Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier: s/Z0hPu5drgblSPX00GILEO1mzgefbyFUy5Y864iBmM=
Subject key identifier: 24:C9:03:3F:51:5D:A9:BA:56:12:D3:52:9F:F6:ED:74:28:EE:F5:18
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial: 0194C3F5F9EAC3AE0BF7A3536D9B7E606698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 00:01:04 +0000
Manifest this update: Sun 02 Feb 2025 00:01:04 +0000
Manifest next update: Mon 03 Feb 2025 00:01:04 +0000
Files and hashes: 1: Ssu8zhZouqLFw7AaAzwD8Rhb4ss.roa (hash: Wj2iWFYhEk6j27Vf/+D9hzlZqUC3iOCSrZa2VvDKOhs=)
2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: Xmms/yPakBOWfyXwVtK63ISV3cgkkkF26caMCjxUouE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:f9:ea:c3:ae:0b:f7:a3:53:6d:9b:7e:60:66:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Validity
Not Before: Feb 2 00:01:04 2025 GMT
Not After : Feb 3 00:01:04 2025 GMT
Subject: CN=24c9033f515da9ba5612d3529ff6ed7428eef518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:2c:b6:8d:16:a2:94:5f:13:78:37:4e:40:
54:71:e8:42:c5:59:73:c7:1f:aa:5e:f3:55:61:22:
97:92:1c:61:11:92:86:16:3c:b2:f8:91:65:7f:f4:
6c:f5:26:a7:ed:07:e0:03:0a:c9:c1:28:61:05:cf:
4b:5e:71:b3:d5:4f:17:a5:6e:30:da:27:69:c8:b2:
83:31:ef:05:da:61:53:5a:92:17:44:4e:f7:33:da:
55:d4:9b:71:47:2b:68:26:b8:b7:0b:25:3d:07:3d:
3f:39:7a:2f:84:00:dd:95:a7:e0:33:78:7c:2a:a6:
38:c9:71:05:15:33:24:5a:3e:6f:4a:27:ba:90:a6:
b7:b3:09:0f:2b:b7:7e:10:af:c4:0e:60:54:8e:3f:
e3:7e:e3:42:fe:ca:23:2e:6a:4d:10:f7:18:7d:ac:
61:13:4c:6d:31:c7:3f:ef:93:28:d8:1d:f5:ae:28:
87:b5:9a:4c:1d:3a:fd:65:5c:75:75:0f:cd:d4:cf:
8d:7e:0b:06:e1:bb:d8:a2:24:a4:a4:ac:00:aa:b1:
8b:e5:32:9b:d5:39:54:df:d1:a4:da:a2:22:5e:67:
5c:1d:c8:fb:90:f1:9f:3b:00:65:8f:bd:46:cb:c3:
ab:be:0d:03:20:cb:48:2e:fd:9b:0a:53:15:15:84:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C9:03:3F:51:5D:A9:BA:56:12:D3:52:9F:F6:ED:74:28:EE:F5:18
X509v3 Authority Key Identifier:
keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:02:7d:1b:45:75:9e:b0:b3:1f:d5:34:d6:4d:b7:d8:fa:3d:
d0:f1:e9:e4:ab:b4:a7:ad:1d:10:7b:1d:6a:78:dd:a0:90:2a:
05:a9:f9:b4:c1:a7:86:c2:b5:75:a6:80:37:3b:fe:96:29:ba:
a7:cb:66:67:45:be:6c:16:e4:bd:7b:43:fe:bf:d9:b6:18:fe:
aa:6a:f7:9a:d6:86:5b:47:46:13:57:84:2d:21:b5:5f:1c:65:
56:d7:a8:35:f4:5a:99:1a:44:e5:d5:33:ba:a2:28:e6:e9:53:
d3:4b:12:30:70:fa:cc:b0:18:22:16:4d:04:2d:7c:eb:70:22:
45:5b:81:52:90:83:24:a0:e4:72:2d:5e:cd:1b:d9:19:14:fe:
d6:9f:8f:e0:33:e5:e4:dc:45:d8:a7:dd:e1:6a:10:92:d1:3f:
f7:d8:1b:e6:69:e4:40:6b:87:61:6f:c8:50:4b:ac:18:32:71:
82:00:cc:7b:bd:2a:18:16:24:ee:a5:7b:d5:66:ca:07:b1:34:
8b:c8:00:50:23:3c:cb:d1:2f:58:37:e6:17:07:e0:9d:3b:bb:
fa:d8:60:f2:15:7e:15:fd:3f:5f:74:f1:fc:b3:a5:da:88:17:
69:8f:4b:7c:86:7b:fa:ae:c0:3a:82:ff:bb:95:1e:aa:9d:57:
a0:6a:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:19 2025 by rpki-client