Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier: 91jpuSwiplv/m2F4mgXL5vtqKvxlkxs0Oj3bziEotjk=
Subject key identifier: E1:B0:2F:69:3B:67:2E:34:DC:0C:D2:3E:D5:5D:0D:29:87:C4:D9:47
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial: 0195113515117443F144FDBCE3A0E72802AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number: 1451
Signing time: Mon 17 Feb 2025 00:00:46 +0000
Manifest this update: Mon 17 Feb 2025 00:00:46 +0000
Manifest next update: Tue 18 Feb 2025 00:00:46 +0000
Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: vEiJUjAfqGCC4Fana94XW2icDENyR+d+WRogMrO2Bso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:15:11:74:43:f1:44:fd:bc:e3:a0:e7:28:02:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Validity
Not Before: Feb 17 00:00:46 2025 GMT
Not After : Feb 18 00:00:46 2025 GMT
Subject: CN=e1b02f693b672e34dc0cd23ed55d0d2987c4d947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:af:4a:81:d8:37:db:c8:02:a8:0f:ac:83:
21:9d:bf:1f:00:5b:22:4e:0e:56:08:8e:5b:9b:eb:
c9:27:8e:a1:91:42:98:b0:d9:15:5b:a3:5f:8a:90:
09:40:54:cf:37:c2:04:15:e9:9b:0b:f9:94:9d:54:
14:8a:0c:90:cc:63:bc:3d:bb:79:59:89:60:77:9b:
20:5d:aa:c6:61:e8:a4:74:66:8e:87:7e:2e:1f:b6:
8b:fb:48:1b:d9:19:8b:2f:ce:70:a0:a2:aa:a1:04:
4a:f9:55:59:26:24:2b:2f:a6:b0:4f:26:14:f2:ac:
23:fb:fa:24:c6:7f:c9:3a:0b:f0:27:d9:35:4d:1b:
35:a3:22:95:69:d9:9b:4b:93:2f:8e:00:59:c7:68:
31:d9:bb:04:4a:26:cf:e8:2e:0c:c5:b5:41:d7:ce:
3c:89:ef:4c:cf:74:8d:d0:86:6b:e7:27:35:a1:7a:
0e:d0:11:91:63:bb:a7:2d:d4:bb:f8:03:e8:23:fa:
23:70:96:95:e4:b9:56:b1:19:0c:7c:d6:42:3e:a6:
3a:8b:e5:ba:20:5c:20:b3:d6:10:dc:de:61:95:53:
5e:71:4c:be:4e:44:2d:d0:08:2c:80:8c:1d:d5:0b:
9e:ab:37:4a:19:fd:2a:f8:9d:eb:ec:df:52:1e:89:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B0:2F:69:3B:67:2E:34:DC:0C:D2:3E:D5:5D:0D:29:87:C4:D9:47
X509v3 Authority Key Identifier:
keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8c:bf:d4:fb:6e:85:71:6e:64:a8:69:b0:f6:03:d6:b3:4c:
90:05:68:17:89:6d:49:0d:f3:c2:31:4d:db:f4:4f:75:e6:a7:
01:a2:d8:96:eb:f4:29:9d:33:23:db:b1:b2:dd:94:93:b9:6f:
0d:a0:77:96:c9:35:ed:7c:6b:00:45:69:f8:92:26:60:88:b1:
7e:34:7d:dc:0f:21:db:d6:e0:2a:58:da:75:6f:6a:7d:be:5b:
e9:0f:14:75:68:f7:d1:0f:9c:86:0a:bf:ef:50:2d:ab:e5:69:
2e:70:3f:e7:8e:3a:61:8b:1b:c1:5f:ce:04:8e:fe:44:06:79:
fa:04:c6:bd:85:85:03:00:f4:59:14:8f:a9:1d:df:38:33:f9:
ce:cd:75:4a:ef:4d:04:64:bb:fe:7d:21:4a:fd:fe:fd:d5:40:
fc:3a:d7:cc:f3:12:c1:80:d5:9f:f1:f8:d0:9c:02:7c:9c:1f:
ba:aa:89:f7:75:62:34:2a:f1:2e:ad:48:2d:42:c6:25:4c:03:
5f:b9:3f:96:5b:98:8a:28:0f:b0:7e:0b:01:21:5c:21:9f:17:
29:e5:a8:21:97:01:6b:df:a0:26:a4:85:71:df:cc:f0:01:be:
6b:bf:7c:d0:4e:90:6a:a5:8f:d4:4d:74:0d:01:dd:b3:44:76:
10:14:e7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:59 2025 by rpki-client