Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier: x630+6tv5cCObZGF0my9yEeIo6V4OPW/lumu1wdnvSo=
Subject key identifier: EA:60:3E:D9:72:2E:6B:00:EF:C6:E5:DF:02:79:6F:A4:8C:4B:A5:D9
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 019512109EFEADA6B8A3F316A6422B058E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number: 061E
Signing time: Mon 17 Feb 2025 04:00:33 +0000
Manifest this update: Mon 17 Feb 2025 04:00:33 +0000
Manifest next update: Tue 18 Feb 2025 04:00:33 +0000
Files and hashes: 1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=)
2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: IwOYUhsAGtmX5nKPAf/SunLj1X4nihIjGqyod55uog8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:9e:fe:ad:a6:b8:a3:f3:16:a6:42:2b:05:8e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Feb 17 04:00:33 2025 GMT
Not After : Feb 18 04:00:33 2025 GMT
Subject: CN=ea603ed9722e6b00efc6e5df02796fa48c4ba5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:37:51:c5:ec:de:af:75:c0:9a:81:0f:64:
53:d7:db:41:86:37:32:6b:19:64:8b:8f:3f:f0:e0:
e9:d1:c1:90:7a:79:3e:10:5f:ab:8f:9d:e9:75:4d:
9d:2f:64:98:ea:e8:c5:a8:53:c9:e9:2e:73:3d:d8:
e0:64:6c:64:05:72:79:cb:ce:52:a5:d0:93:d9:0a:
d6:25:8c:5f:50:1c:12:9d:bb:3a:92:d8:75:2a:55:
9b:e2:f8:8c:f9:6e:f4:ea:8b:2b:5d:f0:2c:30:f4:
4e:5d:f0:d6:ea:e5:cd:b9:a5:75:dd:8e:70:78:c2:
73:a9:d1:1b:1e:60:7d:2f:0f:7c:49:1f:d5:d7:aa:
77:a3:b6:3c:b0:e9:8c:b7:94:3b:b1:58:0d:88:3e:
3f:6e:91:f6:11:78:04:f7:5e:04:be:d8:65:23:ad:
63:48:94:4d:4c:54:8a:bc:48:64:19:8a:0a:bf:89:
80:21:68:11:5e:21:f8:b9:b9:04:3f:dc:37:a8:9b:
de:05:99:a9:1e:0e:ce:7e:4f:fd:72:3c:e3:1f:27:
23:90:63:d0:c8:28:39:4e:4f:88:24:d8:c8:53:13:
67:64:ef:04:ce:30:81:6c:f6:d9:20:d0:7a:a5:16:
21:4b:14:5c:2f:2a:7e:dd:ed:25:ce:65:90:34:17:
cf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:60:3E:D9:72:2E:6B:00:EF:C6:E5:DF:02:79:6F:A4:8C:4B:A5:D9
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:12:0a:49:00:dd:f7:ef:d9:6f:e5:65:54:a6:42:cd:89:11:
27:cb:5e:5d:67:3b:ff:fd:78:a0:c6:0e:2f:3f:55:27:af:da:
73:6a:3d:12:17:05:a4:22:91:8b:9b:9f:a7:5f:12:33:f6:9f:
87:fc:7e:a4:ad:8e:6c:1f:8f:b6:f1:5c:b8:51:ed:37:4a:70:
a6:40:29:70:ae:f9:0b:65:6e:51:3f:f0:06:04:7b:ac:2c:ec:
ac:89:8a:13:e7:c9:8c:51:9f:87:26:fe:16:c7:74:8f:ee:1f:
cb:41:5f:90:c2:11:44:60:a6:28:33:a2:95:6f:9b:87:c1:1e:
15:65:13:a1:e3:7e:13:d1:20:f5:e2:57:0b:32:c1:e7:f8:7d:
16:27:23:a1:98:ff:88:c8:3f:7a:19:aa:2b:ee:b3:fa:f2:4d:
20:5d:28:5b:6a:6f:6b:59:7a:99:fe:58:77:df:04:11:e3:b9:
ea:99:44:f2:83:02:2a:89:6d:3f:86:77:8b:65:e8:b5:fd:87:
65:49:fa:81:ad:a1:b5:03:33:04:83:40:b4:71:94:2f:50:ac:
15:90:b9:db:d2:ec:5d:93:d6:97:22:7d:68:45:7c:0b:07:22:
89:34:d2:4a:78:53:9e:9b:1e:06:a5:19:21:2a:2d:26:1b:c8:
16:08:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:47 2025 by rpki-client