Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
File: NnBwsWnRGpYpEATjAA-bBNThEtM.mft (raw, json)
Hash identifier: yG6VZ/1vYHC5dmew0pqvVJdPXdOsqBI6jeibMTPvkNM=
Subject key identifier: CE:DE:A3:4E:09:3A:ED:BD:8F:59:F5:25:61:71:5E:06:0E:97:D6:60
Authority key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
Certificate issuer: /CN=367070b169d11a96291004e3000f9b04d4e112d3
Certificate serial: 0194C38808580F1EF5EB6388D3FF5886859F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
Manifest number: 0513
Signing time: Sat 01 Feb 2025 22:00:59 +0000
Manifest this update: Sat 01 Feb 2025 22:00:59 +0000
Manifest next update: Sun 02 Feb 2025 22:00:59 +0000
Files and hashes: 1: NnBwsWnRGpYpEATjAA-bBNThEtM.crl (hash: hI0aYiGQ07WMr7NkEW7bQSUzk2FdYXFAXfg1QMH/atQ=)
2: dVmeU4wC0TgcJ1mLjCj6WUgRoKU.roa (hash: Tr7wmryEwMRa1UVn0iohUCcmRld2nTxoTKpz/4davog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:08:58:0f:1e:f5:eb:63:88:d3:ff:58:86:85:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367070b169d11a96291004e3000f9b04d4e112d3
Validity
Not Before: Feb 1 22:00:59 2025 GMT
Not After : Feb 2 22:00:59 2025 GMT
Subject: CN=cedea34e093aedbd8f59f52561715e060e97d660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:0d:9a:bb:86:ff:c0:69:53:d0:0a:6e:c6:
0d:67:36:d4:9d:0a:4b:8c:37:62:38:c0:db:c6:06:
ff:26:b2:9f:84:de:b7:5d:35:cc:3f:b3:a2:7f:a5:
a9:53:9c:f3:11:0f:6a:f7:93:43:c8:72:00:9a:6e:
c4:23:ee:70:c7:be:20:31:f4:06:01:13:97:6d:4d:
a0:5a:73:80:d7:ac:14:a5:79:40:03:b1:17:66:f5:
46:96:9c:14:11:2c:f5:41:2d:59:60:a2:bb:62:dc:
ef:89:dd:82:d1:c1:b2:7d:56:74:c3:69:b3:a6:4c:
a1:8b:34:e2:52:bc:4f:1b:94:a0:5e:ce:32:44:be:
3b:75:c1:bd:7a:65:4a:fd:a3:a6:83:1c:6d:ac:cd:
d2:44:b2:40:d1:bd:c4:b1:07:2d:bd:b1:a1:1e:70:
a1:45:ca:fd:22:fa:40:1d:1d:64:85:8d:08:50:b0:
a8:ec:86:96:bc:6a:4a:24:49:43:40:43:35:bd:29:
91:a5:70:c9:bc:a7:d7:68:39:5e:ba:8f:3d:d9:d5:
15:bf:91:62:f8:05:f5:69:40:b2:0c:24:b3:1e:72:
9f:6c:1c:22:77:03:88:ed:8f:86:2a:c5:c0:8d:31:
fe:e0:ea:b5:2b:cf:48:08:31:5a:72:55:fc:1e:95:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DE:A3:4E:09:3A:ED:BD:8F:59:F5:25:61:71:5E:06:0E:97:D6:60
X509v3 Authority Key Identifier:
keyid:36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:27:33:85:c5:58:59:6d:0a:18:85:f5:33:f7:42:94:6f:da:
37:19:d7:d5:4a:73:08:1e:b0:f9:f0:00:95:03:79:01:7d:84:
bc:f1:a4:4e:b9:47:e0:8f:cc:ee:b9:60:67:fa:4f:c9:e7:4b:
56:d0:6a:cf:6f:b6:e4:d1:ed:4b:63:68:83:ce:2e:af:a3:53:
64:26:40:34:0d:46:97:17:68:d9:5f:75:b4:21:98:00:0b:6f:
1c:93:4e:10:7c:17:0b:ea:a4:53:2d:6f:55:4c:d1:38:1f:da:
c9:69:52:8d:d0:b8:6f:31:93:50:e8:c8:ec:a8:8e:b0:b2:de:
e2:3a:0f:6b:58:21:f4:7f:79:bb:a5:d4:02:e2:13:c7:16:56:
21:da:3a:25:c8:ab:c1:9f:e0:da:2d:92:b5:bd:5b:a4:c2:f4:
65:09:a9:84:cd:fa:1b:a2:46:07:f3:db:56:53:e3:46:df:e3:
a1:29:06:2b:5b:ad:05:ff:a6:9d:7a:52:eb:8c:af:b2:c7:c2:
3f:8d:34:7a:07:03:4c:3e:2a:b8:65:42:6f:25:71:5e:c1:7c:
8d:ff:1d:80:76:cb:14:1f:f7:ae:34:22:a0:8b:a8:4e:08:b5:
60:63:a9:cf:d9:94:bb:56:4e:40:6e:3c:58:6f:cd:1a:46:7f:
a7:a9:2e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:07 2025 by rpki-client