Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File: 0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier: cElXqnTBYdMLAkbBnM2/XzYuzld4AL5KNvoNM9xBpkE=
Subject key identifier: 87:0A:E5:EB:6A:A9:A7:E8:A8:01:DF:0F:03:E2:A7:48:C0:10:2A:3E
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer: /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial: 0194BB972A77B3AD345CF11EEE43AACF7B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 09:00:33 +0000
Manifest this update: Fri 31 Jan 2025 09:00:33 +0000
Manifest next update: Sat 01 Feb 2025 09:00:33 +0000
Files and hashes: 1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: iOu1r8cwWtjWiYhyeAGqx6zAO1yy0+litNOyAk4k5EY=)
2: YlrLpRr6jHVjZjhSp57OuuJNoDA.roa (hash: 3sLpE4GcZV46VhUEypK4IVzC6Mp0SDmiK7VScSwFOfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:2a:77:b3:ad:34:5c:f1:1e:ee:43:aa:cf:7b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Validity
Not Before: Jan 31 09:00:33 2025 GMT
Not After : Feb 1 09:00:33 2025 GMT
Subject: CN=870ae5eb6aa9a7e8a801df0f03e2a748c0102a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:eb:37:82:ff:ef:5a:35:05:f6:b8:94:24:
39:13:47:25:15:6b:3b:1b:a9:41:62:e6:f7:7f:19:
e2:9b:a4:01:7c:71:c9:d2:1a:27:06:69:b9:4e:7d:
5b:a6:5d:78:7e:c2:c4:2b:a4:c5:df:14:b2:63:ce:
73:db:3a:26:94:81:cc:fd:4e:a4:bf:a5:86:69:53:
10:21:49:46:a4:a0:97:79:9b:c9:fe:85:95:1d:ff:
06:4d:07:66:e7:3d:89:b9:cb:9e:87:11:e9:7e:f1:
41:61:98:f7:33:77:ad:ad:1c:f3:b5:a9:89:b1:94:
70:67:92:bb:73:ed:5c:d1:47:6c:c7:a0:e0:3d:cf:
9c:5b:cc:e6:83:5c:8d:c4:62:ab:24:04:0c:14:b5:
12:8d:ff:65:d8:46:aa:88:17:ad:ed:7f:18:90:34:
f6:4b:d6:c3:63:35:90:e2:dd:5d:af:b1:3f:db:a6:
13:ec:0f:47:88:7c:6e:5a:c1:33:06:5a:bd:7a:2f:
85:98:07:32:da:fd:6c:cc:47:e7:3f:af:9c:71:8e:
f1:1e:04:31:a4:3e:46:f1:bb:d0:0c:de:ad:8c:a3:
ec:52:48:b4:d1:89:f4:5d:53:7d:94:8d:fd:a6:d4:
3e:ea:3f:d5:71:34:c6:ba:63:98:62:80:fe:3d:0e:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0A:E5:EB:6A:A9:A7:E8:A8:01:DF:0F:03:E2:A7:48:C0:10:2A:3E
X509v3 Authority Key Identifier:
keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cd:5b:b9:d1:3c:9f:61:b7:e4:f5:f4:c1:9f:7d:45:bf:66:
24:47:8a:e2:98:56:3a:b1:1c:02:b7:4a:76:6d:e5:3b:9d:0f:
36:33:65:99:ff:ec:fe:31:04:d7:5f:f0:27:48:10:bc:11:0a:
c8:12:52:e7:68:30:7d:9a:f7:ba:87:5e:33:e4:e4:de:ff:54:
6b:ef:b9:d6:5f:b4:d4:51:14:90:df:c2:a8:64:3e:5d:94:b2:
44:37:8c:4b:0a:16:ff:83:d2:3a:e4:79:51:7d:6a:14:4e:41:
56:29:65:c1:1c:3a:46:70:a8:17:23:b1:f8:a9:ca:9d:f5:85:
5e:e7:bc:1b:e6:8b:35:78:3b:e9:57:72:19:96:96:76:2f:7b:
f2:8a:0b:dc:b9:c6:9e:94:33:99:08:30:93:6a:10:0a:f3:ba:
cb:da:b3:4e:da:7b:c7:29:09:f6:2c:de:67:5a:8e:81:75:6d:
6d:fc:ec:f3:e7:07:00:be:66:34:ec:da:d5:71:47:ad:d8:aa:
ec:12:c2:47:62:37:f6:fc:67:6d:78:ce:bd:f5:43:da:f8:73:
e4:5a:15:27:46:81:2f:77:6b:a3:19:ca:c3:49:8c:40:08:20:
82:84:f9:54:95:24:89:ce:fd:4c:0f:9b:ec:b6:0d:d2:6e:9c:
6f:a8:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:29 2025 by rpki-client on console-fra.rpki-client.org