Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
File: nmw2D-XITxlWHHrpu89PnPpHi08.mft (raw, json)
Hash identifier: 8V3oPTw/dORFwKmEvl0qgm1M8XVrLfAU3lkbEk6ZcIA=
Subject key identifier: 97:FF:35:91:2C:04:87:8F:07:A1:54:CA:FD:EB:5C:3B:09:26:79:61
Authority key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Certificate issuer: /CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Certificate serial: 0194BB291160840F1EF13617977EC8AF396B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
Manifest number: 06E1
Signing time: Fri 31 Jan 2025 07:00:18 +0000
Manifest this update: Fri 31 Jan 2025 07:00:18 +0000
Manifest next update: Sat 01 Feb 2025 07:00:18 +0000
Files and hashes: 1: nmw2D-XITxlWHHrpu89PnPpHi08.crl (hash: ke1b2i1+EHgePLzS21Dbe4NBt3ScxQBe8QRUCBK3auM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:11:60:84:0f:1e:f1:36:17:97:7e:c8:af:39:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Validity
Not Before: Jan 31 07:00:18 2025 GMT
Not After : Feb 1 07:00:18 2025 GMT
Subject: CN=97ff35912c04878f07a154cafdeb5c3b09267961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:d1:51:75:b8:f4:03:bd:b3:0e:2a:5b:4b:
d9:ad:cc:b0:65:c6:14:77:01:3a:19:7e:f6:75:35:
9c:5e:ae:7a:37:41:46:2c:ff:e4:74:78:34:6d:58:
cd:10:19:2a:af:e9:c0:b5:69:96:eb:bb:4c:6d:98:
f7:f1:74:a0:be:93:3a:7c:c3:ec:a7:5f:13:eb:26:
51:87:37:da:cb:fe:93:7c:ac:de:b8:d6:3e:66:0b:
d7:36:f2:23:43:cd:a5:ab:5e:55:c7:f0:f4:36:ac:
47:a5:29:5c:c7:a9:41:0d:5f:83:ac:8f:11:49:a4:
19:aa:d3:79:d8:55:c7:d2:63:63:06:47:e4:f0:20:
67:d7:76:93:11:65:c8:cf:59:6b:0c:dd:41:b5:54:
37:70:14:af:6f:41:91:84:2d:d9:f1:25:d5:77:9a:
bd:d6:b3:90:c3:76:4c:aa:a7:cf:99:da:3f:b9:4a:
b6:1c:28:54:be:1e:32:f8:94:06:98:87:e8:b5:b5:
2f:68:9c:67:05:80:13:e8:ae:d6:e4:91:2a:f0:2f:
c9:45:3c:7b:30:fb:9d:9f:ac:c9:db:09:3b:50:a7:
e5:22:74:93:9c:d4:ea:61:cc:c9:2c:98:19:0e:a0:
3d:14:2a:cc:22:bb:36:c7:45:31:36:7f:9b:26:77:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FF:35:91:2C:04:87:8F:07:A1:54:CA:FD:EB:5C:3B:09:26:79:61
X509v3 Authority Key Identifier:
keyid:9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4c:32:81:98:27:b6:ef:51:5f:9d:ab:09:26:05:73:50:3c:
d0:e5:20:7c:4e:31:62:4a:95:7f:8f:b9:86:43:bb:ec:91:09:
38:23:92:4e:2f:9c:1c:2a:cb:2e:de:37:22:46:05:88:00:7c:
be:54:09:05:5b:20:f5:5c:ed:32:8c:5c:e8:af:f8:ec:62:87:
b2:74:71:58:77:1f:94:11:f5:0a:3a:e6:10:b3:6d:7e:96:2f:
1f:5b:41:20:7a:41:a1:5e:9e:28:69:3a:47:bb:06:e6:f8:08:
c8:55:d8:05:53:32:78:c1:d1:ea:d9:64:30:67:98:6e:0d:41:
f0:60:25:80:14:bb:db:86:67:b3:03:8b:27:f0:46:75:ca:51:
c3:40:07:d4:9c:b7:ba:9f:2c:e1:ab:cb:08:e1:84:38:06:d9:
16:7c:82:11:1c:6a:49:17:df:d9:cd:5e:dc:ec:66:77:51:60:
e6:4d:9e:5c:ee:61:b1:51:03:10:09:60:e2:2f:6f:4f:74:51:
83:aa:30:c4:c3:d2:cf:b3:f3:52:08:6f:a3:28:99:1e:8a:8a:
32:bd:a9:4b:24:79:5d:a4:a5:fa:aa:44:ef:1d:94:3a:5e:ff:
10:59:37:d7:2f:f1:7a:06:1e:5d:27:4b:05:c0:54:af:d8:13:
ee:7c:2d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:57 2025 by rpki-client on console-fra.rpki-client.org