Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier: cODDFuKYL8m/R+VWis2rKtREHhvnBPkhI1BtiBhfAFQ=
Subject key identifier: C1:5B:36:7E:C6:F0:22:6E:52:D8:65:62:51:27:D6:52:C9:F5:93:D3
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial: 0194C4D12DC9F795B6DA698E88E87207253C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number: 0254
Signing time: Sun 02 Feb 2025 04:00:30 +0000
Manifest this update: Sun 02 Feb 2025 04:00:30 +0000
Manifest next update: Mon 03 Feb 2025 04:00:30 +0000
Files and hashes: 1: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: R31Fz/jkyLtuCMmZBfPnPzaRpTsWJvr/sS6wIIQseVA=)
2: hr1FzTLzhvjdHRGQawXaK0XuGQ4.roa (hash: wRJW1xVVLpDSguuiY7y5qT4f4RgVOBoZp/PuXmFp+qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:2d:c9:f7:95:b6:da:69:8e:88:e8:72:07:25:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
Validity
Not Before: Feb 2 04:00:30 2025 GMT
Not After : Feb 3 04:00:30 2025 GMT
Subject: CN=c15b367ec6f0226e52d865625127d652c9f593d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:68:c3:e0:36:93:8a:a0:11:dd:45:dd:f5:
86:d3:ec:f4:bf:37:5e:60:19:68:73:d6:69:71:af:
2c:41:8d:7b:55:77:8e:ab:df:25:01:4e:bf:d9:23:
d1:e8:fc:25:45:b7:f6:82:ea:a3:09:88:a0:6e:0a:
81:f1:d5:41:54:dd:70:6f:b0:32:b4:cb:40:d1:06:
0b:6e:91:fd:1c:69:01:4b:51:1a:5e:68:9f:fa:b2:
56:7c:b2:e4:f8:d3:9d:f4:3f:ec:23:d7:81:ac:79:
32:6e:04:a6:06:22:23:48:f7:00:09:41:18:34:94:
8e:ed:4b:2f:47:b7:2c:a9:7b:59:4b:d7:2e:85:6c:
12:65:b8:3b:41:af:4a:32:cd:96:d3:f5:44:12:bb:
5e:49:c2:6b:a7:27:30:05:cc:b7:3e:28:82:ad:4b:
2c:7f:ff:95:15:b1:b8:6e:b8:25:8e:a0:6e:f1:58:
67:03:76:90:2c:7a:22:d0:e3:d6:7f:09:a2:0b:c9:
62:5c:40:fa:c4:3a:f4:93:59:f8:a9:01:82:1e:aa:
a0:98:16:b9:66:a0:bc:b2:48:f5:38:82:b1:92:21:
20:a2:38:ae:81:c0:14:09:b4:61:f1:d1:8c:c5:12:
39:c0:a7:bb:cd:3f:bb:51:0c:a5:8c:51:21:c7:e7:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5B:36:7E:C6:F0:22:6E:52:D8:65:62:51:27:D6:52:C9:F5:93:D3
X509v3 Authority Key Identifier:
keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d5:66:6b:8a:af:eb:e9:4c:52:b7:cd:c6:11:53:4e:84:2e:
c9:b8:e5:52:7c:13:2b:cd:27:4a:0a:15:f5:4f:cc:65:af:d9:
29:09:a2:7b:33:37:a7:ef:cb:5c:6c:b4:79:00:2d:91:73:a0:
f1:89:d8:f5:bd:27:5e:4a:a4:6f:f6:7d:ec:94:1c:73:6a:0a:
37:74:28:fc:f4:fe:db:31:37:1a:2e:e2:1c:19:03:12:b0:2e:
33:14:4e:7e:96:66:89:a5:08:ac:c2:09:cf:5f:cf:9b:20:87:
9e:2a:89:52:ee:58:2f:48:63:33:98:93:3d:48:fd:4d:e4:58:
7f:8d:49:51:45:60:4f:9a:6c:81:29:3b:22:89:2b:27:94:14:
99:70:6e:8b:f4:68:2a:4b:7e:46:1b:c8:cf:7d:49:d6:db:c0:
f3:4b:16:86:00:5a:c7:71:d6:21:69:6a:47:dd:27:91:64:5e:
32:6e:c6:f6:54:c7:c0:15:06:12:6f:91:19:a8:f4:74:9c:e0:
e3:ad:97:f6:e9:41:a8:90:7a:3f:c7:32:49:b7:91:2b:59:34:
0d:32:f3:49:a4:00:3b:81:e5:23:20:87:b4:0d:e1:a3:84:3c:
a7:9a:20:76:bf:ee:86:df:94:72:29:3e:ac:c2:e9:11:c3:93:
86:d8:89:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:33 2025 by rpki-client