Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
File: nEswhmFPR4OKPoCj5uBR09imkvk.mft (raw, json)
Hash identifier: b3J46r23+4DkLHqaHHivbgitNi27dfTarLR02bNKhwE=
Subject key identifier: 4D:19:3B:6A:D5:8A:D9:AF:E1:D2:FD:4A:C4:06:7E:6E:8C:BF:01:CB
Authority key identifier: 9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9
Certificate issuer: /CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9
Certificate serial: 0194BB96E71AC326CD27FBEB04BF1830AAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
Manifest number: 0476
Signing time: Fri 31 Jan 2025 09:00:16 +0000
Manifest this update: Fri 31 Jan 2025 09:00:16 +0000
Manifest next update: Sat 01 Feb 2025 09:00:16 +0000
Files and hashes: 1: a_Q0Oj2hhJ8gyCrgqERD5VjhULo.roa (hash: ix5ZmIac7PSSZ8cbH+U6PyHdhcxmOIX450xPjZ8S6o0=)
2: nEswhmFPR4OKPoCj5uBR09imkvk.crl (hash: YVsrepsfYzqyTyBB0nDHt2XMTjxEqnDX0hQfFm4go4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:e7:1a:c3:26:cd:27:fb:eb:04:bf:18:30:aa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9
Validity
Not Before: Jan 31 09:00:16 2025 GMT
Not After : Feb 1 09:00:16 2025 GMT
Subject: CN=4d193b6ad58ad9afe1d2fd4ac4067e6e8cbf01cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:68:55:f8:62:ad:3c:0d:1d:7e:b4:29:70:
8d:a8:01:29:e6:03:a3:bc:11:66:99:32:69:16:b8:
5c:40:7f:d7:62:37:b4:2d:7f:15:f1:63:93:9e:ef:
c3:a4:24:d2:75:c1:eb:b1:80:b3:46:55:4b:e0:e3:
46:1e:91:d1:2a:15:ec:52:66:cd:eb:4b:8d:94:36:
93:24:c3:3a:f8:d5:89:00:8d:f5:c3:16:16:bb:75:
3a:20:04:ef:a7:2f:17:2e:21:a8:f7:93:cb:d7:e6:
c6:ec:5d:35:9e:2d:ca:fd:88:c7:68:d6:af:58:d2:
b1:98:2c:d5:95:2e:34:12:cf:5e:74:c1:3c:89:bd:
6f:8e:54:34:25:47:19:c2:be:64:12:5d:21:a6:c0:
fa:c2:5a:7a:4d:fc:6c:a2:8a:34:eb:09:27:a2:b1:
cf:0f:08:48:33:f3:68:48:2f:00:e0:ab:1e:d1:06:
b2:55:68:9e:7b:26:8a:27:9d:bb:c9:46:33:c6:cb:
76:d1:c3:c6:67:23:d2:e5:75:ee:58:2b:ad:c6:9a:
58:cc:26:39:85:b9:a5:47:d2:72:b9:32:16:da:ad:
60:76:6d:5d:f4:fd:d2:be:aa:0a:23:e1:46:76:5c:
b5:a5:2d:56:f4:28:65:1e:ae:76:3e:04:a7:74:f7:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:19:3B:6A:D5:8A:D9:AF:E1:D2:FD:4A:C4:06:7E:6E:8C:BF:01:CB
X509v3 Authority Key Identifier:
keyid:9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:74:a8:a3:e1:91:8f:01:c5:59:38:85:82:f4:59:70:1c:e3:
6f:d1:07:7e:0a:c2:00:67:6e:8b:49:8a:f2:53:9d:33:c5:94:
c9:c7:3d:7f:55:c0:ab:23:35:af:77:2e:cc:ca:a7:ab:fc:2e:
98:49:d7:0b:fa:c7:a3:40:a1:55:12:cd:4f:a9:c5:1d:35:2a:
85:ac:45:9b:07:ef:ea:64:b5:f7:19:27:e9:cd:f3:12:e8:04:
cc:58:cf:0c:4c:ad:72:49:44:0a:a0:04:3e:aa:b4:b6:e0:cb:
e3:b5:83:37:77:1a:8b:5a:9a:f0:5c:cb:b7:f8:0d:8c:f3:e1:
49:50:d3:05:46:cd:ea:65:d4:50:56:b3:46:72:22:9c:65:23:
91:7d:63:16:1a:c7:e3:e2:0d:77:5e:22:01:71:18:c1:22:c5:
24:0e:d2:86:59:f5:f8:2f:4c:78:09:96:27:65:cf:eb:b1:c2:
71:30:3e:3c:0c:cf:b1:bf:de:3f:a5:0c:9e:4e:25:69:64:e3:
96:74:8b:b1:10:e2:5e:7f:89:5a:31:43:d3:88:88:07:a0:84:
56:96:f3:63:0f:98:de:fe:5b:c5:1b:2b:19:04:c8:98:51:17:
5b:13:c3:47:2f:9e:78:cf:48:36:66:a7:d0:c3:f8:3c:c9:e4:
fa:98:47:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:07 2025 by rpki-client on console-fra.rpki-client.org