Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
File: NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json)
Hash identifier: YhLs60MZHVyekF+5KVPbL/z892bVV7L7sf/O5TIt3/k=
Subject key identifier: FC:23:9C:28:76:E2:A3:23:08:F2:21:AD:50:2B:91:A2:99:92:7D:B9
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 0194BABB8D5CA6C405150A3D9BB301E24DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
Manifest number: 0DF0
Signing time: Fri 31 Jan 2025 05:00:41 +0000
Manifest this update: Fri 31 Jan 2025 05:00:41 +0000
Manifest next update: Sat 01 Feb 2025 05:00:41 +0000
Files and hashes: 1: IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa (hash: fyR22c3qbngtIbooNJXlmC6fXpgIjnWVTMNZ/hhGG0A=)
2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: K/8mDbctEwooRLSgik7ZWiQ2r/y9lM3wXgZzbxdFLbE=)
3: SAAncdb2H87xzD0WkojsMdkjI9E.roa (hash: bzjggaHNN8SzirhLiuBFGlBjgMu/vnVg8ZfnlYMY9GY=)
4: _E9iapjx7rmdCjMi6lOxJAzw41c.roa (hash: XzeBU1MqaK56hZttRGiRoj2k5rsX6aCywVY+pFC+b8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:8d:5c:a6:c4:05:15:0a:3d:9b:b3:01:e2:4d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Jan 31 05:00:41 2025 GMT
Not After : Feb 1 05:00:41 2025 GMT
Subject: CN=fc239c2876e2a32308f221ad502b91a299927db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:e0:0d:a9:ef:ee:f2:ac:2a:83:20:50:37:
f3:16:60:ad:b4:f5:12:28:c2:8e:bf:57:7d:3c:9f:
e5:02:e9:b2:2f:62:b5:b6:de:ae:da:9b:58:ec:5f:
b5:ca:cb:c3:24:ab:09:3d:79:a6:34:93:33:59:46:
20:ed:0b:38:ca:69:79:f9:1e:46:21:aa:e6:77:b1:
60:0b:b7:39:1d:6a:fa:33:16:37:6f:99:62:55:02:
d1:5d:38:9e:40:15:8d:ab:b7:bf:cb:99:33:26:ed:
0f:76:9f:4c:65:19:76:3e:29:60:9a:54:8d:52:53:
e1:7a:fe:c8:8a:13:f5:5d:f4:08:81:77:73:c3:81:
d9:c2:a4:4d:79:c3:97:96:77:79:98:ad:9e:0f:07:
97:82:d4:4a:a0:f6:8e:c7:15:2a:0b:19:51:b8:02:
d1:5e:68:b6:05:df:f9:38:c0:b5:df:e2:f0:e7:82:
1b:d8:7b:fd:06:ed:7e:e5:cf:04:06:a2:ff:04:31:
c7:85:fa:d3:cd:0f:4f:4c:21:1e:af:1c:f8:43:ab:
d4:8c:10:18:bb:36:4b:e3:19:24:2d:db:a9:38:2c:
4c:76:d6:9c:e5:10:25:bb:3b:6b:63:6e:cf:d0:6d:
62:b7:ed:0f:c3:0a:0b:50:b3:7f:06:b1:f5:3b:0a:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:23:9C:28:76:E2:A3:23:08:F2:21:AD:50:2B:91:A2:99:92:7D:B9
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:68:17:ec:0a:5e:14:ae:b0:bc:a2:b0:e5:19:62:d9:00:68:
e6:6b:09:cf:d1:2b:de:e2:57:1f:96:96:40:54:f7:2b:7b:d3:
6d:7a:e4:92:f3:92:f0:04:6a:5d:00:2d:e0:d1:3c:3f:05:12:
c7:63:ec:45:fc:5f:be:11:2a:7d:a0:50:ff:d5:23:70:aa:79:
6d:9e:44:b6:6b:68:f8:18:f2:b0:f1:dc:7b:2c:ff:f4:31:82:
28:db:b7:2c:ed:c5:ac:31:d6:d8:51:1a:7c:77:d8:50:e6:14:
78:f8:7a:fc:01:a2:69:83:a8:f6:73:a7:b6:08:e4:a3:bd:a2:
d5:a0:fc:d0:3b:92:91:28:65:62:ab:1c:f3:ce:35:f0:4a:60:
7f:eb:9c:ef:24:ba:8c:22:47:79:64:e7:f2:f6:20:f9:cf:d4:
fd:64:fd:39:e6:e0:fd:e9:e9:49:e8:60:5d:58:cd:73:1d:0f:
f1:f0:d9:49:7a:f3:e4:50:45:53:7b:27:c8:3a:3e:a4:0e:c8:
81:31:27:73:99:d2:71:b8:53:97:e6:cc:44:9b:31:6a:08:bf:
88:9d:0a:d0:b0:37:af:c3:2c:a3:55:f4:fe:5d:8b:31:1c:c3:
f0:82:d9:f4:d4:57:51:24:e2:97:a7:75:ca:5b:65:3e:67:d4:
1e:60:50:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u41cpsQFFQo9m7MB4k3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Zjc2MjExZjNjNThmNmM5OGFmOTljZjY1YTZmMWU4ZmY3
YzQzYmEwHhcNMjUwMTMxMDUwMDQxWhcNMjUwMjAxMDUwMDQxWjAzMTEwLwYDVQQD
EyhmYzIzOWMyODc2ZTJhMzIzMDhmMjIxYWQ1MDJiOTFhMjk5OTI3ZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXbgDanv7vKsKoMgUDfzFmCttPUS
KMKOv1d9PJ/lAumyL2K1tt6u2ptY7F+1ysvDJKsJPXmmNJMzWUYg7Qs4yml5+R5G
Iarmd7FgC7c5HWr6MxY3b5liVQLRXTieQBWNq7e/y5kzJu0Pdp9MZRl2PilgmlSN
UlPhev7IihP1XfQIgXdzw4HZwqRNecOXlnd5mK2eDweXgtRKoPaOxxUqCxlRuALR
Xmi2Bd/5OMC13+Lw54Ib2Hv9Bu1+5c8EBqL/BDHHhfrTzQ9PTCEerxz4Q6vUjBAY
uzZL4xkkLdupOCxMdtac5RAluztrY27P0G1it+0PwwoLULN/BrH1OwpXKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwjnCh24qMjCPIhrVArkaKZkn25MB8GA1UdIwQY
MBaAFDb3YhHzxY9smK+Zz2Wm8ej/fEO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9mY2FkMmQtODZkOS00MmIxLWIxMTUt
MmZjZjM5NjI1M2I4LzEvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9mY2FkMmQtODZkOS00MmIxLWIxMTUtMmZjZjM5NjI1M2I4
LzEvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWgX7Ape
FK6wvKKw5Rli2QBo5msJz9Er3uJXH5aWQFT3K3vTbXrkkvOS8ARqXQAt4NE8PwUS
x2PsRfxfvhEqfaBQ/9UjcKp5bZ5Etmto+BjysPHceyz/9DGCKNu3LO3FrDHW2FEa
fHfYUOYUePh6/AGiaYOo9nOntgjko72i1aD80DuSkShlYqsc88418Epgf+uc7yS6
jCJHeWTn8vYg+c/U/WT9Oebg/enpSehgXVjNcx0P8fDZSXrz5FBFU3snyDo+pA7I
gTEnc5nScbhTl+bMRJsxagi/iJ0K0LA3r8Mso1X0/l2LMRzD8ILZ9NRXUSTil6d1
yltlPmfUHmBQyQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:16 2025 by rpki-client on console-fra.rpki-client.org