Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: 3cejtUdIwtF9n4pLHeDjcvbGam7liiRshL4XBtm2BGY=
Subject key identifier: 7B:B2:BA:44:08:A2:67:54:F0:99:3D:BF:42:1C:6D:1A:FB:CB:AD:9D
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 0194C4D14B938DB5BE06E98F03F1FDF78CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 0BF9
Signing time: Sun 02 Feb 2025 04:00:38 +0000
Manifest this update: Sun 02 Feb 2025 04:00:38 +0000
Manifest next update: Mon 03 Feb 2025 04:00:38 +0000
Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=)
2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=)
3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: iQXFzMRJnFXDf0/bpsoEiaYXYTBuvfPPP87e9mJya7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:4b:93:8d:b5:be:06:e9:8f:03:f1:fd:f7:8c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Feb 2 04:00:38 2025 GMT
Not After : Feb 3 04:00:38 2025 GMT
Subject: CN=7bb2ba4408a26754f0993dbf421c6d1afbcbad9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:b0:71:e0:9d:b3:5c:e7:d9:69:78:c8:15:
bc:f3:0e:a1:40:a5:e6:c4:01:f5:16:58:dc:1d:2b:
9f:ab:7e:ce:b6:48:99:4b:e4:ea:51:d9:8d:ba:67:
f8:48:67:97:42:7f:14:3f:b9:68:9e:d4:5f:e1:31:
53:9c:18:aa:10:34:11:3d:be:a9:1c:d4:6e:de:0f:
c5:64:52:86:8b:ce:f8:68:7e:18:fb:3a:34:90:3b:
a6:f4:fa:1e:87:9e:4b:1c:6a:fe:b2:22:aa:1b:29:
25:3d:76:6b:72:5e:70:85:6b:cc:6d:9c:a4:42:a8:
60:9f:07:03:2f:23:c0:3c:77:3d:e4:5c:00:28:81:
a7:f2:70:d7:5b:be:2a:ac:91:05:46:3e:07:7f:d1:
2b:8a:95:66:3d:13:31:78:91:43:ea:8e:b8:57:ed:
99:e4:d7:7e:64:32:c4:77:1b:50:4c:e0:9c:3b:87:
d6:71:f1:d0:a0:dc:0f:2a:7d:6d:5b:1a:71:df:c6:
3a:3e:67:84:97:b5:bf:d5:22:28:fd:ec:0d:c7:e4:
4f:ed:b3:8a:e3:69:79:cc:7d:c4:d6:bf:ed:a6:5a:
f9:a6:b4:40:e5:f7:10:dc:d3:d4:01:3b:37:8b:3f:
d2:99:0e:30:60:f2:ab:c0:d2:13:48:42:c6:b2:dc:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B2:BA:44:08:A2:67:54:F0:99:3D:BF:42:1C:6D:1A:FB:CB:AD:9D
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1f:d6:07:36:8a:05:03:04:be:d7:55:6e:26:f7:63:44:69:
a1:d5:32:4c:09:c7:93:ba:be:cc:75:fe:c3:a4:4d:b6:2d:0b:
0e:1a:7e:d4:d9:73:91:22:16:89:24:4c:8f:3e:08:87:e5:4c:
f0:cc:e2:2a:1f:b1:1c:25:af:17:26:e9:0e:2e:01:90:4d:da:
46:3f:0e:ec:12:c4:d8:10:f6:09:f1:d0:1e:02:f6:00:4b:4b:
95:f1:4c:dd:81:9e:1f:cc:b9:1b:0c:c2:5c:7d:26:cf:c1:92:
49:87:7d:23:14:0c:3d:c1:0f:75:f2:5d:b2:41:a0:44:d7:7b:
3c:6d:b2:3c:2c:cb:37:74:f6:9d:e1:b4:bd:d5:4f:96:e3:72:
b5:3e:14:1f:13:19:ca:c8:60:fe:ed:a9:27:f3:1b:da:9e:72:
3e:60:57:fb:84:e8:63:94:9d:bd:2b:0c:f8:7a:66:61:60:c5:
3b:82:42:07:36:d4:db:14:fd:85:73:54:be:70:39:e3:14:29:
cc:11:a7:3e:96:8f:7a:18:2e:b4:27:63:18:7b:89:76:2d:c8:
92:f1:a1:88:74:bd:01:64:c9:3b:ae:3e:a8:d7:0c:4a:4a:81:
36:ed:a6:2b:68:b2:e5:99:3f:a3:49:8e:ae:28:91:42:61:30:
28:b4:c1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:01 2025 by rpki-client