Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier: 9/hU9VHgFHrr+mXQKDR2ztiOVsRWFSUrUcf1c1SsyVI=
Subject key identifier: B5:A2:9E:B1:C5:0F:00:E4:E7:59:2C:47:1A:4E:D9:0E:D1:85:62:7F
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial: 0194C3F612882B6F7A3263EB1E2101E1D9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number: 142A
Signing time: Sun 02 Feb 2025 00:01:11 +0000
Manifest this update: Sun 02 Feb 2025 00:01:11 +0000
Manifest next update: Mon 03 Feb 2025 00:01:11 +0000
Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: tofAkQhhjv8k3dfrVK88Jh8JgtxFfzdVagsqARKlSW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:12:88:2b:6f:7a:32:63:eb:1e:21:01:e1:d9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Validity
Not Before: Feb 2 00:01:11 2025 GMT
Not After : Feb 3 00:01:11 2025 GMT
Subject: CN=b5a29eb1c50f00e4e7592c471a4ed90ed185627f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:93:ba:27:ed:ca:42:bc:87:36:85:a5:2d:
e6:ba:f5:78:c4:f8:f1:4a:86:08:19:5a:4f:7e:a0:
f5:77:45:ec:7e:65:d1:b8:0a:08:13:cf:ee:77:78:
28:77:2a:c0:96:7a:24:ea:83:25:75:45:c5:13:87:
61:aa:ca:a4:80:56:21:50:f8:b1:47:25:f9:9a:d4:
a0:3e:84:ef:a2:d3:19:85:a5:56:74:0d:34:f6:89:
20:61:0c:b9:10:71:14:99:9e:9b:9b:c7:3b:a9:ef:
e7:1b:05:86:13:67:66:2a:45:e1:7f:b2:3b:70:fc:
a8:d4:a9:a7:65:61:1d:d7:03:c6:34:03:97:b9:b0:
d8:2b:71:5a:62:54:c3:ff:59:46:05:3f:ef:2a:b6:
e5:e0:19:de:4c:26:28:80:f1:d4:e1:a2:c3:a2:64:
e1:5c:1c:e5:c4:e4:31:ac:65:98:d5:fc:4f:2d:52:
31:12:5d:ac:1f:de:33:dd:ad:7f:77:1c:10:93:f7:
83:96:ea:a8:67:31:36:76:73:eb:0e:83:3b:62:d6:
12:45:c5:95:65:7f:de:d9:07:8c:ff:4d:c8:7d:03:
31:65:64:58:2a:81:47:0c:42:c6:04:c8:cc:a3:d2:
77:53:ff:ca:02:48:f9:f0:f9:fe:e0:b2:30:55:35:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A2:9E:B1:C5:0F:00:E4:E7:59:2C:47:1A:4E:D9:0E:D1:85:62:7F
X509v3 Authority Key Identifier:
keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:23:4b:18:ef:20:37:27:d8:3b:77:a7:24:32:05:1f:f6:8e:
9c:1e:73:66:f9:8e:76:c6:c1:73:6a:4f:7a:5d:15:c9:c1:52:
e9:75:66:9f:e4:12:9a:7b:ea:19:05:91:ea:64:b9:d9:84:c7:
5f:75:00:08:42:1a:0a:bd:70:ae:27:27:23:b6:6b:75:69:0f:
ef:3e:33:71:e1:0a:46:95:28:96:41:79:81:e0:18:a4:ca:68:
ec:a0:e5:05:78:17:79:ff:8a:fa:e7:ed:cb:5a:d2:07:84:f6:
88:46:c7:bd:45:0d:8c:25:09:36:54:3b:0b:33:bc:f5:03:7f:
c9:71:28:3e:b7:af:b7:a9:ec:0e:71:b2:c3:11:02:b3:f5:4e:
20:44:dd:73:b1:6d:66:d1:fa:ca:0a:b7:65:20:6f:ed:5c:42:
f0:df:bb:d0:c6:03:d9:87:0d:b6:32:a5:58:1d:b8:1a:c1:19:
f6:8b:7c:bc:22:8b:70:2f:62:fc:68:25:f2:e4:80:dc:f8:87:
8f:e8:f6:e4:12:4e:d9:b6:c5:00:e3:10:eb:3c:1b:7f:0d:9b:
5d:ef:90:9f:b1:10:94:04:69:38:60:28:80:ee:f5:23:38:59:
c2:c5:73:b4:15:d8:14:b8:e6:4f:68:f0:d7:b4:26:84:ec:5b:
7d:3c:e6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:30 2025 by rpki-client