Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
File: nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft (raw, json)
Hash identifier: D/a6X0qT+b1wKAjdJPpHvvJ2VVwzff4cg/p4D2yJ6Nk=
Subject key identifier: B5:FB:43:5B:A1:F9:2B:AD:D8:01:37:CD:EB:0D:4A:BA:F2:3E:C1:0F
Authority key identifier: 9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Certificate issuer: /CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Certificate serial: 019511A2A84E176BB4DF0DC1AA6AB6696208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
Manifest number: 0C18
Signing time: Mon 17 Feb 2025 02:00:27 +0000
Manifest this update: Mon 17 Feb 2025 02:00:27 +0000
Manifest next update: Tue 18 Feb 2025 02:00:27 +0000
Files and hashes: 1: SJakYTj9pb3r41qOMQrQf_YPYbc.roa (hash: tab9yW3GhAbdQLvfn40C4/W+qyYm4f+BamJUC4exFC4=)
2: nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl (hash: L3YTSr53xOwDhemzCfS8viiY3rTMWJtKQue5Dl9rLP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:a8:4e:17:6b:b4:df:0d:c1:aa:6a:b6:69:62:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Validity
Not Before: Feb 17 02:00:27 2025 GMT
Not After : Feb 18 02:00:27 2025 GMT
Subject: CN=b5fb435ba1f92badd80137cdeb0d4abaf23ec10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:59:cc:c6:af:73:20:17:cb:9d:5e:dd:5b:
86:41:3b:f0:f3:58:5e:2b:a6:01:01:15:0c:80:f9:
e3:a2:c1:e9:9d:19:bf:f9:5b:7f:22:03:77:75:f5:
6c:bc:6c:3b:a5:53:49:ac:21:c0:90:93:63:bf:f0:
ae:22:1c:33:97:00:42:44:23:cd:ca:bc:9e:24:74:
d6:a8:df:2a:e5:f8:79:8b:d7:9f:ee:3f:be:bf:b7:
48:af:21:1a:66:42:a8:66:a0:7b:e9:0b:da:3d:09:
24:c2:6e:4c:d7:71:1d:d6:7b:3f:b7:1b:5c:28:a4:
3d:cf:3e:68:91:49:45:3e:4d:15:59:8b:e9:3c:30:
16:3d:fb:dd:50:88:41:c2:9b:47:25:1a:d5:23:c0:
ac:41:d6:68:41:66:38:43:9d:74:23:97:e8:e9:16:
a6:78:b0:bc:73:dc:be:97:2d:9b:c0:39:bc:84:67:
71:9d:91:5e:eb:ab:25:a0:94:de:c9:78:e6:a0:90:
0f:db:02:89:84:fe:81:ef:0f:f2:56:de:6c:bf:97:
20:12:27:d0:31:1c:d4:71:05:46:4f:09:16:fc:76:
0c:42:0e:ac:46:17:a8:61:a5:4d:32:14:44:f1:ff:
ec:6c:9e:8a:11:51:7b:1f:0f:47:a8:0c:12:d3:7d:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FB:43:5B:A1:F9:2B:AD:D8:01:37:CD:EB:0D:4A:BA:F2:3E:C1:0F
X509v3 Authority Key Identifier:
keyid:9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8d:ed:7f:37:06:a9:c1:3f:24:82:34:1a:ca:f7:34:c3:b3:
6a:dc:24:d0:ea:d4:5f:6c:d5:5a:ab:fd:dd:f0:ad:12:74:09:
f7:67:c3:2a:f2:52:fd:2b:5c:36:33:92:32:a6:af:ab:9b:5f:
c7:85:eb:68:a8:47:71:a2:37:c5:45:62:92:40:57:8e:84:e0:
cf:d3:9d:f0:41:dd:49:b5:8a:e6:09:91:55:71:e6:38:8d:10:
42:2e:27:97:7b:4c:3d:8b:c1:f0:bb:9d:ad:20:b0:4a:92:64:
8b:71:48:fb:99:98:10:d5:2e:e8:b1:20:1c:06:d4:b0:d1:a9:
54:c3:69:02:da:e9:50:57:f5:10:fa:9c:36:57:cf:99:4e:24:
aa:1c:96:c2:6b:db:26:80:f9:d2:a6:4a:a4:23:99:1d:4f:8c:
a5:e7:f9:37:af:bf:05:4c:cb:e8:20:46:ff:89:47:3a:c8:ce:
14:88:63:cc:93:95:15:6d:9b:b1:b4:99:e3:58:ac:71:53:97:
60:9c:df:0b:a9:9b:74:20:50:ce:e2:76:69:b4:f8:76:ff:a7:
b5:69:42:42:0c:b4:84:34:8d:f9:28:28:45:2c:46:6e:61:dd:
00:96:a4:1b:26:fb:ed:db:dd:df:fa:b3:8d:13:0f:34:56:cb:
e8:ab:7e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:01 2025 by rpki-client