Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
File: nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft (raw, json)
Hash identifier: sWaQ2zux4Fkn2caTQMYrH+G1qBeeh672Mj4TjGTg9A4=
Subject key identifier: 64:47:4D:41:1E:B7:1B:06:14:AE:75:B8:7E:0B:AC:39:B6:64:AC:90
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Certificate issuer: /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial: 0195124740CC20F89FB481B58E9A2C6455DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
Manifest number: 134D
Signing time: Mon 17 Feb 2025 05:00:14 +0000
Manifest this update: Mon 17 Feb 2025 05:00:14 +0000
Manifest next update: Tue 18 Feb 2025 05:00:14 +0000
Files and hashes: 1: D2puN1AdZ1JNvFyB30_yGN8jQe0.roa (hash: 2k+YekT8y6pWHIhQMm8Q342e5tW1eRByVypogLnX8G0=)
2: U_LNSvlDlkkr0YEu8loP_N3lVG8.roa (hash: sfDFxTDzQkmKbFdSJOmY1OQKmiVJ1hkpwWXjIhD3ogw=)
3: nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl (hash: xfALi4jFXvxsvwANwvUIpLEQzFYTvL9w6DTd5D9hEC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:40:cc:20:f8:9f:b4:81:b5:8e:9a:2c:64:55:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Validity
Not Before: Feb 17 05:00:14 2025 GMT
Not After : Feb 18 05:00:14 2025 GMT
Subject: CN=64474d411eb71b0614ae75b87e0bac39b664ac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:1d:9c:b9:a5:28:1a:67:44:77:21:42:ac:
65:15:d0:c6:80:73:a7:a9:cb:61:f7:b0:10:78:b1:
fa:ca:25:c8:92:84:90:fd:eb:aa:2a:04:96:3e:01:
12:19:d7:36:bc:ce:68:08:54:25:e6:1f:e2:1d:8c:
69:9d:d4:03:b8:27:b4:47:ac:8f:b6:be:93:78:a1:
46:64:e4:76:c3:75:6c:b4:fb:95:c9:da:fd:41:66:
54:ca:29:6e:48:2f:5c:10:ca:a1:c1:d7:17:6c:54:
5b:98:8f:24:ae:27:42:7b:e6:64:47:8a:26:cd:c5:
c5:53:f8:27:d3:b2:75:3f:5c:f2:d9:67:4d:14:de:
18:bc:fd:0e:d3:97:4a:4f:77:2c:0c:fe:37:63:fa:
a4:1b:95:07:17:0b:ee:7a:5f:9a:f6:8e:02:79:94:
8b:80:49:f0:45:fb:f0:7c:70:65:f4:84:6e:b3:ec:
9f:f6:2c:28:d9:a9:4e:f4:3e:50:a5:c7:47:f6:77:
b4:e3:17:bf:c6:79:09:4f:fe:42:c6:a6:1d:b3:13:
ef:13:27:59:31:61:e7:fb:81:13:72:7f:65:91:f3:
ca:f1:e0:c2:8a:40:11:97:af:ac:44:12:51:a7:ce:
58:31:7b:c8:f9:7a:0a:f8:de:39:03:f6:ef:ee:09:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:47:4D:41:1E:B7:1B:06:14:AE:75:B8:7E:0B:AC:39:B6:64:AC:90
X509v3 Authority Key Identifier:
keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:52:6e:f0:b4:9d:2f:1f:e3:cb:2d:e4:7c:35:fd:ed:48:73:
ab:59:51:f2:e2:0e:1c:4e:49:e9:56:4e:8c:e8:3b:33:19:f7:
15:f3:22:84:4d:db:35:5f:df:ba:ca:cd:cf:68:e4:44:20:7b:
1d:85:34:40:34:5e:3e:59:04:bb:1d:2e:5f:3c:a9:23:19:27:
61:c9:4b:2a:82:e3:05:23:07:71:e1:e3:94:7d:4d:b4:55:1b:
7b:25:60:f5:49:6a:24:f0:58:f3:cc:7d:48:2b:7d:6a:5f:a8:
fc:0f:0e:e0:fd:23:ed:d4:42:ed:cb:a4:f5:db:6c:b6:12:72:
01:f3:09:d9:a1:e5:04:95:96:a8:fa:32:d5:68:d2:79:db:05:
bf:43:2c:9e:98:9f:10:9d:9e:bf:39:af:1c:5d:f2:24:6b:37:
a4:73:46:8d:c0:d9:03:aa:48:4e:b3:dd:57:72:36:32:f0:c2:
b4:fd:d2:be:4a:cb:19:a4:19:71:d2:5c:0d:80:a2:cc:5f:c1:
dd:6c:bd:da:a1:f9:da:19:71:d2:37:fc:2f:f7:4c:2f:28:eb:
59:99:48:cc:e2:22:f5:4f:e3:87:00:e0:9d:0e:d4:72:50:c3:
19:83:12:fe:68:06:48:93:2b:1d:6f:ae:d6:b1:f4:d1:d1:38:
a8:a5:9d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:42 2025 by rpki-client