Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: iS7UwGoF5xIQBwHmlFikHMxu464+5VJ2h+PtMBn5RIM=
Subject key identifier: 60:05:F7:47:4B:DB:06:81:D9:8A:7F:52:6C:B6:58:78:D3:8A:29:51
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 0194C49A6DB0EA5B5973EDAF18CA65B721E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0A40
Signing time: Sun 02 Feb 2025 03:00:42 +0000
Manifest this update: Sun 02 Feb 2025 03:00:42 +0000
Manifest next update: Mon 03 Feb 2025 03:00:42 +0000
Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: TXF5P/7keRmJcZEjQrZ/qHnDzvxr+fjLGnrLUO+H3Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:6d:b0:ea:5b:59:73:ed:af:18:ca:65:b7:21:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Feb 2 03:00:42 2025 GMT
Not After : Feb 3 03:00:42 2025 GMT
Subject: CN=6005f7474bdb0681d98a7f526cb65878d38a2951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:85:51:0f:fa:79:17:2c:a8:fd:93:7a:63:
c8:a3:cf:2d:a9:2a:96:85:46:be:8b:c4:3d:d0:a3:
55:27:22:a3:6a:6c:4d:e7:c0:03:16:b5:eb:1b:4b:
02:2d:47:11:34:34:7c:1e:c7:ff:ae:55:64:45:cb:
01:49:fb:22:0b:2a:bd:86:d5:71:cb:3c:d3:15:37:
52:bd:76:89:4e:35:a7:3d:7e:ff:b8:e6:ba:ec:75:
65:c6:3a:f6:0a:a0:48:2e:87:d3:e7:03:ba:e7:f5:
61:f4:f2:81:be:13:de:a0:e3:1b:42:f8:38:b2:1a:
3d:16:b4:eb:64:00:17:bc:3e:21:97:57:11:c5:36:
ce:fc:3a:fe:ba:a9:37:45:f8:4d:c9:8b:fe:34:0f:
8f:f0:ed:97:bc:25:81:c7:f3:56:a6:d7:89:e9:20:
ff:16:40:ed:b3:20:b3:d6:f8:5e:64:eb:36:47:db:
b1:60:1b:2d:aa:7c:02:ba:a2:cb:25:9d:14:72:64:
fb:9c:29:93:06:2d:ee:2a:e0:d4:f3:17:9f:16:76:
60:b2:66:e6:3e:71:92:a7:80:36:a8:d4:81:92:7d:
c5:b0:9a:8b:ae:02:4d:4d:c1:5a:73:fe:7a:a3:cf:
40:d9:53:3b:1c:19:f2:a9:42:77:6d:74:2d:30:54:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:05:F7:47:4B:DB:06:81:D9:8A:7F:52:6C:B6:58:78:D3:8A:29:51
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:11:41:67:b5:75:b9:cc:66:d8:36:98:db:a1:e5:e1:fc:87:
62:e8:ca:e4:e2:1a:24:67:f9:80:ec:75:78:ab:b1:7c:25:d3:
42:1c:90:93:28:0f:1b:a7:93:ee:c0:98:a3:48:57:fb:d6:a5:
97:d1:bd:de:9e:82:06:91:a6:56:04:45:62:ae:af:3a:8e:35:
47:ba:86:51:b4:cb:1c:45:5a:31:5b:a7:71:00:d8:9c:13:be:
68:57:ed:6b:6e:cc:42:8a:15:b2:10:c9:da:16:ca:b0:ed:bb:
b8:51:4b:7e:d2:c2:e5:7e:71:5e:6a:a0:f0:ab:52:41:15:b3:
06:11:32:c0:b6:36:97:cb:ed:e2:c8:45:0f:31:f0:58:ba:0f:
a0:f2:9b:8c:62:06:fd:8a:b3:e0:a8:2d:24:5b:b1:6b:13:87:
82:62:f4:ee:a1:ae:97:a3:22:ce:10:b6:b0:46:a1:9a:cf:60:
4d:8f:73:2e:5a:c7:62:f1:82:81:b2:8c:ac:b9:d8:2b:c9:23:
94:f2:c6:b4:0d:3c:da:c3:90:26:8f:9d:a7:04:d4:67:ad:6f:
5b:05:07:2f:78:11:50:19:5f:89:cf:b0:4a:86:23:28:14:3c:
b2:4e:be:51:c8:2c:84:8d:74:87:8b:6d:c8:da:b7:41:43:1f:
bb:79:f9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:42:47 2025 by rpki-client