Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier: BrNvajJrCWPBDAecoFaxgyqyopHEjWRrdFFQpW0ui/k=
Subject key identifier: EF:56:1F:BE:36:F0:DA:85:FB:3C:74:9B:85:12:51:79:E2:21:1A:BE
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 0194BB5FECFA8431EBD573C4D3B0F000D365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number: 0CED
Signing time: Fri 31 Jan 2025 08:00:13 +0000
Manifest this update: Fri 31 Jan 2025 08:00:13 +0000
Manifest next update: Sat 01 Feb 2025 08:00:13 +0000
Files and hashes: 1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=)
2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=)
3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: mHb5zdQd3l9VdLip2CyaX5XQSTd+A+jh0ZnM0sqGGHY=)
4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:ec:fa:84:31:eb:d5:73:c4:d3:b0:f0:00:d3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Jan 31 08:00:13 2025 GMT
Not After : Feb 1 08:00:13 2025 GMT
Subject: CN=ef561fbe36f0da85fb3c749b85125179e2211abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:29:1d:ab:90:61:09:a6:bb:13:58:be:76:
91:ec:bf:68:9c:e1:eb:ac:5c:8f:fa:ec:db:f8:bb:
e0:a3:a2:e6:e6:ff:ea:e0:03:98:26:27:d3:e8:22:
bd:de:91:7f:63:56:9e:e9:2c:83:74:43:b5:6e:0c:
20:02:dc:9a:bd:1b:4a:97:53:ac:32:88:56:b2:7f:
a8:76:a9:aa:d4:e1:6d:d9:4a:6a:be:66:e5:6a:38:
4b:5e:f7:12:af:62:26:06:6c:60:07:c3:ba:12:24:
62:59:e5:c4:7c:af:3b:d7:ad:21:ef:7f:90:80:2c:
10:f5:7f:f9:49:a9:b5:70:f9:e5:0a:ef:15:39:b1:
c2:00:28:e0:35:06:b7:03:ce:52:29:68:d7:6f:4d:
7d:62:f6:d7:78:e8:2a:3e:80:42:41:80:b7:45:7b:
e5:3c:93:08:9b:64:d1:3d:09:6c:7f:46:2c:ab:9e:
2a:98:53:bd:1e:50:e0:03:bf:59:80:02:fe:87:5e:
2c:a8:55:bf:c5:f9:43:55:44:2a:be:65:cc:33:d8:
56:f4:a0:0e:a7:7f:bf:dd:b5:f5:d2:5e:0e:a0:23:
56:b6:f4:15:b2:7c:fb:1f:fd:02:ff:d1:66:50:45:
b5:15:49:39:8e:8b:60:b0:2f:f4:49:24:72:d0:e3:
01:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:56:1F:BE:36:F0:DA:85:FB:3C:74:9B:85:12:51:79:E2:21:1A:BE
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:37:da:3b:a9:7b:7b:9d:00:2b:49:bd:85:b4:89:2a:73:21:
d5:c0:bf:a3:c6:5d:6f:9f:f9:bc:6f:bc:b9:85:2c:30:92:a7:
60:48:d9:64:3f:c7:7a:63:be:df:77:c4:4f:34:89:9c:3f:d7:
c7:00:ab:87:83:29:53:e4:af:a7:b2:ad:e6:14:5a:26:35:8f:
0c:48:d4:6e:43:5e:b9:63:56:46:3f:ab:61:09:4f:c3:92:46:
d6:18:45:d9:3e:64:65:7c:45:e7:cb:8b:78:d2:fc:b6:8d:b5:
2b:98:52:38:8f:16:28:63:5d:40:4c:7e:f9:75:9f:4f:97:05:
8c:0a:26:ee:16:5d:39:cb:be:bc:2c:cd:77:35:67:fa:ca:ae:
ac:c7:d2:5c:a6:40:23:84:d6:9f:ef:31:ff:2f:28:bd:83:7a:
29:18:03:d7:48:f9:7e:b8:72:87:ee:46:66:f4:42:a8:f8:ba:
16:aa:c2:4f:f8:cf:ee:38:9a:c9:e8:89:fa:b3:9e:ac:87:1c:
e1:b4:f1:78:97:23:c1:d1:2d:61:40:a6:d6:fe:22:64:db:0d:
00:fc:8f:f2:5d:a1:c8:bc:27:65:8f:04:64:14:26:65:8e:10:
25:4a:c6:4b:8e:62:4a:4e:07:9e:bd:6b:e8:9b:7b:94:67:ed:
6c:1f:cc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:29 2025 by rpki-client on console-fra.rpki-client.org