Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier: IskCxDflPtmhx4pC5os2HyuYP5oIszGN9ZmDCKIYbak=
Subject key identifier: 22:1E:F7:DB:AB:B9:01:D9:02:C1:B2:2A:BD:BB:59:5D:05:C7:C0:39
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 0194BB29647064EC70A087E9CDC31323E354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number: 135B
Signing time: Fri 31 Jan 2025 07:00:39 +0000
Manifest this update: Fri 31 Jan 2025 07:00:39 +0000
Manifest next update: Sat 01 Feb 2025 07:00:39 +0000
Files and hashes: 1: F8WpKfkO6WPBdgcnLvLi6tQEwfY.roa (hash: aC9X5Qw0ukYXbx0znES1kvpxFjIQA5ZR++ffurv/QKw=)
2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: CvReUAJhN7T4jaDMgrF/j1jmWx5U5I2koqL6QCvQSow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:64:70:64:ec:70:a0:87:e9:cd:c3:13:23:e3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: Jan 31 07:00:39 2025 GMT
Not After : Feb 1 07:00:39 2025 GMT
Subject: CN=221ef7dbabb901d902c1b22abdbb595d05c7c039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:b5:b2:ae:eb:39:d9:77:6f:35:43:40:d7:
41:32:bd:cc:eb:da:b8:24:29:12:c1:28:37:d7:21:
d8:53:2e:0f:b5:e6:8e:b9:f6:26:f0:42:40:77:78:
23:41:68:20:77:36:0a:bc:3c:e6:c1:f1:d0:0b:6a:
5a:6d:ef:b0:3e:94:00:45:9c:4a:76:05:29:d4:9a:
3f:c5:1d:5a:ed:3c:cb:d0:f0:20:aa:72:00:e6:dd:
9e:11:ff:fe:e7:91:cd:37:2e:30:fb:8a:2a:98:88:
28:dc:07:dc:28:50:b2:67:ac:9e:ce:4f:c6:15:44:
fe:d5:c5:35:b1:93:b2:70:af:ab:8b:8d:bd:bf:42:
30:40:53:0b:b5:eb:a2:fb:a1:60:4c:3e:7d:01:41:
a6:21:c9:7a:5a:39:57:32:72:79:fd:14:96:ae:01:
81:45:74:f7:6c:7a:81:ff:8f:1b:4c:f4:d7:51:a0:
ae:bf:d2:7f:25:b6:3e:5a:1c:83:5f:6c:0a:50:91:
4a:70:cb:cc:3f:86:4a:13:09:3e:46:3d:83:0b:9e:
23:d7:80:50:0a:cd:7e:4a:e8:3c:d4:8f:c7:37:d4:
ea:1e:04:d7:f8:52:7a:c9:82:e1:c2:f0:dc:d4:39:
68:97:ce:93:33:86:97:67:cb:28:e8:f8:39:9a:dc:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1E:F7:DB:AB:B9:01:D9:02:C1:B2:2A:BD:BB:59:5D:05:C7:C0:39
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d6:65:ad:e2:4a:87:46:00:5d:f5:a3:b8:d3:6b:c2:c3:fd:
c2:e6:85:10:59:fa:26:bd:80:f6:ec:ee:03:05:93:72:9d:b1:
e3:5a:f6:54:32:7d:a6:b6:08:cd:ee:05:fb:9d:07:06:d4:0b:
ea:98:4e:30:d3:8e:40:ae:a1:51:77:6f:6a:88:53:b9:c7:5b:
ba:16:ac:75:e6:fb:f1:aa:74:08:c5:c2:eb:b3:9d:c4:d5:e3:
95:ec:6b:2d:64:d0:5d:97:ca:0c:d5:35:5d:5a:c8:46:1b:77:
74:39:c3:94:12:18:a9:82:c4:eb:d4:5d:c1:28:e5:cc:02:62:
5a:96:e8:11:a5:db:86:56:69:39:53:d2:69:3b:39:d8:6e:d2:
32:d6:fc:ca:5d:7c:95:f5:57:9b:e4:f6:01:e1:7f:8c:d4:a2:
cb:df:0a:e3:20:4e:07:27:64:96:fe:07:09:3f:d7:e5:68:a9:
10:7d:1d:31:cf:3f:97:a3:1e:e5:b4:d5:86:03:07:64:1e:d9:
30:c1:7a:0c:d6:90:9b:e0:41:e4:2a:db:f5:bc:0e:f4:0c:a2:
22:33:60:31:e8:89:f1:c4:0f:78:7c:58:47:67:d8:1e:0a:ef:
25:30:eb:f8:60:1d:ef:bc:77:bb:f1:d0:cb:85:cc:46:31:9c:
20:62:c9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:27 2025 by rpki-client on console-fra.rpki-client.org