Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier: mqz8eo5Y1fCdbdGK74CX8BE0YMx7fJ15ZaVnAtZcBdU=
Subject key identifier: B9:99:E5:B7:3D:06:DE:5F:F8:2B:28:28:3A:46:33:D8:0E:86:61:ED
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 0194BAF243A13BE6DE6A3784E6116E8B95B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number: 112C
Signing time: Fri 31 Jan 2025 06:00:26 +0000
Manifest this update: Fri 31 Jan 2025 06:00:26 +0000
Manifest next update: Sat 01 Feb 2025 06:00:26 +0000
Files and hashes: 1: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: w0AsAIEizROIZX3ZEkg05QgCGxCvUndft7Fo+TiM4xE=)
2: nnSYLRU9hKxo3UTh-LEIyp0QB5A.roa (hash: V3Ul2Q6lPbgEHnF1LxPYXzGlFtY7Ipl/LIDBFIja0cQ=)
3: zPv_dadT06hNuRKo3iASqBxQSS0.roa (hash: wxHTtDXP3pWqU5npUaGQWQD9gJXDFqHuFN3U69JTSgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:43:a1:3b:e6:de:6a:37:84:e6:11:6e:8b:95:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Jan 31 06:00:26 2025 GMT
Not After : Feb 1 06:00:26 2025 GMT
Subject: CN=b999e5b73d06de5ff82b28283a4633d80e8661ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:db:26:8e:25:a2:6c:52:d0:7d:31:9e:67:
24:8f:d6:22:0c:6c:0e:46:3f:d9:d9:c7:bc:f2:56:
d8:96:9b:98:aa:d1:84:b5:ab:d3:18:49:df:9f:58:
fc:2c:36:0d:35:42:36:f3:7c:5e:b4:7c:33:14:e2:
10:49:e2:f7:17:1a:a6:54:91:28:71:89:26:55:71:
08:06:ad:50:ca:d1:71:aa:02:a4:42:21:78:a2:ac:
48:20:5b:90:43:44:a6:2b:fc:50:06:83:43:96:13:
ac:35:31:57:cc:8c:dc:55:8a:1a:32:98:3b:5a:8c:
9a:21:ad:fb:1a:e4:31:fa:2a:1f:b6:91:f4:c7:3b:
58:02:81:86:13:bb:5f:f7:da:78:66:b0:0c:9b:c3:
25:42:13:40:e1:61:c0:1c:6f:cc:f9:6a:a0:d3:bd:
ec:7c:f0:53:4b:3a:30:2c:a9:40:21:04:c0:70:cb:
8d:79:a2:a0:e5:38:51:03:37:e5:2e:ef:f1:3b:64:
86:c4:f8:d2:57:ed:92:91:c5:84:ef:93:0e:6f:d5:
d2:7c:6d:d7:86:2c:f7:b7:ac:07:a3:1e:b2:4d:b6:
99:99:e5:77:46:14:ea:dc:fc:e6:22:a7:b7:3a:c7:
75:22:b6:c9:ed:8a:39:c4:82:19:0e:35:2c:11:e5:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:99:E5:B7:3D:06:DE:5F:F8:2B:28:28:3A:46:33:D8:0E:86:61:ED
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:42:f6:b1:2e:05:e7:39:a1:35:5b:b5:19:71:cf:62:7a:59:
e9:d2:f2:c9:02:23:a3:4a:4e:51:9b:9b:f6:4d:ad:30:09:b7:
49:2b:da:30:9a:ee:98:5c:eb:6a:13:29:2c:0e:9d:9b:e0:87:
97:17:ad:e2:7c:c0:09:a2:eb:00:05:e2:44:3a:64:57:e1:26:
7d:8b:6b:40:99:38:dc:e7:3f:70:68:77:0b:04:0b:ed:ad:a8:
7e:2c:54:7a:43:0b:c9:eb:89:3b:f9:da:a7:74:3a:49:f5:44:
45:d3:93:20:5b:24:9f:c3:fe:f8:79:c5:e7:fc:c4:f2:ba:9e:
5f:56:82:92:aa:a8:a8:e2:f1:9e:28:0a:47:0f:6d:ed:7a:25:
5c:70:1c:e2:28:95:01:e4:21:c3:2f:18:bc:31:f5:18:aa:99:
b6:74:40:c8:dd:a8:16:50:b4:2c:d1:b1:b9:7e:9f:d0:5d:0b:
c7:20:c4:0d:74:03:2b:d1:25:3e:61:d9:f6:70:1a:dd:1a:5d:
6b:58:45:a7:ea:db:61:b3:b2:f1:17:42:98:f7:89:9b:e7:27:
ed:4e:f4:67:7a:87:bb:99:e1:67:da:ee:00:a6:8a:6e:88:25:
06:12:4a:44:92:b6:09:fc:f8:83:22:cc:a3:9a:3e:6c:f3:6f:
2f:02:b0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:15 2025 by rpki-client on console-fra.rpki-client.org