Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: eQ7EP6XlTNtONKdfeQ8DZArtKOlfSTxNfRq3Xuja/TE=
Subject key identifier: C1:C9:FB:5C:B9:47:C6:3D:15:BC:E8:0B:A7:5C:8B:8A:4D:AA:56:78
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 019511A2860342D26968E511AA384C8D0A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 1058
Signing time: Mon 17 Feb 2025 02:00:18 +0000
Manifest this update: Mon 17 Feb 2025 02:00:18 +0000
Manifest next update: Tue 18 Feb 2025 02:00:18 +0000
Files and hashes: 1: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: w1JIhnBlsoWCmuXKSq1kRjNYHx2Gs0yfr5+mJXJyRpQ=)
2: xbEhFMe96Lq98oM2kaTSxYoflQo.roa (hash: TG0r6adK5rxJjOXHHJZ61hb/iZXi4XWRAs1u1uQ8odg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:86:03:42:d2:69:68:e5:11:aa:38:4c:8d:0a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Feb 17 02:00:18 2025 GMT
Not After : Feb 18 02:00:18 2025 GMT
Subject: CN=c1c9fb5cb947c63d15bce80ba75c8b8a4daa5678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:67:1a:0e:b1:62:81:b6:1b:6c:be:8b:b5:
95:d1:a0:ea:98:64:c4:77:03:95:e5:1f:d3:4c:1b:
de:81:f3:e3:0f:77:be:8a:59:59:22:6a:39:ae:21:
db:05:5c:42:9c:98:97:8a:01:8b:3c:16:c9:da:9f:
68:6a:b3:9e:5d:f0:ee:38:28:fc:2c:fa:03:a6:53:
ec:5c:62:9f:f3:a5:6b:79:1a:4b:ed:76:79:1b:ea:
f2:f9:41:a8:18:17:8b:0f:d4:8a:17:8b:5a:1f:f8:
0c:2d:de:58:a8:39:5e:d3:f7:8e:1f:18:43:37:79:
57:2c:60:d9:cd:3e:ce:04:b2:c1:07:61:d6:24:45:
76:07:e9:3c:c4:e2:bf:48:56:cd:7e:1f:ed:ff:7d:
14:94:5e:d3:65:b1:fd:4f:e5:51:4d:cd:b2:dc:e6:
89:74:2b:69:26:39:53:c9:c9:1a:f7:94:a6:0f:52:
10:3e:83:94:41:54:cc:15:de:20:03:ce:21:d6:b2:
ee:80:9a:8e:11:09:86:0f:20:18:4f:b9:26:1b:95:
cb:b8:8d:61:24:f2:66:fc:a3:e3:03:a0:0c:ac:a3:
37:c2:af:13:0c:be:45:5b:26:84:92:5c:7f:45:c5:
32:7e:71:ea:42:6a:d1:f5:f5:6c:e3:de:8b:5a:b7:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C9:FB:5C:B9:47:C6:3D:15:BC:E8:0B:A7:5C:8B:8A:4D:AA:56:78
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b8:11:7d:3e:0c:94:31:e3:33:86:b5:fe:4b:1a:f3:61:64:
fb:06:c5:04:c9:39:17:e4:2d:1b:6e:9d:57:b1:7b:ef:a5:74:
a7:f1:f5:61:39:83:41:ca:7d:fe:ba:b8:df:1c:98:bb:ab:45:
aa:0d:1b:37:26:3d:70:ae:eb:3d:52:67:50:b7:9e:80:92:57:
ee:83:28:94:d9:7e:72:93:7a:30:ad:ac:a5:57:d6:bf:4d:bb:
bc:0c:56:28:43:77:32:00:b5:19:57:26:3a:51:86:33:7f:bb:
ac:e9:51:00:67:4e:96:5f:72:a9:c5:de:c7:32:0b:e9:9a:46:
22:eb:6c:89:89:8c:f5:88:2c:1e:ef:ea:d2:47:1f:65:d9:bd:
cf:f2:d6:04:f3:b6:27:3f:52:73:95:51:6b:9d:e4:40:55:4f:
ae:96:85:b2:dc:ef:5b:2c:2e:17:96:8b:90:53:4a:f4:f7:9c:
db:b6:de:b5:52:61:8a:f3:f1:79:e5:d0:dd:f1:7d:ec:05:79:
8a:6a:80:98:e5:e5:4f:1a:62:c3:e3:3d:b5:be:aa:28:67:2e:
92:4c:01:2e:07:33:be:5f:06:e7:43:6d:3c:30:ad:a2:e9:8b:
54:dd:41:ca:e8:78:75:0d:1c:5a:ed:c6:f5:de:11:86:fd:0b:
3f:19:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:57 2025 by rpki-client