Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: xcL4bDnCs7aCGFVFmMuMCjr28NRgd68E9n7Nv9tsXPs=
Subject key identifier: DC:05:33:4B:DA:2A:2E:EE:45:BC:2A:54:16:9D:87:85:EB:C2:0B:63
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 019511A30E9828DAAC4853723B50C6607DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0B37
Signing time: Mon 17 Feb 2025 02:00:53 +0000
Manifest this update: Mon 17 Feb 2025 02:00:53 +0000
Manifest next update: Tue 18 Feb 2025 02:00:53 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: TztPB/SRb1XZRh0VeDrWK37yEyujXGDzSzpoxm4mMwY=)
2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:0e:98:28:da:ac:48:53:72:3b:50:c6:60:7d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Feb 17 02:00:53 2025 GMT
Not After : Feb 18 02:00:53 2025 GMT
Subject: CN=dc05334bda2a2eee45bc2a54169d8785ebc20b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:92:18:d3:ae:f5:db:31:d9:44:0e:dd:6c:
91:6c:3c:a9:bd:c8:0a:41:6e:b9:35:cf:a4:b9:51:
20:68:c1:bc:2c:65:ee:a1:bc:6f:00:31:6f:64:35:
3d:99:f0:33:e5:69:55:8e:64:85:4d:75:d0:a1:5c:
6d:89:f4:31:f9:72:9e:cd:bd:9f:86:b9:f7:19:77:
67:50:11:07:15:5b:59:59:80:d7:bd:e1:29:3b:7b:
6c:4e:b3:cd:e8:ed:20:4d:dc:9a:93:0d:b8:a6:7a:
86:4e:2f:b1:74:e5:be:7f:04:8c:8b:08:ad:a9:fe:
a5:75:db:42:ae:07:fb:9a:53:19:2f:db:f2:2b:69:
ee:40:b4:df:2f:92:cb:75:59:3c:b2:2e:c7:77:73:
69:da:f2:14:ad:15:d6:bd:2e:dd:5f:35:6e:d8:c6:
14:74:03:7a:51:b5:3d:c5:83:95:5e:81:98:25:c5:
fe:cc:8e:17:3b:5c:e9:e6:40:bf:9c:d4:a9:af:40:
3b:b1:d1:5d:d9:4c:7f:ea:ce:d4:28:85:c4:1f:d6:
40:8f:fb:22:27:ae:de:bf:3a:68:96:04:e1:cd:10:
9c:db:21:f1:03:b1:9e:3a:89:d3:5c:c3:37:a3:1c:
07:57:04:d2:e2:0e:81:19:c2:2d:3a:a6:f4:30:55:
04:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:05:33:4B:DA:2A:2E:EE:45:BC:2A:54:16:9D:87:85:EB:C2:0B:63
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:61:1a:11:d7:fb:77:44:90:e2:ad:3c:df:5a:b8:6b:b8:8d:
55:1e:82:ef:27:ab:33:03:dd:fc:82:35:6b:a4:9d:b5:27:f3:
74:4c:47:06:fd:df:41:df:c9:17:ae:51:94:d6:f1:1a:05:5e:
11:3d:3f:99:f0:3b:fb:3d:ff:c8:48:97:8c:e5:bd:87:1c:47:
3a:aa:99:fa:53:ef:fb:86:02:a4:ee:d5:3b:6b:5c:db:f3:90:
be:98:e0:e2:7f:b6:c8:ed:76:4b:9c:d9:18:53:4c:9d:9c:0f:
d5:53:70:28:9b:35:03:33:07:ad:47:41:fd:d3:fe:50:e3:27:
27:13:a4:e0:9f:36:c8:00:98:e2:38:1f:d2:19:eb:66:ef:b0:
75:06:45:07:dc:55:b4:59:e3:97:9a:62:bd:e2:42:2a:82:26:
6e:4c:7b:40:1b:db:6c:06:1c:47:ae:0b:03:f9:e5:3f:f1:d2:
a0:6e:78:ac:84:95:b5:d0:8f:9a:e4:90:ff:92:c0:00:c6:da:
50:15:95:89:a5:ad:69:fa:6a:70:f5:bc:ed:a1:9a:bd:4a:06:
2f:40:eb:bf:90:19:04:19:47:f4:81:f8:ac:e1:58:0f:f4:c9:
64:66:ef:fe:b8:69:16:b9:6f:ef:99:c9:d4:d1:0f:05:0e:40:
05:fe:ea:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURow6YKNqsSFNyO1DGYH3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzQ2NWZmZGJhM2MwNWMyMWJlNWIxNWYwZDkxNWVmY2Ni
MDY5ZTUwHhcNMjUwMjE3MDIwMDUzWhcNMjUwMjE4MDIwMDUzWjAzMTEwLwYDVQQD
EyhkYzA1MzM0YmRhMmEyZWVlNDViYzJhNTQxNjlkODc4NWViYzIwYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JGSGNOu9dsx2UQO3WyRbDypvcgK
QW65Nc+kuVEgaMG8LGXuobxvADFvZDU9mfAz5WlVjmSFTXXQoVxtifQx+XKezb2f
hrn3GXdnUBEHFVtZWYDXveEpO3tsTrPN6O0gTdyakw24pnqGTi+xdOW+fwSMiwit
qf6lddtCrgf7mlMZL9vyK2nuQLTfL5LLdVk8si7Hd3Np2vIUrRXWvS7dXzVu2MYU
dAN6UbU9xYOVXoGYJcX+zI4XO1zp5kC/nNSpr0A7sdFd2Ux/6s7UKIXEH9ZAj/si
J67evzpolgThzRCc2yHxA7GeOonTXMM3oxwHVwTS4g6BGcItOqb0MFUEnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwFM0vaKi7uRbwqVBadh4XrwgtjMB8GA1UdIwQY
MBaAFDZ0Zf/bo8BcIb5bFfDZFe/MsGnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEt
NWU0N2NmMTk5ZGZmLzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEtNWU0N2NmMTk5ZGZm
LzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGEaEdf7
d0SQ4q0831q4a7iNVR6C7yerMwPd/II1a6SdtSfzdExHBv3fQd/JF65RlNbxGgVe
ET0/mfA7+z3/yEiXjOW9hxxHOqqZ+lPv+4YCpO7VO2tc2/OQvpjg4n+2yO12S5zZ
GFNMnZwP1VNwKJs1AzMHrUdB/dP+UOMnJxOk4J82yACY4jgf0hnrZu+wdQZFB9xV
tFnjl5piveJCKoImbkx7QBvbbAYcR64LA/nlP/HSoG54rISVtdCPmuSQ/5LAAMba
UBWViaWtafpqcPW87aGavUoGL0Drv5AZBBlH9IH4rOFYD/TJZGbv/rhpFrlv75nJ
1NEPBQ5ABf7qRg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:17 2025 by rpki-client