Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
File: nv9H-JUh2bSSt9BCG8J2kevwbv0.mft (raw, json)
Hash identifier: ijIWyvUqRm4aSoH+KHz3gTEP2uhutohTmgHGiwG62sQ=
Subject key identifier: 8B:42:C2:85:96:C4:21:09:56:FD:14:AF:A5:C5:35:B9:C0:AB:2B:2A
Authority key identifier: 9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
Certificate issuer: /CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Certificate serial: 0194C3F62D33ED7933F68B0C12DEF802F6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 00:01:17 +0000
Manifest this update: Sun 02 Feb 2025 00:01:17 +0000
Manifest next update: Mon 03 Feb 2025 00:01:17 +0000
Files and hashes: 1: RKq6Jd2UH9wWubKSgst7pZ7LyKU.roa (hash: ifDG8ANyaXOjVuCl1ow9SIV2BWxCkzstlJEhmLPckaQ=)
2: nv9H-JUh2bSSt9BCG8J2kevwbv0.crl (hash: anmCWzOe+TlgtxWKY/eGv/eAfMO9EvaMcFPg25v5GwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:2d:33:ed:79:33:f6:8b:0c:12:de:f8:02:f6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Validity
Not Before: Feb 2 00:01:17 2025 GMT
Not After : Feb 3 00:01:17 2025 GMT
Subject: CN=8b42c28596c4210956fd14afa5c535b9c0ab2b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:68:4f:df:37:2f:f3:d4:ac:ca:9f:a2:ba:
ea:d4:5e:93:af:4a:ef:08:f7:30:3e:e2:f4:d6:f7:
e1:d6:ec:52:69:8d:64:17:4e:37:b5:63:3a:93:a3:
b0:ee:ff:47:ed:0d:de:aa:82:55:88:2e:cd:b4:01:
3b:e6:d0:cd:35:30:d7:24:f9:56:b5:14:a9:3e:db:
40:23:84:b1:bc:d0:c6:92:ed:f6:c4:8e:78:5e:6e:
b7:82:13:fa:d2:73:8c:ba:d7:73:c0:7c:33:6c:54:
50:b5:7d:37:d2:1f:c8:da:c7:8c:76:11:23:53:e2:
12:19:36:87:a2:56:63:0b:cd:07:31:72:74:2d:79:
c4:38:b5:ed:d9:3d:15:44:8a:95:cc:ed:5f:b4:f4:
c8:32:b3:f3:69:8b:7c:9c:37:04:05:64:64:b1:6c:
d4:de:4a:49:0d:de:75:08:79:b7:53:e1:9d:22:8e:
09:f8:f6:dc:71:db:5f:bc:37:87:27:a1:a3:e0:03:
d8:47:c2:99:cc:93:a0:30:d0:51:42:06:c1:63:d5:
35:8b:e4:f4:10:0c:2a:a8:fd:14:f6:ff:9d:bc:90:
28:b9:8b:e6:68:97:39:8a:ea:42:63:5f:06:2b:c7:
86:d3:2a:9d:07:d9:95:a6:01:10:db:aa:ee:7a:22:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:42:C2:85:96:C4:21:09:56:FD:14:AF:A5:C5:35:B9:C0:AB:2B:2A
X509v3 Authority Key Identifier:
keyid:9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:08:b4:4a:12:5d:9a:0c:ac:a6:07:c2:f9:ab:71:e2:1d:4a:
de:8c:e4:2b:8d:09:65:e4:ee:f5:8d:3d:16:09:1e:7b:fe:27:
c2:61:9b:3d:be:87:1d:63:8d:62:8b:65:37:7a:30:8d:49:d7:
88:28:95:e0:62:5d:fb:ff:20:3b:e0:4e:19:42:68:5d:d8:e1:
23:fa:07:fb:70:25:e0:61:b6:0f:5a:b0:03:72:83:e3:43:b1:
01:4b:2c:b1:3c:2e:b4:82:88:85:92:f5:0c:18:e7:c6:32:b3:
28:44:d7:c5:e4:2b:d3:75:b4:52:87:91:ba:a3:7b:89:d1:86:
7e:56:00:e0:6f:ed:5e:91:62:33:90:ed:bd:a2:3e:ed:44:ae:
a4:15:7f:8b:9d:10:49:8b:85:a9:0a:d7:6e:9e:90:71:46:99:
9d:0c:cc:31:ca:94:46:65:f7:fe:b6:1c:21:f6:d1:34:3f:e8:
54:8f:ea:45:1a:32:60:f0:b3:af:94:4c:46:56:55:c2:c2:aa:
f1:7c:eb:29:e5:66:e7:b3:77:0a:9c:13:ce:cc:65:4c:99:51:
1c:36:1b:21:39:45:03:c7:b3:65:85:56:50:7b:c9:8a:b5:9a:
71:13:2f:c1:72:9c:8f:6d:ea:a3:ff:15:2c:bc:a8:0e:02:bc:
73:22:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:00 2025 by rpki-client