Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File: Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier: 6LHu10F/CU7IehvemLRY080NtrydVMbv+VFuidZlvUY=
Subject key identifier: 86:C1:17:C7:61:A4:2C:B8:9E:7A:CA:0D:6D:D9:13:CF:E9:59:58:FD
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 01951210A9E553F547BEBE70F43341D471B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 04:00:36 +0000
Manifest this update: Mon 17 Feb 2025 04:00:36 +0000
Manifest next update: Tue 18 Feb 2025 04:00:36 +0000
Files and hashes: 1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: CWlqeyZ8nQf/8OUZXFPtXERy5vG2A8iTaBFNC0X6zJ4=)
2: SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa (hash: 790cASmrwFRWvIHgSFvW34RkdQVbe9565zpCVGOf6tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:a9:e5:53:f5:47:be:be:70:f4:33:41:d4:71:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: Feb 17 04:00:36 2025 GMT
Not After : Feb 18 04:00:36 2025 GMT
Subject: CN=86c117c761a42cb89e7aca0d6dd913cfe95958fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:a9:e5:2c:fc:1d:19:e0:fc:a5:29:b5:cc:
a3:af:36:19:46:5d:0a:49:cc:00:7d:a8:db:04:5d:
95:8f:50:cf:88:0f:a5:3b:bf:27:b6:84:17:e6:d5:
ef:a8:24:88:4f:de:6a:a5:c6:4f:9e:89:f7:ef:39:
44:64:2b:a1:dd:44:95:1c:db:66:87:b1:0e:47:ff:
05:35:c9:fc:ca:00:b1:cd:16:ad:8e:4d:cb:c8:45:
8f:87:81:10:42:20:67:47:be:cd:a5:05:12:8c:21:
55:18:3b:50:1a:4f:9e:90:95:10:d1:a2:11:85:0e:
4e:d2:1c:7c:f4:58:e7:11:b4:03:ae:13:12:0f:c2:
98:30:b8:55:79:d0:7b:df:cb:34:a6:01:76:ac:7a:
56:00:ad:5f:46:13:19:7b:5c:54:de:53:34:ca:49:
1a:3e:53:8b:4d:98:3b:76:c8:3f:58:d0:2c:e1:f4:
be:fb:4d:d0:e0:dc:25:f5:a8:fd:04:5d:d4:e8:85:
8e:45:e0:40:7c:aa:30:71:4b:47:11:b3:8d:0a:31:
23:9a:15:1c:50:80:30:74:fd:3d:41:6d:32:52:b6:
06:99:4e:ac:e2:30:8d:23:1d:e6:97:fe:86:80:ec:
db:d6:bd:25:c9:25:2d:e6:72:f7:c1:c8:07:ff:02:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C1:17:C7:61:A4:2C:B8:9E:7A:CA:0D:6D:D9:13:CF:E9:59:58:FD
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fc:31:dc:79:05:54:c4:3c:b2:8b:9b:ac:dd:41:ce:fc:d8:
54:ca:6a:c4:9e:e4:11:d9:74:d0:13:4a:35:5b:f4:5e:6a:4d:
00:59:37:35:28:e2:59:e2:31:6d:74:f5:01:32:ec:78:a1:df:
83:ac:88:21:b2:1c:b7:79:23:2b:6d:47:8a:9d:a7:36:ec:fb:
ec:5f:56:53:f1:fc:fd:1a:58:e4:d7:0d:de:c6:0b:38:0b:f2:
24:75:b7:cc:de:ea:3b:68:91:2f:82:b6:ce:97:64:cf:50:25:
41:8c:af:2b:05:04:dd:c4:5a:06:0a:bd:3e:31:20:81:fe:8a:
e7:5f:b3:cb:02:28:c8:e9:ab:a7:bb:cf:14:55:fb:4f:d2:d5:
bc:3d:54:94:d2:e0:86:67:0b:a7:3a:4a:38:c6:ec:4f:1d:7b:
2a:85:28:e1:62:71:a4:4e:76:e6:b9:ca:a7:35:db:b0:02:4d:
df:1b:ea:a5:1b:a5:ea:fe:10:6f:7d:f2:e9:fb:ba:51:cd:26:
05:53:d1:66:75:e4:ab:2d:71:7e:92:4a:c9:58:5c:1d:15:fe:
73:e8:d6:07:3a:ea:7e:89:60:2c:69:38:56:db:2f:76:80:47:
db:ac:e0:56:de:c0:d3:f9:de:a5:85:0f:05:60:db:63:b2:e1:
16:7f:f8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:56 2025 by rpki-client