Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File: N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier: AnG3zHI+hOtUMawHfj/pnfKU4ZLJ2/R+D6FP9DZCZ9I=
Subject key identifier: A1:B9:3E:E3:D1:ED:76:81:EA:2A:B3:40:7B:DF:42:1F:65:E2:9D:7C
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer: /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial: 0194C3510003FA334D9C237CEAD116790535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number: 0AD8
Signing time: Sat 01 Feb 2025 21:00:52 +0000
Manifest this update: Sat 01 Feb 2025 21:00:52 +0000
Manifest next update: Sun 02 Feb 2025 21:00:52 +0000
Files and hashes: 1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: dfq2mgmMr+iqO/UTTse79pj2OQpq88lX4EjI28olSGk=)
2: cNzBuZews7ZdR62Aog1WuWIa_Vc.roa (hash: QJxazJXAbp+Y08ZTXOoocYGXg/oCHOcrCqlhmHqJgf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:51:00:03:fa:33:4d:9c:23:7c:ea:d1:16:79:05:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Validity
Not Before: Feb 1 21:00:52 2025 GMT
Not After : Feb 2 21:00:52 2025 GMT
Subject: CN=a1b93ee3d1ed7681ea2ab3407bdf421f65e29d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:fc:14:88:36:36:6e:46:1e:ec:e4:22:b7:
ae:77:b0:b0:48:31:f8:ed:a6:eb:42:34:71:09:f2:
57:48:ef:cc:70:25:5e:0c:7b:c1:9e:94:2e:5b:17:
8c:3b:d5:34:d4:82:19:df:e9:67:ed:d8:dc:63:1f:
7b:6a:b5:b1:dc:64:63:7b:59:33:60:26:27:ca:d3:
61:e5:bc:4d:8d:16:00:57:b7:39:f5:9e:cc:99:dd:
51:ee:ce:41:13:e0:65:c1:80:ca:53:7b:34:c7:fc:
47:92:a3:75:4c:8a:d4:79:e3:52:6d:0f:ca:8e:e1:
83:0a:72:9a:38:40:8f:34:c7:50:d9:f7:8c:72:8b:
56:39:90:2d:a6:44:79:eb:44:2e:a8:56:a4:79:17:
bb:11:e0:5d:f7:ac:7e:d5:9c:13:0e:88:7c:27:71:
7c:f1:23:7f:23:ab:1a:e4:86:95:2d:60:42:6e:34:
83:99:b7:60:b4:fa:29:c7:85:80:39:13:0a:88:f5:
2e:fa:32:e5:78:3f:14:a1:87:1d:9b:d8:76:c9:83:
82:f1:04:7f:cb:13:d6:04:fe:93:3f:8b:89:83:57:
a1:ad:c5:60:f6:19:fe:69:b3:2c:ed:8c:3e:ae:f6:
b5:39:d5:eb:a7:4c:27:6c:25:e3:ed:1a:88:a6:7e:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:3E:E3:D1:ED:76:81:EA:2A:B3:40:7B:DF:42:1F:65:E2:9D:7C
X509v3 Authority Key Identifier:
keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:66:dc:e5:44:0e:41:b6:45:c4:d9:4c:7d:e5:b8:ae:9f:d4:
82:6c:76:d0:de:8b:f2:fa:70:dc:c3:11:7a:d4:19:4d:10:01:
64:6b:0b:f1:71:5e:7c:d4:1d:1d:36:06:dc:fe:82:53:c1:b6:
8b:fc:b7:e7:e0:05:bb:75:94:9d:5d:7b:1f:61:40:f8:ac:c4:
cf:ea:f3:42:b7:2e:64:4e:1b:be:63:b4:45:d6:da:9e:b9:a9:
30:a5:e5:34:7b:df:41:2b:c7:0c:e3:de:bb:08:6b:d3:8d:78:
01:4e:db:3b:db:d1:62:39:8a:3b:4e:8e:25:70:5d:9f:8e:91:
d1:a6:66:4d:a7:44:bb:8d:f2:da:63:9f:e2:2c:a5:64:a3:72:
62:db:45:63:0c:e8:17:5e:ba:77:58:c4:47:b4:16:0a:a1:bb:
b1:d6:a2:29:a4:79:56:6d:db:1a:02:30:10:84:82:2d:5c:35:
76:87:c9:26:a8:f3:36:a3:3a:c6:43:69:14:51:f4:2c:03:4a:
7f:70:12:3e:5c:11:be:51:58:45:76:79:f3:29:6e:4e:5f:ff:
fe:43:3d:81:f5:9c:c3:4c:fb:d9:42:09:6b:d0:98:95:96:e4:
ef:9f:7b:a4:ac:a6:94:09:66:01:98:fc:d2:ce:03:8c:70:a7:
a4:18:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:08 2025 by rpki-client