Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: M3XDM7NvUlhzAcObXi5TgBSfg2DrtshUZRHMd0dzR64=
Subject key identifier: 17:DE:E4:48:6B:95:EC:B6:5F:24:B2:F8:E6:E7:E0:ED:8C:0C:F0:48
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 0195116BD0C6F7DDD432C240E815D5B158F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 1453
Signing time: Mon 17 Feb 2025 01:00:33 +0000
Manifest this update: Mon 17 Feb 2025 01:00:33 +0000
Manifest next update: Tue 18 Feb 2025 01:00:33 +0000
Files and hashes: 1: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: 0jga/xUme2WoG6iRaS3yd2f/J95x8N6PGQYzk7IpcfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:d0:c6:f7:dd:d4:32:c2:40:e8:15:d5:b1:58:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Feb 17 01:00:33 2025 GMT
Not After : Feb 18 01:00:33 2025 GMT
Subject: CN=17dee4486b95ecb65f24b2f8e6e7e0ed8c0cf048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:3a:f4:96:89:b4:76:e9:87:26:52:a7:f1:
f6:10:a9:3a:63:2c:21:1a:ad:70:e5:8c:c4:64:2e:
04:34:3e:ff:0f:f3:45:d1:1c:18:0d:b8:b7:9e:42:
7c:6e:2d:61:a0:f6:62:9e:fb:a8:67:9d:f6:24:b1:
23:0c:28:e4:5f:b4:d6:26:43:2f:e6:1a:00:22:88:
ce:59:2e:b9:a3:ed:b2:9c:99:6b:a6:e4:36:fb:a1:
aa:8f:e5:57:6f:b1:29:2e:af:95:ed:96:a7:0f:89:
cb:2e:f7:bf:6a:8d:b4:da:3b:29:3d:ad:84:7c:20:
29:52:25:f1:91:7c:61:56:b3:ba:36:7c:2e:3e:37:
63:86:d6:d0:7c:54:31:fe:65:e7:f4:57:3d:27:24:
20:7a:bc:9d:b9:8d:db:ab:ba:40:8c:01:4d:bd:22:
9a:86:88:b4:be:e4:9b:4b:41:89:34:49:98:67:a4:
6e:e5:54:b0:11:0c:bd:fb:94:98:79:34:fb:54:69:
57:52:00:7e:e1:85:d6:8c:35:72:97:92:1f:e6:ac:
23:33:84:db:f5:28:36:c9:74:00:55:4d:12:96:24:
69:17:2b:ee:0d:a5:97:31:c4:73:10:04:e5:7a:ef:
12:f8:bb:63:34:b0:ce:ff:42:fc:5a:70:5c:a1:61:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DE:E4:48:6B:95:EC:B6:5F:24:B2:F8:E6:E7:E0:ED:8C:0C:F0:48
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:43:86:20:37:14:32:dc:ec:f9:2b:a7:8b:9b:b5:57:02:a7:
6f:bd:86:c0:04:4a:cc:d5:f9:96:19:3f:c3:61:90:9f:3a:e8:
2d:41:c1:54:10:7c:1e:0e:4f:c6:ef:63:c4:11:fa:4d:bb:ab:
33:34:bc:08:d7:d5:dd:c1:8e:fa:ba:79:d5:0c:2d:75:82:65:
ff:c7:88:15:d4:b1:e3:82:6d:38:3c:f0:c7:d7:03:73:86:7f:
02:45:1a:85:6c:c6:6d:f9:79:df:83:67:bf:7d:ef:8d:45:27:
95:46:ea:5f:c5:f9:e8:75:43:53:86:7f:d0:35:61:21:c4:29:
f7:d3:de:2a:3a:87:ed:87:55:15:18:cb:44:36:0d:5f:76:7c:
cb:65:90:56:77:23:e6:91:1d:3c:bd:a4:c4:4c:07:16:fd:c7:
9c:40:c1:6c:19:ef:fa:9a:14:a8:01:4a:4d:e8:bf:11:b0:aa:
1f:01:77:1b:57:42:11:5a:57:1e:69:4d:5d:1f:06:68:37:b1:
74:4d:0c:b8:33:ee:79:93:b6:94:2c:1c:15:a3:28:72:63:63:
7c:99:2e:38:ae:6c:d7:20:50:92:be:5b:58:9d:b0:7b:70:ed:
f2:4e:91:11:5c:5e:00:43:a4:1d:ae:a5:fb:32:8d:92:34:d2:
00:ec:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:37 2025 by rpki-client