Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: UaEKDDwd2IzWO71+GAzYEPtBePZp4V9oy6w1BmM01oU=
Subject key identifier: F7:EF:CB:45:8F:2A:99:C0:28:FD:12:85:C4:FC:E4:85:CC:7C:55:C0
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 01951135492FD4B2039F7F6AF9514FF1966D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 0842
Signing time: Mon 17 Feb 2025 00:00:59 +0000
Manifest this update: Mon 17 Feb 2025 00:00:59 +0000
Manifest next update: Tue 18 Feb 2025 00:00:59 +0000
Files and hashes: 1: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: D9jwXsTqogXAtPZhIg0iXk5j5mCrdHp4USqeKi6LpEE=)
2: O5DiGBxXgxkBCTZNGMQgecNF7aI.roa (hash: 0ahwaWUfVDJYD2wF/x/njO0sF76KorNYpLUQSfP42Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:49:2f:d4:b2:03:9f:7f:6a:f9:51:4f:f1:96:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: Feb 17 00:00:59 2025 GMT
Not After : Feb 18 00:00:59 2025 GMT
Subject: CN=f7efcb458f2a99c028fd1285c4fce485cc7c55c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:ff:5f:cf:0c:80:57:d4:79:9a:ee:5b:0a:
54:5b:72:77:b1:f5:85:a1:59:b8:3b:b1:f1:a0:39:
0d:70:74:26:af:5b:84:a9:49:cc:6e:74:ce:38:5a:
7d:47:d0:1a:6c:c4:ab:e3:86:21:61:b8:ed:29:28:
cc:82:07:e0:9d:b3:7d:81:52:62:a3:cd:aa:c5:54:
3c:28:33:df:28:b1:d7:24:c8:54:1e:a7:81:04:27:
06:4b:e7:c5:e3:5d:94:80:dd:9e:ad:5b:9c:09:f7:
07:51:76:cd:a9:8a:c5:0d:1e:96:2a:e8:d2:6e:8d:
e9:9f:fe:60:16:6b:a1:ed:ba:32:7f:b7:70:aa:45:
4c:36:50:5c:17:cb:1c:a5:6c:45:46:24:d3:13:a8:
3c:d8:29:b4:ca:f1:12:ca:db:77:af:16:32:e4:aa:
37:58:af:f0:c0:e0:1c:d0:13:b6:d0:47:0f:be:64:
ef:1e:16:9a:82:9a:d0:0d:42:44:68:cc:0d:29:a5:
bc:fc:2e:79:a7:77:0c:f2:5b:2d:f3:ed:f7:35:b6:
90:42:73:58:ce:67:98:34:b7:e2:46:4a:74:41:9e:
c2:ec:f2:de:fd:12:af:7e:76:ca:2a:83:8a:29:26:
13:30:a3:09:59:63:51:c1:d7:5d:f1:b5:2c:86:a5:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EF:CB:45:8F:2A:99:C0:28:FD:12:85:C4:FC:E4:85:CC:7C:55:C0
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:43:51:f7:54:ad:72:57:c2:8f:20:43:43:87:41:b4:be:16:
bc:d7:6e:13:e4:23:85:30:ff:56:16:5e:77:3c:a5:72:7d:53:
7f:8b:9f:ca:72:e8:12:a2:2e:e4:48:8f:2e:c9:e6:17:e1:ca:
99:dc:36:1b:e1:51:03:51:f8:89:e9:18:5c:02:a2:e6:79:6b:
aa:3f:48:b0:0e:ca:ef:05:0d:27:d9:27:9a:10:59:b8:18:a4:
53:79:c2:2e:82:df:86:bf:e1:9a:fa:ce:47:79:4c:86:48:0f:
69:1e:74:43:dc:42:3a:e2:97:6c:fd:65:4e:ec:75:96:63:ab:
fd:d0:65:26:b8:b8:bf:a9:bd:94:05:f4:27:66:19:c1:97:5e:
35:c7:8b:be:28:77:97:8f:dd:46:42:77:04:2a:ad:5a:d1:4e:
aa:d8:55:30:0b:42:fa:f6:83:be:6e:85:e1:dc:0e:ee:e9:e9:
6a:05:2f:d5:fb:b8:a7:c7:99:ef:a8:c2:a1:cb:3f:ee:fd:d5:
36:3d:3d:c8:f6:a8:bb:f3:23:8d:cb:78:e6:1b:d9:49:c9:5f:
e6:57:1a:9c:44:0d:f9:1e:fe:e1:94:da:52:57:44:7b:12:03:
9a:49:94:24:ce:77:a3:05:5b:04:cd:72:bc:59:71:64:3e:ed:
91:69:56:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:23 2025 by rpki-client