Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
File: ndVRnFTz4jtOEhKogIM58pXaSzQ.mft (raw, json)
Hash identifier: 3BX64QoRFFHAzrmLveC5qH7809o+ruTl10Zw0suzlTw=
Subject key identifier: 04:72:3B:97:F5:C5:25:5C:2A:38:24:C8:A8:D4:D5:24:78:F3:8B:9B
Authority key identifier: 9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
Certificate issuer: /CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Certificate serial: 0194BABB8DC7E354128A217128617ABA6185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 05:00:41 +0000
Manifest this update: Fri 31 Jan 2025 05:00:41 +0000
Manifest next update: Sat 01 Feb 2025 05:00:41 +0000
Files and hashes: 1: ndVRnFTz4jtOEhKogIM58pXaSzQ.crl (hash: F3981bs9BpqFUMRB6ifUtWkw+HKU0iS38SA31Bm6joU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:8d:c7:e3:54:12:8a:21:71:28:61:7a:ba:61:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Validity
Not Before: Jan 31 05:00:41 2025 GMT
Not After : Feb 1 05:00:41 2025 GMT
Subject: CN=04723b97f5c5255c2a3824c8a8d4d52478f38b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:f1:b5:2e:0f:b0:ec:0c:0c:74:d8:80:c8:
98:bb:59:3f:da:44:40:d7:1e:49:19:07:14:d4:d5:
96:60:62:3f:58:22:9a:0d:02:ba:65:63:98:b1:66:
49:fc:9c:dd:9d:1f:7f:ee:15:c1:2c:01:59:3e:cb:
c0:26:c6:57:25:79:10:f4:66:2d:47:39:50:5a:6d:
28:4f:ea:39:59:d5:cd:0e:ec:83:a5:22:ca:ad:4d:
4f:b8:df:2d:f4:da:69:40:6c:44:5f:ae:4b:0d:d6:
e0:aa:ec:dd:46:ce:32:d9:4a:59:bf:d0:38:cc:e2:
9e:fa:6d:d8:87:d3:83:48:b5:1d:2d:52:ec:21:99:
f7:27:ba:79:bc:63:ba:c0:8a:e7:81:06:48:10:dd:
71:ea:0a:d1:8f:c2:eb:09:10:7d:fd:3e:47:d6:e0:
fb:aa:ae:0f:ef:d9:a6:ab:38:f4:c0:27:a5:9a:2c:
cc:ad:a7:43:79:a4:6f:8b:4e:24:68:7e:6b:f9:39:
4a:51:63:99:9c:b1:9b:9a:3d:4f:f4:4f:c4:b5:9f:
05:cf:d1:ee:25:6f:a8:12:a9:d1:b7:96:f4:18:da:
10:e1:e2:bc:e9:c2:4d:57:76:83:c4:bd:c9:7a:03:
30:8b:33:ee:fc:6b:f9:b7:52:b7:63:fa:91:b4:a6:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:72:3B:97:F5:C5:25:5C:2A:38:24:C8:A8:D4:D5:24:78:F3:8B:9B
X509v3 Authority Key Identifier:
keyid:9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:96:fa:41:4e:9c:a9:f4:51:dc:54:2e:8e:32:d5:89:f8:f7:
0d:f4:30:3b:76:34:6a:de:1d:77:50:fc:0b:e9:c4:63:00:7c:
8c:0c:65:09:ff:f4:94:23:8d:a7:eb:1c:75:61:3d:66:90:d3:
d4:a7:2a:a2:9b:56:8d:3c:9a:1d:ec:5e:b1:f0:db:84:03:a3:
e5:a6:9a:2c:b3:5f:36:4d:c7:d8:3c:4f:af:97:68:f6:39:85:
38:21:94:a6:52:3b:23:71:0d:7b:b3:d8:e7:91:21:1f:a3:7d:
11:e3:35:74:f2:08:34:f0:fb:ee:99:7c:4c:10:40:18:ed:bb:
e1:51:ec:fc:c2:7e:fc:fb:9f:17:24:ff:c6:12:aa:ae:39:4f:
61:7b:c4:7f:6e:87:c7:8d:e8:7e:2f:9a:b0:0c:20:a6:3b:c0:
9d:73:af:c1:7f:08:5c:17:b6:4e:ee:7d:73:37:f4:45:6c:e1:
f6:12:47:f6:0f:c9:1a:e0:ac:96:46:d0:10:ed:21:04:39:73:
bf:11:21:8c:04:a5:19:13:b2:5f:f4:f6:76:24:52:0c:e9:ba:
a9:6a:a4:9c:d8:8d:54:46:48:38:1b:ef:17:70:e0:11:c5:98:
d6:f0:f8:84:91:24:3a:a1:4f:07:40:fd:d6:79:ab:e9:ab:7c:
88:25:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:20 2025 by rpki-client on console-fra.rpki-client.org