Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier: VyNw2o4kjKquxQmZtWYS5e5beMF3NUyIaZU5XI6QF98=
Subject key identifier: 64:6C:D2:F1:BD:EF:26:32:27:72:9A:D0:A2:C0:78:AA:B3:40:58:C4
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial: 0194C3196F2B0ED0A1897A5B286098F56CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number: 0408
Signing time: Sat 01 Feb 2025 20:00:11 +0000
Manifest this update: Sat 01 Feb 2025 20:00:11 +0000
Manifest next update: Sun 02 Feb 2025 20:00:11 +0000
Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: JEnwUe18YMU84DURIl1iJ5q/YezP5smM2tTuS6m0ym4=)
2: uDZZBTPRRP5MQogb2OjdT8pUiBA.roa (hash: T9yL9Bw5mv08XIGrA3/0U3W6rC1uZNivZ+GrYQ4KE/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:19:6f:2b:0e:d0:a1:89:7a:5b:28:60:98:f5:6c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Validity
Not Before: Feb 1 20:00:11 2025 GMT
Not After : Feb 2 20:00:11 2025 GMT
Subject: CN=646cd2f1bdef263227729ad0a2c078aab34058c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:2e:78:bf:fb:9d:0d:7c:c9:41:86:30:6b:
63:c9:89:21:5e:ff:a6:6b:d1:b5:7a:ca:1a:5e:9d:
61:19:23:a3:eb:ba:8c:70:02:72:e3:fb:37:16:4d:
a8:c5:49:7c:82:03:31:e8:d6:4e:80:31:05:c7:f5:
98:ab:4a:a4:17:98:51:15:78:a7:09:02:7c:8d:e8:
84:7f:6d:38:1c:3e:02:54:97:bd:9a:2b:0e:af:56:
29:cb:3d:b4:3c:16:60:77:fc:6f:0e:f9:cc:fa:fc:
0b:56:02:34:37:14:0c:58:7f:ed:b5:60:50:77:3f:
b9:bf:10:37:c4:2d:c9:05:81:dc:d1:fb:77:99:f1:
9b:26:c9:ad:98:e4:ab:70:61:07:54:19:78:ef:71:
f3:e3:b5:88:7d:8c:7e:53:c5:da:54:8d:2e:37:d8:
1b:28:a5:2a:2d:b4:fc:ef:51:a6:fb:2c:6e:f4:f3:
4d:da:0b:1d:9a:c8:8a:27:0b:f6:34:21:7d:d4:fa:
01:73:f9:72:ff:ca:7f:0f:20:f4:17:71:c6:64:94:
dc:c3:0c:b3:27:c7:db:da:22:1b:8a:59:6b:67:02:
ac:a6:64:27:cd:d2:b8:c1:04:e9:65:a6:1e:82:df:
c5:7f:9d:fd:78:11:53:e2:fd:4a:62:e4:09:71:5c:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6C:D2:F1:BD:EF:26:32:27:72:9A:D0:A2:C0:78:AA:B3:40:58:C4
X509v3 Authority Key Identifier:
keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:db:69:3e:b3:0f:fc:59:02:7a:61:05:58:5c:f1:00:bd:3c:
ab:7b:ba:1c:d6:40:e2:0a:21:5b:e6:d2:d6:79:df:11:89:17:
9c:08:48:02:df:5f:05:14:fa:a2:0d:ea:f7:f5:bb:91:ec:bd:
25:a0:f0:41:c1:05:5b:e3:e8:f5:8e:3b:68:d1:9c:73:e4:79:
4d:34:9b:ef:bd:3b:10:00:1b:d6:14:84:2e:02:02:ae:92:0c:
9a:be:48:22:0c:fb:83:5c:69:dd:48:9f:bc:fd:72:81:aa:0a:
b6:88:14:6c:5b:bb:3e:d3:be:d8:96:37:af:49:32:ad:66:95:
4c:ca:99:d2:fd:15:b6:10:a6:fb:7d:f1:24:1a:02:b0:4d:82:
c4:97:32:f3:a0:21:5f:f3:b1:41:9b:71:ef:27:6e:2c:f3:a5:
2c:9e:07:44:94:5a:26:a0:e7:7e:7f:5c:ed:97:fb:83:2d:ee:
7b:a4:aa:5c:c0:42:4b:6e:18:de:28:84:72:96:dc:0f:25:0f:
a8:df:f4:7e:c9:97:fa:ab:c4:b7:b3:0c:0a:2e:ac:7e:72:b9:
45:cc:d7:95:54:7f:32:f2:36:c4:42:68:52:42:15:19:0f:84:
a1:2b:65:64:d2:03:71:76:ad:48:8c:e6:27:a0:70:d7:4d:3c:
9d:8f:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:01:35 2025 by rpki-client