Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: 3BLeBLkniy92Nbch7YfhyozCqkhZHAcFGiHSOp7W8QQ=
Subject key identifier: 8F:E9:C1:02:90:91:B8:71:3C:E4:CC:00:08:8B:0B:E6:E8:62:DC:AE
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 0194C3BE51765397E1E3F8DF87BBC89A0126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 142D
Signing time: Sat 01 Feb 2025 23:00:17 +0000
Manifest this update: Sat 01 Feb 2025 23:00:17 +0000
Manifest next update: Sun 02 Feb 2025 23:00:17 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: i7axLOFXc5da2MXLuUuLGxl0Jeyp3ekYwI86uJ11p5o=)
2: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (hash: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:51:76:53:97:e1:e3:f8:df:87:bb:c8:9a:01:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Feb 1 23:00:17 2025 GMT
Not After : Feb 2 23:00:17 2025 GMT
Subject: CN=8fe9c1029091b8713ce4cc00088b0be6e862dcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:20:fa:fd:8f:a6:a6:15:df:dc:ae:40:f7:
2d:a8:0b:b9:60:4d:10:6a:a6:36:90:1a:95:f5:22:
d6:4e:fb:96:5b:45:15:9b:1c:b2:7b:bf:6d:60:15:
34:d0:7f:6e:54:5d:a8:b7:66:1b:64:68:77:7c:85:
b3:74:66:0f:e4:5e:7f:0e:5f:8f:db:13:e2:1f:bb:
05:14:1e:1c:27:7f:88:ef:94:5c:cf:67:f2:63:7a:
63:f5:e3:35:a1:11:84:f3:c3:65:d8:b4:ad:7b:5d:
7b:08:2f:cb:6c:31:b5:9c:65:8f:88:3c:36:0c:58:
58:93:cf:f7:af:c2:83:df:c8:4f:1e:f7:09:a8:6e:
1c:c7:a2:b0:3d:be:d4:01:75:89:fd:44:a1:47:ad:
29:29:d5:40:9c:bb:31:4d:76:e1:c9:09:85:1a:61:
05:d9:93:08:62:22:a4:22:2b:6b:92:65:73:35:99:
ce:ba:63:1b:9d:ee:a3:e3:d1:0f:0c:30:58:08:0b:
16:74:89:36:2b:01:da:27:ba:67:95:a6:3c:6f:61:
2a:76:e3:8d:b4:c6:f3:25:38:e0:17:ea:24:72:fb:
02:9a:6d:b7:f4:13:5a:b6:e1:aa:f8:08:b7:3d:8b:
2a:7c:82:96:81:d1:5c:fd:1e:2b:25:70:bf:46:84:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:C1:02:90:91:B8:71:3C:E4:CC:00:08:8B:0B:E6:E8:62:DC:AE
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:eb:8b:91:32:7c:b9:10:e5:43:a1:38:9b:ab:eb:73:2c:b5:
39:1a:d1:d5:17:be:f5:d8:64:73:3f:10:18:25:5b:c3:56:0c:
26:05:e1:1a:0b:4f:33:60:3e:85:f6:fa:cb:2a:f9:16:9f:19:
c8:e7:9e:71:22:68:d7:ae:2c:2a:f4:45:b3:a5:71:83:c2:00:
f4:d5:37:d2:ca:39:72:13:93:2a:f8:94:97:02:cb:78:0a:04:
c3:30:c4:39:c5:1a:b3:e3:f0:c9:d4:39:0f:53:fb:26:50:f6:
46:a1:2f:03:cb:14:84:2a:fc:e9:57:62:fa:e3:55:b5:5c:25:
07:df:f2:ff:59:31:c5:28:f4:74:1d:3f:02:61:9f:a2:1a:73:
66:cf:18:fa:7d:ef:00:c4:29:6d:ca:39:5b:09:c5:70:e9:1a:
db:4c:7f:b9:ec:51:04:6f:61:eb:f1:06:54:d0:ef:dd:73:d0:
77:77:0c:ea:32:d3:99:30:b0:f0:54:07:04:4b:f8:a5:a7:ef:
ca:ec:a2:9f:d1:01:35:9a:74:ab:b1:bf:54:6a:aa:9f:f1:62:
3b:ee:c2:dc:4d:75:b6:95:c8:4d:88:07:e2:a0:4d:28:f5:8b:
6d:83:0b:82:09:d8:df:bc:83:3f:96:57:08:55:67:10:f4:65:
1f:bd:c5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:43 2025 by rpki-client