjnSsyXfqyIDNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:c9:5b:7e:5b:ab:fe:26:1f:1e:ee:d3:5e:1a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Validity
Not Before: Mar 12 19:01:34 2025 GMT
Not After : Mar 13 19:01:34 2025 GMT
Subject: CN=094e47b86cad4a98ece47073bb14fbc0b7cbbbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:73:6d:02:56:02:f4:0d:64:56:39:3f:9c:c5:
33:45:3f:df:6d:74:ce:b9:ba:6c:f3:ec:60:68:50:
5e:53:c4:7e:4f:23:7e:46:ac:97:15:1c:0b:0a:a3:
96:f6:84:74:5b:12:48:63:e6:e8:c2:fe:bc:da:68:
fe:58:f2:2c:d9:80:b8:44:f9:27:c4:2f:9c:c9:ac:
30:e2:70:48:24:0a:c5:7e:c3:e6:a2:c2:53:79:22:
73:83:a3:da:26:33:ab:51:88:64:ca:e5:0e:99:0c:
1a:c5:06:4a:a8:8d:3f:4a:c1:b8:9a:9c:f5:bd:62:
14:04:9e:b4:76:63:f6:d3:ef:db:02:f7:0b:92:06:
71:e7:4c:e9:a1:57:2b:e3:74:a2:70:a8:45:34:e1:
5b:3e:35:20:9c:40:f9:37:ca:c5:ff:a5:10:aa:76:
27:9a:4a:f6:83:a4:71:db:4a:7f:e5:53:60:1d:b7:
44:b6:39:40:2a:84:7a:39:1a:a5:7f:ed:a0:ec:c1:
93:4d:e4:66:04:6d:21:2d:c1:f6:bf:68:11:88:61:
98:66:d3:9e:92:9f:9a:53:3e:ad:8c:12:54:6b:23:
ca:69:ad:b9:dd:16:d4:47:16:57:c8:05:73:3c:c4:
6a:13:1d:a7:de:d6:5f:ff:f2:45:4e:2a:ff:bb:6a:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4E:47:B8:6C:AD:4A:98:EC:E4:70:73:BB:14:FB:C0:B7:CB:BB:C9
X509v3 Authority Key Identifier:
keyid:9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2d:fc:b5:ed:38:63:9e:06:ce:0c:89:91:3c:30:04:f2:aa:
aa:ad:13:33:42:ac:e0:db:3d:c9:4c:c0:c5:24:48:6b:70:17:
01:be:e9:88:34:a6:3f:6a:13:b7:cc:3f:6c:03:1c:88:11:8e:
e5:09:c4:0e:aa:57:4b:89:56:d1:ea:0c:bd:25:cc:ae:61:7b:
e3:93:17:50:c6:4f:83:ff:38:42:8d:1c:9e:71:95:63:52:4a:
94:e0:80:ab:2a:7b:e9:f3:55:51:69:57:fc:0d:59:38:28:f4:
2f:b4:b2:2b:d8:71:11:28:4d:58:36:7a:c0:4f:67:c7:a2:89:
87:1f:ca:05:f8:4d:e1:25:3c:42:f2:2a:70:25:04:6b:ee:a3:
82:66:63:55:d4:52:d3:c5:d4:8b:82:76:20:9f:30:a6:99:2a:
e2:cb:ab:06:8b:bb:14:e9:20:cd:34:15:7b:1f:44:07:2a:2f:
66:f8:c4:a8:66:4c:c9:a0:4c:d5:7d:2e:f5:4a:b0:7e:be:b3:
db:d5:13:e3:d8:07:c2:fe:4a:76:4f:05:b7:0c:15:c4:38:f9:
8c:0a:49:4c:2f:1e:a7:32:28:e7:ee:80:09:6e:11:37:7a:3f:
77:cc:a1:37:5e:4c:bf:b6:d0:a9:d0:52:f9:1b:fa:4d:0b:00:
c7:23:18:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:06 2025 by rpki-client