Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier: 2PKbtZMm2KIaUYyTe19wUOZZcCjIf1VEqQL+RmEue+8=
Subject key identifier: D7:F1:67:CB:1F:6F:A6:DD:7E:B3:88:4F:2E:0C:2E:D5:B7:50:EC:26
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 0194BABB9717557F935D149CAAFC2C3D4985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 05:00:43 +0000
Manifest this update: Fri 31 Jan 2025 05:00:43 +0000
Manifest next update: Sat 01 Feb 2025 05:00:43 +0000
Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: vHARyl7vGPy27DGIcxW53TV94ZU27igEM4LxwZ/ssNw=)
2: kVipI_xyp0_kuJlOJOnoAHsePks.roa (hash: 1FUuhHfAvSDiWJAZOii+4sL3nFhAdH6ZW0fC89DJLKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:97:17:55:7f:93:5d:14:9c:aa:fc:2c:3d:49:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Jan 31 05:00:43 2025 GMT
Not After : Feb 1 05:00:43 2025 GMT
Subject: CN=d7f167cb1f6fa6dd7eb3884f2e0c2ed5b750ec26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:a7:cf:aa:c1:b7:a2:76:a2:d2:71:e2:db:
71:46:d9:53:f8:69:8b:ff:30:16:3a:34:43:58:95:
7f:37:97:e3:d9:86:b6:21:e8:21:b3:db:d4:23:82:
57:66:cb:87:41:21:f9:e9:0a:82:91:91:0c:78:14:
56:e6:25:e2:2c:ee:43:2e:b6:b8:d5:32:31:c4:87:
ff:30:d5:d0:22:71:39:25:76:2f:d8:b5:b2:6f:44:
08:0f:44:75:9d:a9:8c:69:a1:0f:69:9b:49:23:17:
02:78:65:50:19:0d:4d:a5:65:de:30:39:a8:77:4c:
03:32:c2:08:bc:e8:7d:cb:76:f5:d1:9b:d5:7d:54:
f4:d1:41:38:58:10:33:88:01:90:7e:26:8b:f5:0d:
a6:f9:f2:cd:58:78:84:83:0d:e8:8a:3a:93:0e:f3:
8c:72:c1:37:07:aa:20:ab:37:0c:b5:e0:83:4c:91:
9f:d0:a5:84:61:7b:dc:e3:93:61:3a:29:20:ad:7b:
dc:36:fe:e0:6f:9e:0d:91:4d:1a:07:11:66:0c:cf:
0d:fe:df:84:3f:ee:40:1b:6b:b4:3a:e1:78:35:87:
b9:dd:17:95:a8:0f:2e:77:a9:57:44:6e:15:f3:0e:
68:fa:39:68:f8:4b:7e:06:47:d1:62:d3:84:89:5e:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F1:67:CB:1F:6F:A6:DD:7E:B3:88:4F:2E:0C:2E:D5:B7:50:EC:26
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f6:38:2f:83:ba:66:93:36:33:45:9c:2f:da:f5:24:be:f3:
6f:81:27:cd:47:a2:68:68:5a:06:d4:b8:f1:9b:b4:3e:a0:bf:
83:f6:f0:9d:c4:20:67:0a:25:ae:08:78:f2:49:76:40:25:3c:
d1:82:6a:b2:bf:b2:4d:04:22:d8:de:e6:79:81:f7:62:ff:93:
61:0a:a6:90:8f:97:d4:7b:67:73:da:cf:c4:dd:58:74:7c:70:
70:be:e5:12:bd:93:67:c5:10:2f:a4:6f:2c:07:91:b6:27:22:
39:01:2c:33:c1:fe:da:91:2d:65:30:1c:39:4a:a1:48:b7:e8:
96:30:0e:75:e0:4e:fd:2b:c9:52:a2:21:a5:fa:03:c0:d4:25:
f9:e5:ce:2c:42:41:12:6f:07:af:5e:bb:52:f8:b9:b7:22:8d:
c9:ec:55:48:fa:c0:e0:78:4c:cb:a3:88:74:6b:e3:0b:fd:d0:
7e:17:12:45:ef:53:3f:7b:85:44:be:68:c5:25:89:75:c9:af:
97:91:d0:2b:6d:b8:68:3b:4a:dc:5c:6e:32:2d:65:55:07:56:
e4:b6:a0:99:e0:bd:d0:0c:36:9b:2e:18:ed:e7:e7:dc:11:67:
5d:50:18:7a:74:1b:20:db:71:44:1d:05:41:e3:fc:e6:6b:b1:
e1:90:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:33 2025 by rpki-client on console-fra.rpki-client.org