Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: MWCyv9UI6WXJOXaP/Ix1BR7es0yFZlIsosqqHgf/WHE=
Subject key identifier: 8E:FA:0E:45:3E:63:E3:C0:8E:87:7A:4D:85:AF:73:26:9D:84:FF:57
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 019512475A8A0E57ADFD262E83D1E4244C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 1231
Signing time: Mon 17 Feb 2025 05:00:20 +0000
Manifest this update: Mon 17 Feb 2025 05:00:20 +0000
Manifest next update: Tue 18 Feb 2025 05:00:20 +0000
Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: qo62xj2o8ZgpkIDCIv0Bc2YZPCNx6/xVNlaUy+6c6Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:5a:8a:0e:57:ad:fd:26:2e:83:d1:e4:24:4c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Feb 17 05:00:20 2025 GMT
Not After : Feb 18 05:00:20 2025 GMT
Subject: CN=8efa0e453e63e3c08e877a4d85af73269d84ff57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:95:4f:8f:4c:9d:e3:e3:de:c7:a9:9b:18:
be:e5:b5:30:c9:02:1e:53:7c:86:44:ca:2e:ce:71:
cc:cc:91:05:af:de:f7:89:68:c0:64:56:6e:f2:75:
45:0c:2b:eb:25:43:7f:94:b2:89:73:70:e9:d7:c9:
cc:53:d5:f6:8b:85:3d:b1:b4:2e:46:5d:be:07:20:
9a:c1:cf:fe:4f:c9:09:09:2a:24:27:ac:60:6e:b8:
a5:70:15:ab:a5:1d:96:13:a3:ca:bf:4f:74:39:d1:
e2:d1:8c:00:f6:76:90:6e:74:28:d6:cf:58:ac:aa:
fa:f1:0f:2c:47:ca:a0:a8:17:59:3e:70:8f:e4:f6:
23:af:2c:66:e5:70:90:cd:b9:fe:00:b8:17:84:7a:
90:c7:cb:9c:38:9e:25:53:1e:61:00:06:c2:f8:0d:
91:10:5f:ef:54:01:30:91:5a:da:c9:6b:a9:20:19:
7d:2d:a7:d5:ec:91:80:9a:18:89:77:32:98:29:34:
0b:87:d1:45:3f:16:2c:e2:8b:c2:a7:56:1e:ac:cb:
33:28:80:13:dd:37:03:e9:67:19:8a:9c:ae:50:a2:
22:90:3c:ca:4f:03:c8:66:c5:b6:97:3d:04:11:5c:
95:1e:66:28:02:4c:cf:15:bd:43:fc:5a:83:ab:5d:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:0E:45:3E:63:E3:C0:8E:87:7A:4D:85:AF:73:26:9D:84:FF:57
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:42:10:ba:65:34:6c:26:9f:71:d9:95:14:8e:e7:16:59:62:
f4:ba:0f:e7:c4:fa:d9:ae:01:bf:42:bc:b1:26:bd:c9:14:80:
64:80:2a:06:cf:c3:2b:ff:04:dc:5f:98:fc:97:f1:a2:cb:c4:
d6:58:ba:c8:1c:6c:5e:5a:56:3a:36:35:ae:26:58:ea:be:0d:
27:d1:fe:bc:44:42:41:62:04:da:a7:5c:e2:9f:3f:2f:98:30:
dc:53:e1:e4:52:9b:94:9a:6f:4c:4f:22:70:8f:f1:1b:ca:20:
2b:c3:9f:61:44:9d:f6:37:52:0f:66:70:38:fa:47:26:3c:a2:
a2:4b:82:ad:07:72:44:05:c0:12:bc:1a:8c:21:e7:e6:cc:c7:
46:19:b8:02:31:95:45:73:93:38:92:6d:ab:b5:35:a7:7a:aa:
e2:8b:c4:f6:d6:a0:dd:21:04:23:6e:99:71:7e:5d:f0:63:ff:
35:80:5a:9c:9e:47:20:ff:20:95:6e:4c:db:94:32:a5:cb:3b:
d7:89:c4:f7:ae:cf:9b:0e:5f:1c:96:80:37:e9:c3:77:0f:69:
02:4b:95:88:2d:c0:c0:79:fc:fb:e0:a5:a3:72:6d:b5:92:5b:
22:01:12:bd:ec:af:4e:75:99:50:7c:b4:3e:43:d3:4d:bf:55:
fd:63:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:50 2025 by rpki-client