Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: NHVCE1A9S7jcWX7v41M4grFnQFKLXrZBHQ8zgcj+NRk=
Subject key identifier: F0:D9:D3:D1:28:9C:F4:76:B1:91:DD:86:AB:34:9D:8B:1A:BE:A3:97
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 0194C462F58460446C32996EE69C5651B8FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 0D65
Signing time: Sun 02 Feb 2025 02:00:07 +0000
Manifest this update: Sun 02 Feb 2025 02:00:07 +0000
Manifest next update: Mon 03 Feb 2025 02:00:07 +0000
Files and hashes: 1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: 9lQWY2+DSdcNdUHzXLkkjQ559lk57mbufOccqIpLbik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:62:f5:84:60:44:6c:32:99:6e:e6:9c:56:51:b8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Feb 2 02:00:07 2025 GMT
Not After : Feb 3 02:00:07 2025 GMT
Subject: CN=f0d9d3d1289cf476b191dd86ab349d8b1abea397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:f3:77:3f:15:02:b5:c1:e1:80:f2:d3:e2:
5f:97:4f:67:ee:3c:bb:2e:4d:be:6f:81:c2:3b:96:
d5:e6:43:af:8b:1d:5e:80:bd:34:71:d1:22:9c:a8:
66:73:83:49:36:5b:72:02:8a:a4:41:80:af:49:ed:
46:6d:db:b2:b1:58:de:dc:64:39:e7:33:53:96:9b:
8b:84:19:56:48:b4:1b:c0:a9:a6:e5:39:96:c1:fc:
96:07:00:8e:86:9e:9e:e6:93:cc:95:30:19:11:a8:
2a:1c:d3:fe:40:ff:43:f7:2e:1e:f7:5a:2b:de:a6:
66:e9:22:77:e8:b1:76:c8:51:d6:ca:f1:43:5e:69:
ad:82:27:42:78:37:fc:ed:b1:b5:e0:e9:6f:2a:17:
79:66:d2:1a:b6:af:55:de:23:41:f3:24:14:d4:d3:
97:06:96:9f:43:20:c9:f0:d3:92:da:e4:24:08:99:
67:4d:d9:fd:1c:b4:9c:0e:6d:b6:ec:1f:27:6b:98:
3a:9a:7b:5a:d7:54:e2:43:b3:65:5d:d8:34:84:d8:
e8:b6:3b:c2:b6:e7:1b:f0:2f:d4:b5:e9:db:18:ad:
ee:a6:1b:dc:7f:f2:13:6b:af:08:87:02:38:12:71:
17:5c:bb:58:40:b1:96:12:c8:a0:a0:57:ac:ca:93:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D9:D3:D1:28:9C:F4:76:B1:91:DD:86:AB:34:9D:8B:1A:BE:A3:97
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:55:f3:29:29:d0:80:86:5e:c5:a4:dc:2d:0c:31:25:28:a9:
81:93:dc:8a:3b:f5:cd:fe:3c:eb:0e:28:5f:e8:75:94:9c:ac:
61:48:b7:63:ed:e9:08:29:2b:d8:92:f8:6e:29:ab:5f:3b:0e:
90:b5:62:5d:37:c3:d9:80:16:ec:4a:60:7c:eb:00:78:37:93:
43:42:3f:b3:fc:e5:0b:52:9e:8f:63:6e:17:fe:fb:32:8c:d8:
ce:b5:20:f2:2e:36:24:df:f4:a8:0f:94:d1:bf:ec:1a:c4:a6:
af:a0:f9:b8:19:fd:2d:da:d6:19:32:5c:4f:a9:d1:5a:57:d2:
af:bb:c1:ef:ab:c4:c1:1f:f1:b0:a1:eb:0b:8f:9f:03:a9:ca:
3e:4b:e4:57:b6:1f:bb:54:4e:42:a4:ab:68:7e:68:cb:8f:5e:
d8:4e:4a:ce:f4:00:73:26:5e:3f:71:03:1e:2c:0e:1a:8b:e4:
27:e8:d7:3c:a0:fa:8e:8d:a9:77:b7:45:59:28:02:0e:ab:0c:
c8:e6:de:c7:02:c3:80:75:ca:5c:c3:5a:19:45:8c:22:2d:42:
36:f6:22:d9:3c:5d:82:bc:20:d9:9e:47:7c:86:60:f7:28:5b:
ac:6c:80:9a:95:65:a0:2d:bc:b0:78:0e:92:a4:01:7b:13:3e:
dd:b8:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:57 2025 by rpki-client