Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: /Vi3OFlK0m3nMypErdWVRi9ImhKdT1qgtdFdh+1MsUo=
Subject key identifier: 5F:14:80:A2:27:02:4C:F4:07:42:E9:83:72:AD:AF:E0:28:8E:64:21
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 0194C3F6107F166C6D92BC1F774055841A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 6A
Signing time: Sun 02 Feb 2025 00:01:10 +0000
Manifest this update: Sun 02 Feb 2025 00:01:10 +0000
Manifest next update: Mon 03 Feb 2025 00:01:10 +0000
Files and hashes: 1: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: croHL+AxOYue998/5FI5PLW0ONNAHj1VRnhN+4xvW9E=)
2: cr95DzEVhWtLA_b8PXKOtJAUld0.roa (hash: hVWUfMq7GUDS1WFoj/BlW6uwrsRcoF2yZGnDVDwJpMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:10:7f:16:6c:6d:92:bc:1f:77:40:55:84:1a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Feb 2 00:01:10 2025 GMT
Not After : Feb 3 00:01:10 2025 GMT
Subject: CN=5f1480a227024cf40742e98372adafe0288e6421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:73:29:10:91:b6:3a:74:ec:f9:f7:e3:62:
0c:b9:6b:ee:57:fb:5f:8d:f1:6c:ad:b5:b7:11:03:
4a:97:39:92:b1:37:55:94:f5:5d:2a:66:f9:9c:bc:
26:de:d0:32:76:3e:c6:81:ea:f7:f1:69:3b:41:7e:
66:e8:0c:77:02:60:00:54:a8:69:da:69:78:43:ff:
06:74:97:6e:cd:93:0d:ff:07:a4:eb:6c:f2:7b:6e:
14:18:f8:38:5b:21:3f:61:bb:8a:a4:ce:64:e1:7c:
0e:fc:be:6f:6c:c7:14:ba:48:2c:3f:3b:3d:5e:ff:
b3:f7:8a:c2:d3:ac:ea:ca:e1:18:1a:fd:7d:f6:63:
1e:e2:cf:0e:1e:64:df:3e:62:e3:cf:86:dc:3c:ec:
32:57:b9:eb:16:43:f1:5b:55:d4:44:cf:d7:99:17:
04:12:11:3d:df:62:f1:b0:48:0a:38:be:45:71:3f:
77:ec:98:de:66:10:cd:8c:38:51:d0:45:46:ac:af:
09:00:0a:08:56:9b:d8:c3:55:fd:b2:6a:d5:7f:2b:
df:58:f9:9b:e6:22:c1:d8:c1:dd:66:90:f2:28:9a:
6f:1d:21:0c:71:55:00:60:8f:a1:09:ad:b7:d0:c7:
fa:39:16:6c:53:7b:27:ab:99:37:58:dc:65:c6:13:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:80:A2:27:02:4C:F4:07:42:E9:83:72:AD:AF:E0:28:8E:64:21
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:08:ff:a7:4e:f1:d9:ad:9a:90:5a:a3:a0:19:5a:86:b8:5b:
10:0d:1f:0e:6a:79:65:d6:2c:bf:4a:d5:57:47:f9:26:97:cd:
6a:63:85:79:4b:77:d8:cd:10:b8:18:a3:79:f3:c3:54:f5:f7:
10:23:95:76:a0:95:10:f0:f2:01:40:a2:1b:79:bd:be:cf:cc:
a6:ac:11:95:af:3c:ab:3a:13:88:2a:87:f0:d8:78:ab:a8:1f:
b9:9f:53:cb:df:e3:b4:b0:75:38:3d:18:ef:29:b5:c6:99:38:
1e:c2:5a:a9:21:ab:56:33:42:15:5a:6f:44:c4:03:23:fe:f2:
c7:cd:89:b5:6c:81:38:c3:93:1e:ae:cd:68:a2:20:b9:69:d4:
20:06:2c:b1:5a:0a:87:fa:4e:c4:ff:3b:13:e8:5e:a9:a2:87:
b4:58:35:08:ab:28:8e:91:55:4c:27:d7:5c:75:ca:8b:27:bc:
28:ab:94:f4:e0:40:1d:be:aa:ea:0e:93:f2:43:27:6d:4c:b7:
bf:3e:32:4c:c5:63:da:e6:c3:65:0a:c4:3e:97:7a:a2:00:f3:
ce:50:95:8a:3f:61:15:32:29:16:5e:47:a0:64:95:fa:e6:e6:
0b:d1:c0:e8:c6:58:71:65:52:b5:5f:2f:4b:52:0a:d5:41:ae:
72:f1:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:16 2025 by rpki-client