Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: WIsKmwCsg6s4fx9hr+cQ3bJmqzGVaa3V0uyhy4z+q0w=
Subject key identifier: 63:94:C8:B5:90:98:BF:E5:7B:6F:18:BB:EB:D0:A4:31:E1:25:B9:58
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019511A28FD279521937CC3446614F748BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 0477
Signing time: Mon 17 Feb 2025 02:00:20 +0000
Manifest this update: Mon 17 Feb 2025 02:00:20 +0000
Manifest next update: Tue 18 Feb 2025 02:00:20 +0000
Files and hashes: 1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: sBVCm7XDneQfsUPz6YhCwoVHgBPGCINv5IaJeqIwZRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:8f:d2:79:52:19:37:cc:34:46:61:4f:74:8b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Feb 17 02:00:20 2025 GMT
Not After : Feb 18 02:00:20 2025 GMT
Subject: CN=6394c8b59098bfe57b6f18bbebd0a431e125b958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:a5:f6:d8:51:11:16:ea:70:31:5e:78:0a:
a0:1b:28:90:e6:39:16:44:d5:5c:07:7b:5b:c9:22:
34:79:22:83:f8:4b:24:73:e1:22:de:c6:4c:5b:71:
73:2a:1f:d7:d1:68:2f:5a:73:67:f6:85:e2:f1:20:
09:3b:db:ca:37:bc:4f:75:1e:40:19:0f:aa:88:aa:
8f:a9:f3:46:33:d0:52:44:fb:34:92:51:92:81:e2:
ff:b7:20:25:15:6f:72:73:69:eb:95:0c:a2:64:36:
9e:b7:29:0c:b5:8f:3a:69:3a:51:e4:f5:dc:ff:88:
20:d1:ae:11:9e:c7:d2:fc:11:35:be:25:cd:88:c9:
b5:ed:3e:75:81:23:a0:d8:36:f8:59:16:86:36:e4:
a5:93:e4:c3:2c:01:95:7e:ad:0e:b5:77:bb:a0:f3:
28:c2:6c:87:fa:fb:a1:f7:d3:43:be:fa:95:0f:c7:
c7:c2:06:38:8f:db:ab:48:f8:c6:01:48:88:cb:f6:
3b:7e:68:34:f4:ac:d5:0e:2f:e2:fb:7b:0c:9a:9c:
8e:e0:63:52:8b:fe:f4:7f:91:e4:d0:a9:5b:e4:26:
1c:0f:ad:31:8d:c0:75:12:44:ca:64:fa:48:cd:27:
74:41:ae:77:cc:cc:65:ef:bd:c3:5c:52:4b:a6:95:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:94:C8:B5:90:98:BF:E5:7B:6F:18:BB:EB:D0:A4:31:E1:25:B9:58
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e6:4e:e5:7c:1b:b8:69:a2:2d:ea:1d:d6:88:9c:a5:e3:4f:
28:28:9c:e5:72:da:fa:31:c4:99:ed:4f:92:12:aa:58:bb:9b:
13:87:63:b4:09:b9:d0:38:38:5c:27:40:d0:df:cd:bd:d9:a4:
53:b1:14:50:b5:e3:bc:56:04:97:19:b7:a6:2f:56:bc:05:80:
f7:ae:cb:b5:b3:a3:51:1b:a5:b0:52:9c:04:b7:da:c5:91:98:
45:19:19:74:21:95:6a:a1:fc:ab:c5:97:1b:d0:4f:3f:51:30:
5d:5e:d1:73:42:94:74:2f:a3:9d:b5:5b:a8:34:72:a1:1b:2e:
2d:d5:9f:04:07:69:39:c8:fd:20:12:ca:ca:05:7a:15:f6:99:
0a:2c:2e:0f:9a:e0:18:88:1b:d0:27:10:b6:8a:55:94:dc:be:
1b:f7:c7:ee:fa:e3:c2:48:d1:48:4f:8d:58:6f:73:29:ee:e4:
56:c7:db:53:ce:be:58:26:3d:63:cd:6d:44:e9:6f:16:36:0c:
38:df:94:b5:ed:20:ef:a5:7c:64:f2:05:ce:db:75:c3:1c:18:
28:d4:5d:9e:08:a6:1e:e9:20:b8:8e:d8:1c:71:1d:11:54:00:
66:ff:c7:b3:c1:3f:ff:7e:84:c9:d1:48:4d:22:ef:7f:8c:79:
14:7f:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:12 2025 by rpki-client