Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json)
Hash identifier: jBRL1F3wDCHYVf1oqACZuh3Jcd97Y5np8rjWCxN+Kd8=
Subject key identifier: 20:F7:20:82:E0:FE:E0:20:B6:67:71:33:64:16:70:51:AB:03:F1:4B
Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Certificate serial: 0194BB290FB9841351144299AA14EBD62A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
Manifest number: 0453
Signing time: Fri 31 Jan 2025 07:00:17 +0000
Manifest this update: Fri 31 Jan 2025 07:00:17 +0000
Manifest next update: Sat 01 Feb 2025 07:00:17 +0000
Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: Q1qaFFIvO1/Tou5bPVMMlvBbNED+D6JSgkuDV/l6m1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:0f:b9:84:13:51:14:42:99:aa:14:eb:d6:2a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Validity
Not Before: Jan 31 07:00:17 2025 GMT
Not After : Feb 1 07:00:17 2025 GMT
Subject: CN=20f72082e0fee020b667713364167051ab03f14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:ba:4b:92:31:6b:4b:a1:d6:76:85:3f:62:
76:db:91:0c:b1:35:a7:07:e6:cb:09:96:4f:80:ed:
74:f0:63:20:15:3d:55:cb:97:49:77:6d:0f:b3:d9:
f2:7b:e7:b3:b5:46:bb:8e:0f:3d:46:56:13:ef:9d:
49:08:9a:a0:64:54:b6:e6:80:50:06:cf:e2:ea:64:
fa:cb:72:d2:d5:62:67:a3:45:bf:df:05:ef:b8:ac:
d9:f2:4d:ff:39:85:fb:74:0b:e1:46:b5:19:c1:bd:
16:ff:bb:e7:b2:56:c4:7d:1a:82:73:a6:bc:49:92:
97:9c:cb:b0:5a:21:78:e6:6b:62:aa:44:44:af:af:
e9:d0:e7:ef:ee:ad:a2:85:24:9a:7d:45:f5:63:e8:
8e:17:25:ca:31:55:44:45:1f:92:7f:69:7b:ea:87:
59:f7:e4:8e:2c:ec:60:50:4e:34:e4:2b:9a:f8:05:
6f:31:4b:2d:2c:b9:a0:bb:af:90:21:84:24:54:bb:
7c:d4:53:42:19:80:cd:fe:6d:70:76:5d:6f:06:4c:
dc:2a:bb:29:b2:a3:fd:15:2c:92:af:75:b6:e9:29:
b8:40:30:1f:51:97:f7:71:f8:da:b3:60:59:3a:50:
c6:15:fd:de:94:75:b7:eb:2e:4b:e4:e7:d1:9f:df:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F7:20:82:E0:FE:E0:20:B6:67:71:33:64:16:70:51:AB:03:F1:4B
X509v3 Authority Key Identifier:
keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:80:15:90:17:64:b4:bc:04:e0:51:d1:88:81:01:d0:e9:70:
8d:04:01:f5:53:49:38:59:4d:1a:39:95:ee:5f:88:da:01:e5:
d2:39:97:0a:ed:a7:7b:6d:5e:b8:c9:69:72:74:fa:b7:f2:8a:
b6:80:18:8a:c7:24:9f:54:6f:30:dc:89:7d:0f:a2:9a:26:7a:
c1:88:db:35:50:84:51:7c:57:11:c4:01:9b:8d:6f:6c:86:ae:
d6:10:83:72:34:16:ff:d9:f8:23:c7:62:e0:63:6f:57:f4:98:
1c:c2:2a:fb:6d:bb:e7:f7:4d:88:66:50:f1:ad:0a:44:9a:d7:
97:58:ae:59:3e:23:1f:2f:31:90:12:d0:a3:42:d4:73:7d:2a:
35:67:81:e1:c8:00:dc:cf:08:2b:7b:2b:c5:c9:67:12:52:0b:
52:75:e4:0f:c5:be:14:49:f9:a1:c7:a2:1a:53:72:ea:76:4f:
ac:39:6d:a6:2f:3f:20:3a:14:27:91:2b:15:26:0a:73:fd:68:
e1:29:4c:34:f3:67:91:b7:42:17:55:b6:84:1e:78:03:29:8b:
97:ef:8a:ee:66:4c:2f:d9:e5:0f:be:1e:99:82:3d:d8:bb:7a:
1c:8a:23:09:39:fa:31:3a:84:5a:e5:9d:35:d8:60:78:1d:7a:
6e:d2:ad:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:08 2025 by rpki-client on console-fra.rpki-client.org