Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
File: nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json)
Hash identifier: unLgeHo5h7tBshueeyzpKOX89mnyrKoxOBUw5mZ6NcE=
Subject key identifier: AB:75:54:69:70:34:99:4D:E6:7F:66:DA:DE:83:B2:CD:D7:48:D2:62
Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
Certificate issuer: /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Certificate serial: 0194BB2936B7DBAEB586A44D5546C63AAC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
Manifest number: 0378
Signing time: Fri 31 Jan 2025 07:00:27 +0000
Manifest this update: Fri 31 Jan 2025 07:00:27 +0000
Manifest next update: Sat 01 Feb 2025 07:00:27 +0000
Files and hashes: 1: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: E0K4tnDd1aMeeb+xp/IvFPX2h2mg0qIJFkTEkXzQDJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:36:b7:db:ae:b5:86:a4:4d:55:46:c6:3a:ac:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Validity
Not Before: Jan 31 07:00:27 2025 GMT
Not After : Feb 1 07:00:27 2025 GMT
Subject: CN=ab7554697034994de67f66dade83b2cdd748d262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:4b:50:20:04:20:27:91:2e:f1:bb:53:0a:
c5:78:a1:76:17:2f:64:82:d5:43:13:78:2c:ee:6f:
1b:4b:98:f5:4c:da:82:c9:8e:25:bd:d4:c2:aa:c6:
99:f9:ae:ee:79:b4:3a:9f:d3:c6:ce:ab:b0:23:ed:
e3:27:51:ed:ef:9e:d6:58:93:37:fb:a7:d5:6d:93:
8c:11:ed:54:b0:7d:15:75:8e:1a:b7:3c:77:16:0a:
e9:98:27:a6:00:e0:63:17:33:11:4e:22:0a:07:60:
2a:3a:49:91:d1:71:ce:44:cc:10:38:bd:4b:24:68:
aa:89:9f:90:2c:70:ae:aa:7a:e8:9f:9f:e0:e6:42:
36:0b:ca:5b:2a:1b:61:8b:75:63:d3:b5:23:45:d3:
59:d8:bc:9e:70:06:b0:db:3e:f4:7c:af:ac:2f:f0:
76:3b:3b:41:5b:b0:8d:25:cb:3c:f6:4c:4a:2f:ca:
42:5f:44:48:83:7a:66:b4:ec:03:24:59:d0:27:52:
b5:14:e0:df:e1:fe:8b:db:56:1a:4d:6d:76:7a:ca:
cf:a8:33:26:95:f5:61:7a:41:2f:57:ad:f2:7b:34:
e3:55:d1:1b:58:c4:14:66:41:a8:67:1e:18:80:c3:
88:46:b4:02:80:fe:52:44:c4:9f:f3:df:56:38:91:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:75:54:69:70:34:99:4D:E6:7F:66:DA:DE:83:B2:CD:D7:48:D2:62
X509v3 Authority Key Identifier:
keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5b:52:cc:2d:55:eb:b5:2a:26:dc:e5:9f:87:46:e4:b5:6a:
30:ae:a6:b5:dd:1e:0e:0e:ae:ef:99:91:71:8d:3c:97:1c:45:
be:27:5e:7d:ae:d8:d4:4a:76:24:88:f1:f9:59:7b:4f:5f:51:
c9:f6:0f:b5:b2:97:ff:79:24:34:84:04:8f:f4:f7:14:0d:96:
a0:f1:54:83:82:67:14:42:a2:e0:77:f3:38:44:ba:e7:c0:75:
3d:eb:4f:89:c8:47:c1:78:a0:c1:c1:48:d0:9c:bb:08:25:c0:
01:b9:fa:b0:f5:28:38:92:b7:1b:75:b8:46:c0:0c:75:8e:b3:
18:4d:70:4a:a6:39:da:c6:aa:ea:e1:90:b2:99:83:1d:79:2e:
6c:8a:44:f1:38:57:4d:b5:98:c1:53:33:f4:93:6f:b3:50:16:
84:f3:f8:28:3d:bf:df:6a:21:24:e2:78:30:69:f6:da:eb:5c:
ef:56:e2:6e:be:86:9a:68:cb:3b:b9:7a:06:8a:3b:57:0e:97:
75:aa:56:96:3a:91:f8:6e:a7:83:de:45:67:db:cc:1d:27:5e:
63:d4:ce:e2:91:30:62:6b:62:8b:9c:fd:90:db:2c:c7:8d:38:
81:97:6a:ef:f1:df:7d:fc:86:7a:6e:58:b8:ce:60:db:b4:26:
ce:ab:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:22 2025 by rpki-client on console-fra.rpki-client.org